$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa File: 4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa (raw, json) Hash identifier: SEP01zexAfS1SpC1rPeF/tcRRU8+hg5uJdrgklAItMM= Subject key identifier: EC:34:28:BA:18:F8:5C:B5:5E:68:E5:92:91:48:EF:8F:E8:A2:FC:79 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584CD6D20975F87725735BDFD700 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 4540 IP address blocks: 170.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:09:75:f8:77:25:73:5b:df:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=e5bedde9-b925-4601-9856-ce86f251a3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:a2:ee:ef:1a:b5:d5:b5:b7:96:3a:ba:0c: cb:93:67:93:be:ed:23:46:48:02:53:97:56:76:0f: 03:3b:86:e7:1f:37:42:19:bc:6a:bc:e9:0d:6f:99: 05:16:e5:9e:12:0d:2f:53:b7:1f:dd:b7:e9:77:06: 65:43:fe:1b:f9:d0:f0:0d:a6:cc:98:00:f4:6e:67: 72:39:3c:9e:1e:14:50:c5:2e:c6:d9:be:c4:01:6c: 8d:8d:3b:68:62:17:0d:87:ea:48:06:45:ec:de:c7: 30:0e:f1:93:69:f6:68:a8:d4:cf:0c:09:b6:fe:7c: 83:eb:75:f2:c4:56:95:85:cc:16:d5:8b:e6:5f:8f: 1d:ea:7f:a1:32:9f:f5:09:33:9b:4c:83:1b:17:3e: 7e:ec:11:29:6c:6a:af:de:5f:47:7f:03:15:01:58: 86:a0:03:ad:1e:82:35:cd:09:0a:ae:4f:4d:86:79: e1:21:40:71:d2:c3:66:6a:54:2b:5f:0d:28:57:78: 5e:b5:81:9f:10:5a:b1:92:b7:38:ae:d8:ab:10:25: 10:81:eb:b6:bf:a2:ac:da:89:85:b8:f0:34:c5:96: 11:8c:88:63:c5:30:5c:16:31:70:62:62:28:51:8b: c1:b9:94:bb:eb:5f:94:87:53:63:6b:2c:c7:35:b3: 58:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:34:28:BA:18:F8:5C:B5:5E:68:E5:92:91:48:EF:8F:E8:A2:FC:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:8a:9c:98:e4:83:20:44:02:c8:a9:19:0d:fd:fa:3c:de:28: 1d:15:a7:22:ad:a7:44:f3:8f:36:8f:ef:50:08:f1:25:e4:5a: bb:79:b7:1c:5d:5d:f5:3e:31:51:7a:97:0e:ae:3b:92:da:7c: 3f:bf:8d:b5:ea:5f:90:cd:35:57:c7:62:e7:1f:cd:e1:66:9b: 4d:1e:65:e5:5d:d4:29:cb:7a:0b:fb:29:ae:39:bc:13:6b:0c: 82:df:e1:bb:a4:7d:92:5c:c1:fc:1a:57:f8:f5:85:14:d1:12: 77:e2:41:fa:af:79:09:50:1b:34:2d:4c:2c:d3:0c:d8:58:85: e7:df:22:49:ac:19:67:df:08:99:ad:7f:c9:ea:7a:23:76:88: 91:b9:e1:f1:b6:af:59:a4:35:f5:e2:d2:58:e2:2f:7e:d9:db: dc:4b:fe:7d:4d:3c:56:59:3a:2e:89:df:cc:51:a8:1f:05:0d: 35:c0:c1:7d:41:c8:f8:21:a1:5c:e1:f4:96:03:d1:8a:37:39: 1f:2f:d6:e4:dd:4a:d0:6a:4a:a3:83:fd:59:c6:4f:bc:6d:8c: 61:7f:d7:59:5f:f3:8d:ee:c6:77:50:f9:c8:89:21:3d:d6:99: 61:d6:b3:1c:87:c7:db:1f:70:5f:c4:9b:50:9d:80:a1:dc:d0: 56:92:37:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0gl1+Hclc1vf1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk ZTViZWRkZTktYjkyNS00NjAxLTk4NTYtY2U4NmYyNTFhM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Gi7u8atdW1t5Y6ugzLk2eTvu0jRkgCU5dW dg8DO4bnHzdCGbxqvOkNb5kFFuWeEg0vU7cf3bfpdwZlQ/4b+dDwDabMmAD0bmdy OTyeHhRQxS7G2b7EAWyNjTtoYhcNh+pIBkXs3scwDvGTafZoqNTPDAm2/nyD63Xy xFaVhcwW1YvmX48d6n+hMp/1CTObTIMbFz5+7BEpbGqv3l9HfwMVAViGoAOtHoI1 zQkKrk9NhnnhIUBx0sNmalQrXw0oV3hetYGfEFqxkrc4rtirECUQgeu2v6Ks2omF uPA0xZYRjIhjxTBcFjFwYmIoUYvBuZS761+Uh1NjayzHNbNYqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOw0KLoY+Fy1XmjlkpFI74/oovx5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNGFhOGMzZDItY2JmMi0z MTc5LTllNTMtOWFkMGFmNGI3MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACKnJjkgyBEAsipGQ39+jzeKB0VpyKtp0TzjzaP71AI8SXkWrt5txxd XfU+MVF6lw6uO5LafD+/jbXqX5DNNVfHYucfzeFmm00eZeVd1CnLegv7Ka45vBNr DILf4bukfZJcwfwaV/j1hRTREnfiQfqveQlQGzQtTCzTDNhYheffIkmsGWffCJmt f8nqeiN2iJG54fG2r1mkNfXi0ljiL37Z29xL/n1NPFZZOi6J38xRqB8FDTXAwX1B yPghoVzh9JYD0Yo3OR8v1uTdStBqSqOD/VnGT7xtjGF/11lf843uxndQ+ciJIT3W mWHWsxyHx9sfcF/Em1CdgKHc0FaSN0g= -----END CERTIFICATE-----Generated at Fri Feb 27 07:33:05 2026 by rpki-client