$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa File: fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa (raw, json) Hash identifier: jPPyNotzV7fLVCX+FDZigp2GOVJDS6kVg9srWGl0Txc= Subject key identifier: 0C:9B:AE:4B:19:77:E2:E8:BB:6F:D0:AD:1D:46:D9:46:41:D4:8D:E5 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584CD6D209449AEF01453EDA2CC0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 4540 IP address blocks: 170.89.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:09:44:9a:ef:01:45:3e:da:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=97f0e120-c48c-4193-8b37-6624fcf814f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8b:b2:a2:3c:ad:65:2a:af:45:b9:b0:ef:e5: d6:8a:d9:2b:c6:02:95:98:3e:0d:ba:c4:7a:2e:b7: 40:7b:3c:12:ef:a6:a8:f3:f4:5a:f5:1e:fd:f6:88: d6:16:b7:0f:21:73:0f:a8:c8:1f:c8:f0:71:6d:9a: 46:33:54:d6:58:d4:0d:26:ca:f5:53:ba:3f:cc:0c: 6a:2a:d0:1e:ad:64:3c:76:bf:fd:9b:45:21:2c:97: 51:2f:c8:54:73:eb:8d:8f:05:90:f6:5c:b3:c8:df: 0f:f1:20:99:8d:3d:55:9c:87:45:fa:d3:27:7f:0e: 49:ce:8a:1f:77:18:66:66:10:fa:49:43:d6:95:3d: 9e:51:d1:15:4b:58:22:7b:3b:e8:e5:0a:18:88:35: a4:56:43:86:f2:2f:e6:91:b0:9a:0f:6f:1d:cc:67: c0:7d:fb:09:6c:80:e4:60:ed:b8:7f:31:5f:49:65: 5a:e5:e8:c9:01:5e:ff:a1:7a:78:e1:d9:48:fe:b7: 5c:a2:75:17:0d:30:03:0c:bb:09:67:1c:48:cf:f7: e2:41:0e:9f:31:03:d9:d1:6c:e0:58:a8:d6:2e:b2: 5d:b2:e7:17:b0:3d:67:dc:c4:5d:be:d2:2d:22:9b: 21:c5:db:21:1d:5f:06:63:d9:aa:0c:8b:08:b5:57: 69:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9B:AE:4B:19:77:E2:E8:BB:6F:D0:AD:1D:46:D9:46:41:D4:8D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:cc:3c:ce:30:66:4a:67:23:48:20:fa:38:9d:70:30:16:e0: 93:89:57:a9:bf:76:19:e8:9c:1e:fa:b2:5b:88:1b:01:17:f0: 78:a9:42:28:d7:90:db:ba:c2:97:76:a5:8c:34:ed:5a:30:4d: b3:a6:45:8a:fc:c7:2e:2b:27:74:6a:39:dc:31:a2:04:fe:a9: b7:aa:6c:9e:86:e7:c2:52:e1:0c:d2:eb:38:14:0c:3e:0d:ec: 0b:ae:43:64:55:94:19:24:34:c8:02:71:97:05:06:50:1a:9e: a1:f2:85:3d:e8:32:a8:40:36:e7:f7:85:14:61:b1:19:8c:bd: 22:89:a8:29:45:f8:86:02:71:46:4b:6f:ee:1a:b3:c8:5f:17: f6:50:cc:6f:ee:9b:50:06:a8:35:21:a1:31:c3:43:9c:97:b2: 1d:17:74:de:91:cb:ab:22:5e:72:a0:2f:5f:cf:5b:ef:51:e1: b5:f0:34:ca:a5:1f:c3:52:29:04:82:ba:5f:2e:3c:f2:68:52: 6f:d5:d4:92:8a:2f:2c:9f:9a:22:37:27:22:2f:69:5f:97:81: 73:c0:17:b3:79:07:ba:b2:3e:65:05:72:3b:90:9a:bb:08:68: e1:33:cb:dd:07:63:79:35:9f:65:75:45:22:23:4b:4c:23:01: 2c:6b:32:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0glEmu8BRT7aLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk OTdmMGUxMjAtYzQ4Yy00MTkzLThiMzctNjYyNGZjZjgxNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkouyojytZSqvRbmw7+XWitkrxgKVmD4NusR6 LrdAezwS76ao8/Ra9R799ojWFrcPIXMPqMgfyPBxbZpGM1TWWNQNJsr1U7o/zAxq KtAerWQ8dr/9m0UhLJdRL8hUc+uNjwWQ9lyzyN8P8SCZjT1VnIdF+tMnfw5Jzoof dxhmZhD6SUPWlT2eUdEVS1giezvo5QoYiDWkVkOG8i/mkbCaD28dzGfAffsJbIDk YO24fzFfSWVa5ejJAV7/oXp44dlI/rdconUXDTADDLsJZxxIz/fiQQ6fMQPZ0Wzg WKjWLrJdsucXsD1n3MRdvtItIpshxdshHV8GY9mqDIsItVdpMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAybrksZd+Lou2/QrR1G2UZB1I3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZmVhODViMGMtZGFjOC0z MTg1LWJjZjQtMjQ4NDVmNmVmMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTMPM4wZkpnI0gg+jidcDAW4JOJV6m/dhnonB76sluIGwEX8HipQijX kNu6wpd2pYw07VowTbOmRYr8xy4rJ3RqOdwxogT+qbeqbJ6G58JS4QzS6zgUDD4N 7AuuQ2RVlBkkNMgCcZcFBlAanqHyhT3oMqhANuf3hRRhsRmMvSKJqClF+IYCcUZL b+4as8hfF/ZQzG/um1AGqDUhoTHDQ5yXsh0XdN6Ry6siXnKgL1/PW+9R4bXwNMql H8NSKQSCul8uPPJoUm/V1JKKLyyfmiI3JyIvaV+XgXPAF7N5B7qyPmUFcjuQmrsI aOEzy90HY3k1n2V1RSIjS0wjASxrMvQ= -----END CERTIFICATE-----Generated at Fri Feb 27 07:33:01 2026 by rpki-client