$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa File: 80e96d3f-650e-3ca7-b9f9-15492a817e57.roa (raw, json) Hash identifier: tE7KIr9rfRYG4WFZ/B0kDB92jKeNUIufLZEDP/bAf0g= Subject key identifier: 64:68:C6:89:92:3C:6D:97:FD:2F:93:48:4C:54:8C:56:34:42:4C:0F Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584A34801CF7A2796AB2CDAE9500 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 4540 IP address blocks: 170.89.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1c:f7:a2:79:6a:b2:cd:ae:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=93da2e2b-1cc6-49aa-839c-1c6e9a8442fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:49:40:fe:de:7b:d2:ae:f7:3f:d8:c4:1c:63: 6a:54:f2:54:05:ef:fa:99:76:41:41:19:fc:66:0f: 39:a6:50:e3:bd:70:6d:6e:ea:b6:e6:ea:57:0c:c1: 02:79:ee:f1:a8:34:a7:4f:07:8a:a8:55:34:7f:90: 85:46:be:b5:a0:10:f7:ca:1e:e4:3b:95:ae:b0:24: 35:34:a6:3d:2a:34:ec:7a:68:8d:23:90:01:09:ff: be:c6:41:16:bb:c0:dd:4d:5e:b7:aa:eb:4a:18:b5: bb:73:30:18:de:8a:da:27:b0:0b:03:b6:dd:6c:79: 80:ab:59:a8:b3:72:c6:49:4f:47:2d:c3:ac:87:76: 84:35:e8:47:f3:e0:b6:a2:f5:eb:64:81:90:d1:35: ba:30:9f:32:28:93:f8:36:f7:8a:93:ba:d2:be:d2: ac:35:8a:e9:5d:ae:7a:40:ef:20:a5:be:e4:9e:8b: 2f:d0:14:41:ab:8d:8e:4a:47:54:0b:a8:4a:f3:7b: fe:18:86:75:28:b4:9b:af:8b:f4:39:dd:8b:d6:55: 80:8c:92:74:7d:c3:b6:02:cf:5f:58:c9:10:f4:f3: 2a:24:89:e3:79:00:7b:ac:1e:d9:87:3b:fa:3d:69: 24:3f:b0:8b:2f:02:20:b6:51:72:e4:82:aa:4f:d4: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:68:C6:89:92:3C:6D:97:FD:2F:93:48:4C:54:8C:56:34:42:4C:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:37:9a:28:45:2f:84:85:b4:5c:06:5c:4a:a3:9f:29:67:8d: 8a:d2:01:24:2f:0a:f8:b3:1f:d5:88:9a:0e:08:9c:76:67:aa: a4:eb:24:02:26:73:6c:b2:ea:69:e0:82:77:a6:3b:5c:06:f3: 46:2f:53:91:43:64:96:04:3e:65:f3:51:fa:8d:20:1d:04:cc: 5d:9a:72:67:24:8f:5d:a7:4f:1e:3b:72:d1:fe:9f:25:6b:35: 80:a5:15:af:24:92:6c:11:55:68:51:b5:c9:25:63:e3:27:f8: e0:fb:74:01:22:01:33:ee:80:a3:f7:d7:54:5f:ba:f5:ac:e2: 42:6a:44:e4:cf:b5:6f:54:77:74:02:98:cf:76:ec:1a:da:0f: 9b:a9:9b:0b:a4:05:e3:2a:2b:8b:9c:80:9d:e2:35:95:5a:6b: c6:88:f1:59:92:86:b2:80:50:b9:51:e7:17:e3:d6:35:0d:ce: 73:ab:42:0c:92:5b:9f:db:2e:ef:c9:86:78:08:da:4c:c3:61: 73:37:52:9c:f7:f6:d2:94:c4:3e:19:41:2e:05:af:2f:a9:c7: 63:89:dd:8d:94:57:f2:cd:6f:e0:db:08:c4:8a:b7:19:cb:ec: 08:25:36:d3:9f:c7:ad:e9:0b:e5:5d:73:5e:45:51:a4:37:11: 2b:8e:24:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBz3onlqss2ulQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk OTNkYTJlMmItMWNjNi00OWFhLTgzOWMtMWM2ZTlhODQ0MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUlA/t570q73P9jEHGNqVPJUBe/6mXZBQRn8 Zg85plDjvXBtbuq25upXDMECee7xqDSnTweKqFU0f5CFRr61oBD3yh7kO5WusCQ1 NKY9KjTsemiNI5ABCf++xkEWu8DdTV63qutKGLW7czAY3oraJ7ALA7bdbHmAq1mo s3LGSU9HLcOsh3aENehH8+C2ovXrZIGQ0TW6MJ8yKJP4NveKk7rSvtKsNYrpXa56 QO8gpb7knosv0BRBq42OSkdUC6hK83v+GIZ1KLSbr4v0Od2L1lWAjJJ0fcO2As9f WMkQ9PMqJInjeQB7rB7Zhzv6PWkkP7CLLwIgtlFy5IKqT9Rt+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRoxomSPG2X/S+TSExUjFY0QkwPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODBlOTZkM2YtNjUwZS0z Y2E3LWI5ZjktMTU0OTJhODE3ZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk3mihFL4SFtFwGXEqjnylnjYrSASQvCvizH9WImg4InHZnqqTrJAIm c2yy6mnggnemO1wG80YvU5FDZJYEPmXzUfqNIB0EzF2acmckj12nTx47ctH+nyVr NYClFa8kkmwRVWhRtcklY+Mn+OD7dAEiATPugKP311RfuvWs4kJqROTPtW9Ud3QC mM927BraD5upmwukBeMqK4ucgJ3iNZVaa8aI8VmShrKAULlR5xfj1jUNznOrQgyS W5/bLu/JhngI2kzDYXM3Upz39tKUxD4ZQS4Fry+px2OJ3Y2UV/LNb+DbCMSKtxnL 7AglNtOfx63pC+Vdc15FUaQ3ESuOJBI= -----END CERTIFICATE-----Generated at Mon Jun 16 12:27:24 2025 by rpki-client