$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/44ced947-ce07-3fa3-9669-c63ed4ee76c4.roa File: 44ced947-ce07-3fa3-9669-c63ed4ee76c4.roa (raw, json) Hash identifier: mjdALr42Q6ainnUBU7M4UgqgD36GoZ2obYz+ENWaG4I= Subject key identifier: CC:77:40:E3:5A:C3:59:C4:DF:09:9C:23:FB:3A:FF:94:0E:6F:C2:C3 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C17E2DECAF82B9A8497E0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/44ced947-ce07-3fa3-9669-c63ed4ee76c4.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 170.89.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:17:e2:de:ca:f8:2b:9a:84:97:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=3d2d5be6-adf6-4122-9ea1-8447a284de24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:11:e8:7e:0c:03:1f:b0:d1:eb:47:77:ac:bd: 6f:6e:9b:db:be:be:b8:7c:09:c4:6f:68:84:68:24: 56:2c:53:80:40:9a:8a:43:d9:1c:93:f9:50:b7:13: 2b:41:29:ff:37:fa:2c:59:f4:af:08:fb:b1:6a:69: 4a:09:94:97:dc:fb:ca:dd:67:41:cf:3c:4a:b6:0e: a6:f4:8c:10:57:54:20:1d:f4:2c:de:1d:1a:87:7d: e2:5f:73:fa:44:8a:e5:11:b6:87:87:2c:e0:fa:a8: 71:ed:70:a9:31:c3:96:c6:88:51:d2:0d:68:a4:d4: 3c:e7:45:4e:44:e3:40:c5:8e:b1:e3:6d:e2:26:94: 6d:25:fe:3e:42:ec:87:d8:6f:b8:d5:91:9f:96:53: ac:64:7b:86:05:87:8d:f7:69:51:8d:2d:06:90:1c: 8f:b6:b0:46:91:f2:2d:2b:48:2c:32:55:a8:36:be: 61:d5:59:bd:69:70:45:f2:15:06:d1:16:70:91:36: 4a:a8:28:d9:de:a4:6e:93:44:d0:d4:cf:53:3a:5d: 41:eb:6a:fe:75:93:29:0e:f5:57:41:5f:43:66:9b: de:15:45:a5:46:12:61:3c:39:f4:83:4b:51:3c:c4: bf:52:c8:a4:d5:24:36:e5:77:55:71:82:19:b9:61: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:77:40:E3:5A:C3:59:C4:DF:09:9C:23:FB:3A:FF:94:0E:6F:C2:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/44ced947-ce07-3fa3-9669-c63ed4ee76c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b7:2f:69:74:d0:03:0a:c6:fa:80:1e:50:f0:90:29:42:62: c7:22:4e:4b:df:7f:55:1b:65:46:7e:90:e8:e1:1b:15:03:9a: a4:b0:a2:c1:87:f7:b9:a7:a9:fc:3c:94:18:f8:ba:64:7a:aa: e2:57:f3:b9:97:30:3e:f3:8b:7b:5b:4f:45:16:59:a0:c5:04: 76:83:42:e0:36:fe:72:9e:01:da:3e:d3:16:61:d4:0a:ee:f8: 7b:c7:f3:45:bf:a6:09:ec:fc:f2:80:c5:07:24:46:31:e6:a1: 7e:33:b3:94:8c:28:e9:2b:31:f6:b3:72:13:92:0a:81:a6:e0: 2b:8b:d4:6a:ec:33:fc:93:61:55:45:5c:fb:4d:1f:64:c1:1b: ee:b6:e6:f6:9f:83:b0:01:1f:47:97:4f:75:16:ff:61:d3:d9: 49:ef:e8:a1:93:87:6e:2f:e0:43:3e:30:22:2b:dd:59:45:17: ec:4c:42:35:37:d1:b6:4a:88:ff:23:52:8d:64:68:ca:c1:a7: 17:3b:b7:d0:26:e6:f0:4d:2c:d4:b7:d9:4c:92:0d:96:99:49: 73:7a:fa:d3:f8:4f:1d:00:29:5f:3d:ec:c1:26:8d:42:2b:a3: 37:f3:8e:db:68:cc:22:22:27:5d:43:9b:60:a2:5a:42:fd:a8: d2:5e:73:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBfi3sr4K5qEl+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk M2QyZDViZTYtYWRmNi00MTIyLTllYTEtODQ0N2EyODRkZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshHofgwDH7DR60d3rL1vbpvbvr64fAnEb2iE aCRWLFOAQJqKQ9kck/lQtxMrQSn/N/osWfSvCPuxamlKCZSX3PvK3WdBzzxKtg6m 9IwQV1QgHfQs3h0ah33iX3P6RIrlEbaHhyzg+qhx7XCpMcOWxohR0g1opNQ850VO RONAxY6x423iJpRtJf4+QuyH2G+41ZGfllOsZHuGBYeN92lRjS0GkByPtrBGkfIt K0gsMlWoNr5h1Vm9aXBF8hUG0RZwkTZKqCjZ3qRuk0TQ1M9TOl1B62r+dZMpDvVX QV9DZpveFUWlRhJhPDn0g0tRPMS/Usik1SQ25XdVcYIZuWGVcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMx3QONaw1nE3wmcI/s6/5QOb8LDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNDRjZWQ5NDctY2UwNy0z ZmEzLTk2NjktYzYzZWQ0ZWU3NmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe3L2l00AMKxvqAHlDwkClCYsciTkvff1UbZUZ+kOjhGxUDmqSwosGH 97mnqfw8lBj4umR6quJX87mXMD7zi3tbT0UWWaDFBHaDQuA2/nKeAdo+0xZh1Aru +HvH80W/pgns/PKAxQckRjHmoX4zs5SMKOkrMfazchOSCoGm4CuL1GrsM/yTYVVF XPtNH2TBG+625vafg7ABH0eXT3UW/2HT2Unv6KGTh24v4EM+MCIr3VlFF+xMQjU3 0bZKiP8jUo1kaMrBpxc7t9Am5vBNLNS32UySDZaZSXN6+tP4Tx0AKV897MEmjUIr ozfzjttozCIiJ11Dm2CiWkL9qNJec8k= -----END CERTIFICATE-----Generated at Fri Oct 10 22:29:54 2025 by rpki-client