$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa File: 0ff3813d-a425-3f1f-a715-aacfa0108453.roa (raw, json) Hash identifier: hE8QNWzYURWcjblO9xNr57reYfuFquuAy4Q4TDTMoZQ= Subject key identifier: 73:4D:52:6B:47:74:68:D2:BA:0C:8A:6D:5A:68:FF:1A:54:66:D7:4F Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584A34801CB2BEE3546F16DA3920 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 4540 IP address blocks: 170.89.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1c:b2:be:e3:54:6f:16:da:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=4af0a61f-81b0-4f26-ba33-e0647b58543d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:4a:0f:a6:dc:bf:c5:68:71:f5:8c:6f:9b: 7c:5f:fe:f6:b8:31:f9:97:c3:dd:96:ba:0a:ce:4c: 31:27:d7:b5:62:f5:f0:c2:aa:13:ed:15:48:5d:58: 7c:b7:f6:33:4d:2b:22:ea:94:f0:00:6d:8c:52:55: 84:da:e6:ac:c2:61:5d:13:91:ce:88:60:e8:a6:02: 19:ba:1f:aa:70:f9:94:89:74:ce:c9:93:0c:21:38: dd:80:b8:97:15:ef:7a:dc:7f:fc:f0:98:2e:62:06: 35:f6:70:92:2f:39:6f:fa:e0:20:3e:03:6a:b7:fa: 66:da:ee:5d:55:ef:ae:b9:7d:c4:84:a0:2d:40:15: 1c:44:d9:5e:33:ef:66:34:a5:a8:32:e9:54:18:1d: 09:30:21:ae:01:04:c1:b8:2e:a7:e7:08:ac:a7:df: db:90:cd:ed:ac:fd:e3:2b:6b:36:22:c1:66:9b:35: fa:23:da:36:79:bf:a9:2f:b4:2d:65:91:84:83:f1: 77:8d:58:68:40:54:6e:75:64:b5:43:12:72:41:8c: ef:b5:8a:ee:45:8f:c5:44:8e:ab:a4:75:ac:53:ab: 33:56:30:98:63:02:04:21:70:4e:71:5d:ef:eb:c5: 07:14:e8:cf:9d:87:67:ad:7c:1f:96:c5:4a:e7:53: 75:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4D:52:6B:47:74:68:D2:BA:0C:8A:6D:5A:68:FF:1A:54:66:D7:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ff3813d-a425-3f1f-a715-aacfa0108453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:02:1d:00:fc:00:e1:54:27:de:60:62:01:ab:ac:56:47:d0: 24:5e:49:b1:98:a3:60:0f:a4:a3:9a:ab:59:db:d1:fe:8c:87: 82:5c:af:e3:87:be:93:71:4f:53:a2:d2:cf:c2:8b:71:33:a3: f6:f5:19:48:62:69:48:36:62:fc:38:13:74:1e:9b:03:9d:b5: a1:6d:ec:f4:23:07:72:f7:8b:be:18:a7:52:af:51:32:8e:a4: 69:24:d7:85:8e:c9:20:ad:c5:b4:1c:6f:d3:e2:08:05:29:0c: 22:be:c4:cc:ac:74:22:15:63:8d:ad:fa:78:4c:4a:df:30:11: 5f:7e:31:11:f3:a5:00:df:04:37:81:39:8c:b4:b8:5c:3b:60: 5d:f3:0c:81:94:1a:98:df:62:52:9e:c7:58:13:7f:98:85:9a: c7:8a:e6:18:ba:1f:ec:5e:10:56:1a:cf:69:15:8a:7a:cf:27: ed:3f:2a:0b:33:7a:2b:4b:c7:fb:c7:11:09:d1:c2:27:ca:79: 4e:2f:81:4c:e5:06:56:19:8f:36:47:7c:68:d0:11:72:00:23: b2:84:fd:47:ee:e7:93:d6:12:cb:55:04:ff:a9:5d:5f:ac:85: 70:39:c0:3f:47:8c:f5:6e:72:57:96:86:75:4b:dd:e3:e8:f8: 4c:92:47:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gByyvuNUbxbaOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk NGFmMGE2MWYtODFiMC00ZjI2LWJhMzMtZTA2NDdiNTg1NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMJKD6bcv8VocfWMb5t8X/72uDH5l8PdlroK zkwxJ9e1YvXwwqoT7RVIXVh8t/YzTSsi6pTwAG2MUlWE2uaswmFdE5HOiGDopgIZ uh+qcPmUiXTOyZMMITjdgLiXFe963H/88JguYgY19nCSLzlv+uAgPgNqt/pm2u5d Ve+uuX3EhKAtQBUcRNleM+9mNKWoMulUGB0JMCGuAQTBuC6n5wisp9/bkM3trP3j K2s2IsFmmzX6I9o2eb+pL7QtZZGEg/F3jVhoQFRudWS1QxJyQYzvtYruRY/FRI6r pHWsU6szVjCYYwIEIXBOcV3v68UHFOjPnYdnrXwflsVK51N1OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNNUmtHdGjSugyKbVpo/xpUZtdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMGZmMzgxM2QtYTQyNS0z ZjFmLWE3MTUtYWFjZmEwMTA4NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQCHQD8AOFUJ95gYgGrrFZH0CReSbGYo2APpKOaq1nb0f6Mh4Jcr+OH vpNxT1Oi0s/Ci3Ezo/b1GUhiaUg2Yvw4E3QemwOdtaFt7PQjB3L3i74Yp1KvUTKO pGkk14WOySCtxbQcb9PiCAUpDCK+xMysdCIVY42t+nhMSt8wEV9+MRHzpQDfBDeB OYy0uFw7YF3zDIGUGpjfYlKex1gTf5iFmseK5hi6H+xeEFYaz2kVinrPJ+0/Kgsz eitLx/vHEQnRwifKeU4vgUzlBlYZjzZHfGjQEXIAI7KE/Ufu55PWEstVBP+pXV+s hXA5wD9HjPVucleWhnVL3ePo+EySR44= -----END CERTIFICATE-----Generated at Mon Jun 16 06:12:49 2025 by rpki-client