$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa File: 4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa (raw, json) Hash identifier: aMiWKTWAzgK3VcFX6hMTLfGzYAdknGTnvzOGiegPdL8= Subject key identifier: 17:51:B4:6D:BE:78:15:FD:60:A9:A7:00:C2:D8:6C:74:30:51:6C:8C Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C18050F512C71CFD86F00 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 170.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:18:05:0f:51:2c:71:cf:d8:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=d7e31afa-0f38-43ce-83ed-585e692304e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9e:55:26:71:08:69:5b:9b:9b:04:e1:de:cb: 51:ad:6d:07:a1:ee:fa:be:d8:c5:67:d2:53:ee:8a: 71:84:86:26:40:4d:fe:c2:79:fd:29:01:01:a6:c4: bf:6b:ac:41:76:3e:dd:cc:74:c3:24:93:2f:62:40: b5:eb:87:2a:fd:c2:bd:fe:30:5b:64:bf:41:c2:50: cf:1e:52:aa:4e:b8:13:b6:a4:07:7d:5f:75:c0:2e: 26:30:c6:70:a7:b3:de:bc:5b:d2:fd:a1:25:5b:64: ee:04:cc:fa:f8:b8:5a:63:e3:8d:5c:c8:ae:45:8c: 1e:be:90:b4:9d:9e:da:5f:cc:1d:4d:98:ce:c4:4a: cd:41:c9:79:4d:ba:53:26:87:95:97:72:89:3c:fa: 37:6c:e8:d5:0f:ee:2f:02:a2:4b:3c:0a:11:14:a0: cc:5f:86:0c:96:9b:e3:6a:8d:89:fa:5a:36:b5:3a: 8d:d2:c1:13:ec:67:da:c9:ff:77:bc:2d:19:c3:50: 58:24:3d:45:f1:c7:c7:b8:8f:5c:91:9a:11:3c:7e: 16:e6:63:eb:04:c7:a6:4e:67:02:0e:7d:a6:10:2b: 70:6b:1f:c7:67:de:d6:35:01:b3:e8:63:d9:ff:4b: 5a:f9:1c:79:94:1b:1f:92:5c:14:05:9e:e2:0b:13: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:51:B4:6D:BE:78:15:FD:60:A9:A7:00:C2:D8:6C:74:30:51:6C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:62:57:43:9c:8b:bf:33:34:61:55:c7:f8:e8:27:8a:8a:61: 02:6d:3f:3e:c7:a1:c1:b3:24:a6:51:2f:e2:a9:3a:c4:1c:c5: 33:78:b2:d9:0c:33:02:60:e2:f0:bf:8b:f5:ae:27:e6:67:2a: 82:37:1f:c6:db:98:d6:52:ff:95:a4:e4:8b:09:4d:05:6d:d0: 6d:37:4c:b2:29:63:14:1f:da:9e:65:74:36:de:03:49:a1:17: f2:20:5d:d4:0c:48:ff:52:f9:3b:95:89:01:09:44:22:24:af: 0d:19:cd:69:63:39:8c:e9:68:75:78:e5:78:1f:c0:db:e6:2b: 8f:ed:20:57:c5:f6:06:5f:75:72:fa:e9:e4:ba:5c:bf:16:8b: d2:9d:67:db:c3:b4:6d:2b:03:26:5f:31:94:39:c1:61:38:c1: 3c:b4:7f:b5:27:23:cd:75:66:72:3a:0f:d8:57:49:c2:00:7c: 55:8b:bc:6a:07:90:61:bb:ff:32:ed:79:e0:bd:e8:6e:a6:ae: 8e:67:82:c1:8a:d4:bf:19:4e:75:e9:55:60:75:0a:6c:ca:6e: 79:85:38:a4:fb:4a:99:7c:8f:85:71:9f:73:57:53:84:3b:93: 83:79:a0:df:9c:ae:51:de:75:c4:ef:46:a9:38:05:79:a9:ab: 38:61:a0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBgFD1Escc/YbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ZDdlMzFhZmEtMGYzOC00M2NlLTgzZWQtNTg1ZTY5MjMwNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk55VJnEIaVubmwTh3stRrW0Hoe76vtjFZ9JT 7opxhIYmQE3+wnn9KQEBpsS/a6xBdj7dzHTDJJMvYkC164cq/cK9/jBbZL9BwlDP HlKqTrgTtqQHfV91wC4mMMZwp7PevFvS/aElW2TuBMz6+LhaY+ONXMiuRYwevpC0 nZ7aX8wdTZjOxErNQcl5TbpTJoeVl3KJPPo3bOjVD+4vAqJLPAoRFKDMX4YMlpvj ao2J+lo2tTqN0sET7Gfayf93vC0Zw1BYJD1F8cfHuI9ckZoRPH4W5mPrBMemTmcC Dn2mECtwax/HZ97WNQGz6GPZ/0ta+Rx5lBsfklwUBZ7iCxPSQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdRtG2+eBX9YKmnAMLYbHQwUWyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNGFhOGMzZDItY2JmMi0z MTc5LTllNTMtOWFkMGFmNGI3MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRiV0Oci78zNGFVx/joJ4qKYQJtPz7HocGzJKZRL+KpOsQcxTN4stkM MwJg4vC/i/WuJ+ZnKoI3H8bbmNZS/5Wk5IsJTQVt0G03TLIpYxQf2p5ldDbeA0mh F/IgXdQMSP9S+TuViQEJRCIkrw0ZzWljOYzpaHV45XgfwNvmK4/tIFfF9gZfdXL6 6eS6XL8Wi9KdZ9vDtG0rAyZfMZQ5wWE4wTy0f7UnI811ZnI6D9hXScIAfFWLvGoH kGG7/zLteeC96G6mro5ngsGK1L8ZTnXpVWB1CmzKbnmFOKT7Spl8j4Vxn3NXU4Q7 k4N5oN+crlHedcTvRqk4BXmpqzhhoN8= -----END CERTIFICATE-----Generated at Fri Oct 10 22:33:16 2025 by rpki-client