$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa File: a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa (raw, json) Hash identifier: QBkTPUSTn20XAJBMLtW+pCSAZB+FdzlTrGnIehw+qRQ= Subject key identifier: F1:22:D3:7A:D3:55:E2:C2:3D:A4:26:6E:0C:18:A3:0E:EC:B7:6B:72 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C17BF1DD4F03670015140 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 170.89.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:17:bf:1d:d4:f0:36:70:01:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=49586662-4bcf-411c-91d4-0f4d1ff83735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:9e:34:f8:de:5d:5f:1f:d2:b3:dd:d8:3a: f9:b7:69:89:75:35:a2:d4:a0:d6:b9:49:be:b4:9b: cf:b1:63:d3:dc:12:13:27:b7:27:0a:66:8a:5e:c9: 08:c9:7d:74:e3:2e:25:f3:57:bf:78:a2:02:9b:d3: 89:02:3f:14:1b:34:89:08:5d:1c:c6:94:3e:f1:06: d2:c4:ad:c4:e6:80:85:6c:a6:de:74:90:fc:63:de: f4:00:28:30:5d:93:c0:f7:ea:13:2a:d7:72:32:92: 06:e8:7e:b1:cc:54:d6:4c:d2:bb:a1:08:0f:d4:0d: 9f:6a:58:01:10:66:1e:3c:f4:d4:f2:fc:35:65:8b: 9d:77:c8:50:43:6d:48:3f:c1:5a:4c:77:17:fb:04: ad:f8:e2:bf:6a:b0:7b:a7:8b:d3:d0:3f:c0:47:40: d7:9c:39:22:a1:56:96:de:a1:e9:ad:ea:c8:1b:f1: 01:ca:3e:0a:de:03:59:07:40:a1:61:77:1f:96:8b: a9:77:1a:87:d6:76:31:09:77:17:65:6d:9d:6f:b1: 4e:54:f3:8a:0d:84:d1:3b:97:d3:d6:04:55:6b:e9: ce:10:b5:8c:b8:80:93:77:c9:a5:05:37:10:3a:d5: 14:71:7d:1c:eb:c1:84:04:ae:aa:5d:1c:de:8a:e2: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:22:D3:7A:D3:55:E2:C2:3D:A4:26:6E:0C:18:A3:0E:EC:B7:6B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:1c:e7:5e:47:24:1a:62:3b:4e:ec:b6:14:db:3a:16:6b:f2: f7:73:78:d8:ac:e4:4c:8e:e9:aa:19:a4:96:d4:99:eb:ee:b5: c1:52:db:e3:ea:e5:e0:0c:23:31:40:d8:71:bf:6e:ef:29:4e: fd:3c:cb:65:f4:fa:d2:79:e1:8c:9e:d1:14:2d:2d:4f:39:c7: bc:c5:44:47:84:30:ff:8f:ce:49:cf:a3:05:0e:e0:b2:57:3a: 91:dd:38:21:0a:7b:89:d5:73:17:c1:a6:08:54:44:b9:17:f8: 66:3a:41:bc:d7:31:23:7f:80:32:f3:6d:56:2f:76:57:44:02: 13:45:89:66:f9:36:b4:d0:a1:bc:f5:af:23:e3:10:fd:34:75: 62:97:0f:82:b5:83:88:b9:0a:d7:2f:db:48:f0:3f:c3:99:f7: 42:38:cd:4e:d1:ce:6f:cc:b3:76:4b:32:bb:1b:c3:4f:e2:8a: 60:42:70:c1:6a:13:50:8d:e1:94:3b:d4:e0:db:41:17:00:61: cd:7e:81:28:be:93:7f:d0:f7:fe:bb:bd:ba:d9:15:97:55:0c: 42:06:4a:7c:fb:76:e4:9e:fb:86:cf:8c:1f:47:b5:ce:4d:53: 07:ed:dd:b2:64:cd:85:65:75:14:7c:d0:fd:50:c0:46:11:10: 70:b4:f8:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBe/HdTwNnABUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NDk1ODY2NjItNGJjZi00MTFjLTkxZDQtMGY0ZDFmZjgzNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2ueNPjeXV8f0rPd2Dr5t2mJdTWi1KDWuUm+ tJvPsWPT3BITJ7cnCmaKXskIyX104y4l81e/eKICm9OJAj8UGzSJCF0cxpQ+8QbS xK3E5oCFbKbedJD8Y970ACgwXZPA9+oTKtdyMpIG6H6xzFTWTNK7oQgP1A2falgB EGYePPTU8vw1ZYudd8hQQ21IP8FaTHcX+wSt+OK/arB7p4vT0D/AR0DXnDkioVaW 3qHprerIG/EByj4K3gNZB0ChYXcfloupdxqH1nYxCXcXZW2db7FOVPOKDYTRO5fT 1gRVa+nOELWMuICTd8mlBTcQOtUUcX0c68GEBK6qXRzeiuKgHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEi03rTVeLCPaQmbgwYow7st2tyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYTAwYjY3ZmYtYzJlMC0z NThkLWIyNWUtMGYxNTBjNjg3ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAc515HJBpiO07sthTbOhZr8vdzeNis5EyO6aoZpJbUmevutcFS2+Pq 5eAMIzFA2HG/bu8pTv08y2X0+tJ54Yye0RQtLU85x7zFREeEMP+PzknPowUO4LJX OpHdOCEKe4nVcxfBpghURLkX+GY6QbzXMSN/gDLzbVYvdldEAhNFiWb5NrTQobz1 ryPjEP00dWKXD4K1g4i5Ctcv20jwP8OZ90I4zU7Rzm/Ms3ZLMrsbw0/iimBCcMFq E1CN4ZQ71ODbQRcAYc1+gSi+k3/Q9/67vbrZFZdVDEIGSnz7duSe+4bPjB9Htc5N Uwft3bJkzYVldRR80P1QwEYREHC0+Io= -----END CERTIFICATE-----Generated at Fri Oct 10 22:25:31 2025 by rpki-client