$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa File: ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa (raw, json) Hash identifier: MgvICx+zM1lBjEWJjrqju2nDwBJj8H4GIuebPvT/J3M= Subject key identifier: D9:8E:BE:E7:58:52:2B:91:99:51:DF:E5:48:61:F0:4C:C4:6A:A6:80 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C18177458993CCC8F8C80 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 170.89.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:18:17:74:58:99:3c:cc:8f:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=1fe43e4d-7069-40b6-a51c-a013cdbc86f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bc:a1:1d:f2:63:04:09:8a:53:39:44:b4:ce: 08:d9:b4:3e:e2:29:26:70:05:67:0c:de:84:b5:ba: c4:32:3a:77:40:cc:b0:83:e4:06:45:05:0e:54:95: ac:9d:94:38:3a:fc:dd:da:29:f6:8a:c1:72:a0:16: b1:8a:e7:6d:0a:6b:89:03:74:23:45:ea:87:e8:33: e9:61:fc:3e:e7:da:b1:7c:eb:9a:4f:09:38:ac:e9: 53:0d:2a:51:83:67:52:aa:f1:b9:54:af:98:a8:ea: 8b:e9:eb:3a:b4:61:b4:7d:e2:6b:2f:27:c8:fd:dd: 8c:f5:a4:fe:1f:89:10:e1:65:a1:f8:49:53:52:13: 36:1d:3a:9c:9c:e5:d9:07:4c:9c:56:34:e1:96:c6: 98:13:ff:55:13:58:48:32:04:78:45:cb:b0:c4:12: c7:a0:4f:f9:2a:03:03:9d:dc:f7:ef:e1:9d:01:09: 63:ef:e6:2e:1b:3f:2c:3e:a6:83:43:88:80:a0:c2: 63:cc:d3:7b:e0:cd:f3:aa:2e:b5:22:fc:37:db:c5: a0:ae:fa:e1:bd:27:32:47:ca:cd:85:0b:bf:5f:10: 90:39:6b:af:17:96:25:54:56:f6:14:22:61:7b:b2: 71:12:f2:9c:cd:70:af:81:18:73:52:89:e1:90:b7: 05:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8E:BE:E7:58:52:2B:91:99:51:DF:E5:48:61:F0:4C:C4:6A:A6:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:39:2f:a5:89:29:1e:4d:ac:a2:30:c5:ac:60:5b:af:c5:79: aa:8a:65:f2:11:a2:7f:9d:03:1c:c9:c3:08:d7:14:9f:bb:61: bb:d8:6e:a5:03:4c:2b:02:e5:02:83:1d:c6:40:f3:41:6a:84: f7:5a:fe:66:61:8c:ee:f1:bb:2a:33:7b:5e:85:89:2d:4b:de: 92:2b:c1:9b:32:43:45:98:b8:98:9d:46:37:cb:44:87:41:a2: a6:8b:9e:e6:d3:f6:82:35:5d:87:eb:6c:86:fa:54:a3:81:91: 64:d8:3f:22:bb:44:b2:23:ea:67:4a:c2:6d:47:e9:f5:2b:70: 2a:a4:75:e3:97:e2:26:70:3f:5a:bc:05:7c:4c:8a:84:1c:9d: dc:70:eb:d8:2b:9f:e3:b8:3b:a9:fe:39:44:dc:3e:0c:11:4a: 19:83:20:ad:3b:87:f5:76:e3:0c:08:3d:28:a5:0f:f8:24:42: d8:2a:ed:fa:23:61:a4:6f:ea:c2:7b:f0:9c:41:50:19:a1:d7: bb:0a:c5:72:41:57:60:99:03:83:63:52:cf:3c:eb:b4:6f:04: a7:1e:f1:98:e3:56:93:25:1b:cf:b4:87:4b:64:98:31:4a:1d: 91:70:e6:44:da:d3:f9:36:57:ba:0a:e1:2a:12:7e:9d:ac:35: 9d:a3:87:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBgXdFiZPMyPjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk MWZlNDNlNGQtNzA2OS00MGI2LWE1MWMtYTAxM2NkYmM4NmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbyhHfJjBAmKUzlEtM4I2bQ+4ikmcAVnDN6E tbrEMjp3QMywg+QGRQUOVJWsnZQ4Ovzd2in2isFyoBaxiudtCmuJA3QjReqH6DPp Yfw+59qxfOuaTwk4rOlTDSpRg2dSqvG5VK+YqOqL6es6tGG0feJrLyfI/d2M9aT+ H4kQ4WWh+ElTUhM2HTqcnOXZB0ycVjThlsaYE/9VE1hIMgR4RcuwxBLHoE/5KgMD ndz37+GdAQlj7+YuGz8sPqaDQ4iAoMJjzNN74M3zqi61Ivw328WgrvrhvScyR8rN hQu/XxCQOWuvF5YlVFb2FCJhe7JxEvKczXCvgRhzUonhkLcFQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmOvudYUiuRmVHf5Uhh8EzEaqaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZWQ2ZTQ3ZDgtODFiYy0z YmYzLTk3MjktMGMzOTBhZjYxYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI5L6WJKR5NrKIwxaxgW6/FeaqKZfIRon+dAxzJwwjXFJ+7YbvYbqUD TCsC5QKDHcZA80FqhPda/mZhjO7xuyoze16FiS1L3pIrwZsyQ0WYuJidRjfLRIdB oqaLnubT9oI1XYfrbIb6VKOBkWTYPyK7RLIj6mdKwm1H6fUrcCqkdeOX4iZwP1q8 BXxMioQcndxw69grn+O4O6n+OUTcPgwRShmDIK07h/V24wwIPSilD/gkQtgq7foj YaRv6sJ78JxBUBmh17sKxXJBV2CZA4NjUs8867RvBKce8ZjjVpMlG8+0h0tkmDFK HZFw5kTa0/k2V7oK4SoSfp2sNZ2jh8s= -----END CERTIFICATE-----Generated at Fri Oct 10 22:33:11 2025 by rpki-client