$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa File: 0ff3813d-a425-3f1f-a715-aacfa0108453.roa (raw, json) Hash identifier: i996tabObDiybUjxog/luS9mrwwJhhP1U6MJApJh39Q= Subject key identifier: 62:ED:E3:ED:8A:34:1C:4D:25:BF:10:6E:77:85:34:5D:55:33:0A:C2 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584F3A17CFA3F988492FECA50AC0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 4540 IP address blocks: 170.89.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cf:a3:f9:88:49:2f:ec:a5:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=1837d1b9-37be-49f4-b26a-229edd68484d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:87:29:d3:4a:2e:6f:1a:61:cf:f1:ee:1f:2b: ec:63:8a:01:ea:57:f1:ef:1b:68:57:49:28:2a:34: 79:d6:9d:a7:3a:ab:79:6d:e6:9c:8c:79:4a:b0:0a: 4d:34:27:31:50:8f:2f:b7:93:2d:e4:50:dc:ee:96: 16:33:72:98:f4:be:ba:25:7d:bf:f7:88:d8:5f:bf: ed:2b:34:0a:45:29:3b:3a:10:17:3f:3e:77:dd:da: 60:07:eb:65:06:bd:b7:05:15:7f:4c:d2:e4:66:73: fe:e1:5f:d3:be:ee:98:bf:d8:e7:5a:47:d8:a4:85: 5f:4e:06:1b:51:86:a7:b4:ca:77:a5:4b:4e:60:b6: a2:25:07:c4:60:7f:f0:ff:13:f7:4a:68:39:b3:03: 1a:f2:19:b0:9d:e4:31:eb:f9:a1:e3:68:d5:59:43: 4b:67:d1:37:f3:09:9e:bd:61:d0:e4:f5:51:a3:5f: 93:15:a8:cb:f3:00:c9:75:49:05:f1:39:d9:02:71: db:e0:7a:00:d8:d6:d6:71:e3:28:12:2b:9e:f2:b2: aa:46:02:3a:9e:21:b6:36:02:ce:7f:46:e0:c2:02: a1:45:e7:37:ab:38:3c:f4:64:e9:0f:92:52:9c:b2: 30:c5:a1:ee:fc:2b:f1:09:f4:f1:61:db:3a:f8:1e: 19:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:ED:E3:ED:8A:34:1C:4D:25:BF:10:6E:77:85:34:5D:55:33:0A:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8c:25:73:e4:f3:ce:64:8f:10:3e:d4:e5:c1:08:dd:e9:03: 7e:06:88:0a:89:bb:88:83:e6:0c:69:f5:b5:a4:a6:28:32:32: 36:6b:f2:7f:01:13:1a:8c:53:74:c6:6f:9b:81:5b:7a:b6:58: fc:82:f4:87:13:29:a3:d2:04:9c:52:00:5e:ec:58:4d:8b:18: 29:60:b2:76:ea:0f:a1:65:28:e0:54:27:09:12:f1:de:c6:55: c8:cf:a2:ee:74:0e:2c:15:5d:d9:8d:18:2a:fb:ce:dd:e8:ee: e3:6f:96:82:8c:76:bc:64:66:2d:4e:8e:9b:1a:63:a4:4d:77: 53:17:78:f7:f2:db:aa:35:86:35:c0:93:94:77:83:cb:54:24: 5b:96:b5:ed:26:8d:4d:68:4d:c9:b5:2b:10:0e:85:4a:c7:37: 1d:e5:dc:2c:15:a6:5d:7d:e9:45:96:b0:08:5e:d5:6d:16:a5: b0:97:d9:7a:e8:29:36:bb:08:0e:91:9c:f9:0a:4e:8a:ce:ca: 5d:8e:1e:21:ad:87:80:46:c5:b7:e5:a7:76:5c:bc:66:52:bb: 74:f0:a1:64:1d:ff:de:25:f4:e9:d3:02:29:77:e2:90:3d:84: 4b:eb:13:3d:47:9b:b4:1e:3a:5c:22:93:26:8d:a7:bc:9f:e9: bf:7c:a5:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8+j+YhJL+ylCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MTgzN2QxYjktMzdiZS00OWY0LWIyNmEtMjI5ZWRkNjg0ODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYcp00oubxphz/HuHyvsY4oB6lfx7xtoV0ko KjR51p2nOqt5beacjHlKsApNNCcxUI8vt5Mt5FDc7pYWM3KY9L66JX2/94jYX7/t KzQKRSk7OhAXPz533dpgB+tlBr23BRV/TNLkZnP+4V/Tvu6Yv9jnWkfYpIVfTgYb UYantMp3pUtOYLaiJQfEYH/w/xP3Smg5swMa8hmwneQx6/mh42jVWUNLZ9E38wme vWHQ5PVRo1+TFajL8wDJdUkF8TnZAnHb4HoA2NbWceMoEiue8rKqRgI6niG2NgLO f0bgwgKhRec3qzg89GTpD5JSnLIwxaHu/CvxCfTxYds6+B4ZnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLt4+2KNBxNJb8QbneFNF1VMwrCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMGZmMzgxM2QtYTQyNS0z ZjFmLWE3MTUtYWFjZmEwMTA4NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaMJXPk885kjxA+1OXBCN3pA34GiAqJu4iD5gxp9bWkpigyMjZr8n8B ExqMU3TGb5uBW3q2WPyC9IcTKaPSBJxSAF7sWE2LGClgsnbqD6FlKOBUJwkS8d7G VcjPou50DiwVXdmNGCr7zt3o7uNvloKMdrxkZi1OjpsaY6RNd1MXePfy26o1hjXA k5R3g8tUJFuWte0mjU1oTcm1KxAOhUrHNx3l3CwVpl196UWWsAhe1W0WpbCX2Xro KTa7CA6RnPkKTorOyl2OHiGth4BGxbflp3ZcvGZSu3TwoWQd/94l9OnTAil34pA9 hEvrEz1Hm7QeOlwikyaNp7yf6b98pW8= -----END CERTIFICATE-----Generated at Tue Sep 22 17:39:46 2026 by rpki-client