$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa File: 4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa (raw, json) Hash identifier: mv1exzlwhr01BMVlIpIUWLQNIPynrrZ4Bm3fP8+XnFY= Subject key identifier: EF:31:BD:EB:D1:1D:95:33:5D:ED:5A:5E:EC:FE:5B:35:78:82:35:0E Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584A34801D0639749C490B04FB28 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 4540 IP address blocks: 170.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1d:06:39:74:9c:49:0b:04:fb:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=064c8f7d-f3e9-48cd-b3f1-fad3b386a1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:0c:eb:91:ce:bc:48:a3:3a:14:3e:dc:ca: c4:f6:53:d3:fe:25:39:f1:05:7e:1c:ff:82:78:47: 19:58:56:e7:b1:c9:f6:e1:94:0b:fb:e5:08:81:d9: 66:4b:e3:1e:77:c9:8a:d8:57:f2:6f:74:a3:5e:e1: c4:d6:9d:45:22:06:d7:3e:ef:8c:ca:0b:34:cc:be: a1:43:cc:ac:6e:52:eb:00:11:f5:25:47:1a:8e:79: 81:7b:df:53:45:e2:8f:da:17:d0:d5:9c:fa:06:bc: 94:2f:c8:e4:57:7d:c7:47:7b:2a:80:94:15:6d:ee: 7c:fe:a4:9f:90:e9:36:df:b8:06:ff:99:b2:ae:e5: 15:02:b3:d7:7d:9f:a8:2f:8f:ec:f2:f0:57:e2:07: 79:ce:12:6c:73:7f:50:e9:7f:66:9b:82:54:22:8d: 70:f6:36:7f:33:51:dd:a2:ce:c4:37:75:7e:8f:13: a5:7a:3c:a7:8d:78:22:17:3b:c5:c8:b1:63:01:de: 9f:6e:e6:f2:ab:95:d1:5d:74:f4:d4:0e:e9:df:68: 99:e2:88:ad:56:e0:96:e9:8b:07:16:2d:e8:ee:f5: 21:ea:92:2d:ad:f8:14:66:c6:32:aa:67:9c:f9:57: fd:83:30:54:97:3b:3f:62:eb:ac:76:76:5d:bd:4b: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:31:BD:EB:D1:1D:95:33:5D:ED:5A:5E:EC:FE:5B:35:78:82:35:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:50:1a:3f:aa:6b:44:51:7e:9f:67:db:70:4a:7a:5b:6f:da: 56:a9:25:a2:87:8b:93:bc:74:b2:22:fa:0e:58:48:ef:f0:aa: 5c:c5:55:9d:7d:45:04:28:25:0c:ef:ce:ba:c1:66:fe:f7:06: 18:78:15:36:c4:3b:90:6f:16:b4:bd:e7:2f:05:7c:30:02:a8: 0b:22:9b:32:5f:5c:43:0c:c4:e5:c8:3a:e4:4c:0b:fe:71:6b: 39:67:76:fb:e4:9e:5a:d8:fe:11:d1:a1:f5:2d:21:ae:04:57: df:6a:48:8f:c1:df:29:5f:14:54:87:b9:90:5f:84:3a:23:0a: 4c:c3:32:b5:6a:bf:28:de:20:78:ac:10:f5:40:8a:9f:3b:7d: ed:1e:80:fa:3c:41:91:d9:9f:2d:1d:1c:67:d9:a2:85:fc:0b: 3d:ff:83:22:1f:f2:2f:4e:76:ef:72:95:64:84:90:15:dd:66: ea:94:be:db:55:67:c1:80:4d:c3:9c:57:c0:ba:5c:a1:fd:10: 99:55:2d:bf:2e:54:74:92:48:6b:91:14:ce:2d:64:b5:51:64: 36:28:9e:b7:2c:f1:e0:78:ff:b5:6e:5e:05:50:b0:64:05:b9: 4c:ea:5e:df:a4:f7:dc:65:90:8c:02:d7:f1:f1:1a:28:f4:86: 2a:55:d9:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gB0GOXScSQsE+ygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk MDY0YzhmN2QtZjNlOS00OGNkLWIzZjEtZmFkM2IzODZhMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eMM65HOvEijOhQ+3MrE9lPT/iU58QV+HP+C eEcZWFbnscn24ZQL++UIgdlmS+Med8mK2Ffyb3SjXuHE1p1FIgbXPu+Mygs0zL6h Q8ysblLrABH1JUcajnmBe99TReKP2hfQ1Zz6BryUL8jkV33HR3sqgJQVbe58/qSf kOk237gG/5myruUVArPXfZ+oL4/s8vBX4gd5zhJsc39Q6X9mm4JUIo1w9jZ/M1Hd os7EN3V+jxOlejynjXgiFzvFyLFjAd6fbubyq5XRXXT01A7p32iZ4oitVuCW6YsH Fi3o7vUh6pItrfgUZsYyqmec+Vf9gzBUlzs/YuusdnZdvUsDSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8xvevRHZUzXe1aXuz+WzV4gjUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNGFhOGMzZDItY2JmMi0z MTc5LTllNTMtOWFkMGFmNGI3MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1QGj+qa0RRfp9n23BKeltv2lapJaKHi5O8dLIi+g5YSO/wqlzFVZ19 RQQoJQzvzrrBZv73Bhh4FTbEO5BvFrS95y8FfDACqAsimzJfXEMMxOXIOuRMC/5x azlndvvknlrY/hHRofUtIa4EV99qSI/B3ylfFFSHuZBfhDojCkzDMrVqvyjeIHis EPVAip87fe0egPo8QZHZny0dHGfZooX8Cz3/gyIf8i9Odu9ylWSEkBXdZuqUvttV Z8GATcOcV8C6XKH9EJlVLb8uVHSSSGuRFM4tZLVRZDYonrcs8eB4/7VuXgVQsGQF uUzqXt+k99xlkIwC1/HxGij0hipV2a8= -----END CERTIFICATE-----Generated at Mon Jun 16 03:26:54 2025 by rpki-client