$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa File: 80e96d3f-650e-3ca7-b9f9-15492a817e57.roa (raw, json) Hash identifier: 8/kSjaia0LUvDQNUf++A5I6P5vZUAzTVrhTNnwHOSCQ= Subject key identifier: 09:B8:DE:61:70:9C:EF:78:64:54:F3:DC:44:CD:08:C3:D5:FB:5C:C4 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C17F29CD3F6936501D600 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 170.89.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:17:f2:9c:d3:f6:93:65:01:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=cadca1e6-e97f-467e-abb4-9874404ff5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ce:e2:68:58:74:dd:bc:5c:e2:60:69:81:fd: db:06:7a:e4:39:a4:e5:8b:07:69:6a:24:b3:56:2e: eb:71:de:45:49:5a:3f:46:28:01:fd:82:3e:80:97: 79:be:dd:93:c5:e1:e3:b9:33:fc:de:09:c1:b8:c0: 44:58:d5:ea:47:d7:aa:71:04:41:48:4f:df:ab:19: 54:cf:fa:fd:03:95:99:9b:c4:63:4f:8e:99:55:02: af:14:44:e2:34:94:0e:b4:28:92:d5:1c:30:ee:cd: 27:0e:b6:85:3e:b1:f8:ef:18:a6:35:64:bd:a4:2a: 7c:14:9f:4a:c6:bc:09:9f:49:0b:ff:85:3f:f2:52: 3d:af:89:84:ca:8d:22:04:6c:ff:72:60:8f:c3:72: bc:49:a4:52:8e:c0:3a:13:b3:49:2c:63:de:fb:06: c9:e0:a4:d1:f9:ee:28:fc:8a:6b:06:ae:4f:fb:3d: ee:98:0a:58:0c:4e:a8:8a:29:a5:df:db:8a:8a:36: 1b:06:6b:00:ce:ac:fb:3f:dc:4b:f0:c4:60:8b:56: 60:f0:e5:79:f8:56:59:02:74:cf:29:07:ae:3f:e1: f4:2d:72:19:a5:41:7b:c0:d9:10:44:24:6f:eb:fe: 54:d1:08:c3:22:cc:ff:de:0a:65:fd:bd:c1:33:e7: 06:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B8:DE:61:70:9C:EF:78:64:54:F3:DC:44:CD:08:C3:D5:FB:5C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3a:57:6b:1f:be:00:fd:a7:16:99:34:d5:5e:77:4a:6a:82: 80:ec:83:d9:01:a8:46:f3:33:0c:16:32:bd:82:2b:e9:94:59: 37:63:ef:05:90:c8:d5:da:70:99:11:ff:31:9f:3e:4e:95:61: 9b:a8:1b:ab:c6:01:7e:a9:70:e5:8b:fd:9b:1d:11:36:90:cf: 97:1f:57:b6:c8:92:18:21:85:7c:da:7d:24:af:a6:ce:0f:36: ec:55:ff:08:d4:ce:6b:1f:be:c9:c5:36:fa:9e:d1:38:c8:50: c2:80:17:c0:d9:57:21:69:e3:2f:9e:1a:bb:1c:f0:3a:96:8e: 0a:5d:bb:e7:9e:cf:24:03:24:2d:1a:90:cf:60:b9:27:47:03: ca:2d:92:e2:e5:1d:c7:11:a8:10:1f:78:51:44:40:6d:5d:a9: a2:38:ae:f1:ef:24:a7:c7:45:1a:19:b5:9e:95:93:a6:cb:64: d2:cf:83:da:29:72:10:d1:24:88:10:c6:b1:58:d4:3e:7f:46: 0a:3f:65:7c:72:d2:df:25:f2:8f:01:87:37:26:90:bf:52:0f: 00:cd:f5:86:f2:72:38:6c:5d:5c:06:c8:70:8e:97:e8:a4:4a: 27:b5:e2:6b:dc:ac:74:db:72:d9:19:ee:77:7a:8a:72:e9:10: 76:53:c6:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBfynNP2k2UB1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk Y2FkY2ExZTYtZTk3Zi00NjdlLWFiYjQtOTg3NDQwNGZmNWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA287iaFh03bxc4mBpgf3bBnrkOaTliwdpaiSz Vi7rcd5FSVo/RigB/YI+gJd5vt2TxeHjuTP83gnBuMBEWNXqR9eqcQRBSE/fqxlU z/r9A5WZm8RjT46ZVQKvFETiNJQOtCiS1Rww7s0nDraFPrH47ximNWS9pCp8FJ9K xrwJn0kL/4U/8lI9r4mEyo0iBGz/cmCPw3K8SaRSjsA6E7NJLGPe+wbJ4KTR+e4o /IprBq5P+z3umApYDE6oiiml39uKijYbBmsAzqz7P9xL8MRgi1Zg8OV5+FZZAnTP KQeuP+H0LXIZpUF7wNkQRCRv6/5U0QjDIsz/3gpl/b3BM+cGQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm43mFwnO94ZFTz3ETNCMPV+1zEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODBlOTZkM2YtNjUwZS0z Y2E3LWI5ZjktMTU0OTJhODE3ZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA86V2sfvgD9pxaZNNVed0pqgoDsg9kBqEbzMwwWMr2CK+mUWTdj7wWQ yNXacJkR/zGfPk6VYZuoG6vGAX6pcOWL/ZsdETaQz5cfV7bIkhghhXzafSSvps4P NuxV/wjUzmsfvsnFNvqe0TjIUMKAF8DZVyFp4y+eGrsc8DqWjgpdu+eezyQDJC0a kM9guSdHA8otkuLlHccRqBAfeFFEQG1dqaI4rvHvJKfHRRoZtZ6Vk6bLZNLPg9op chDRJIgQxrFY1D5/Rgo/ZXxy0t8l8o8BhzcmkL9SDwDN9YbycjhsXVwGyHCOl+ik Sie14mvcrHTbctkZ7nd6inLpEHZTxrQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:10:57 2025 by rpki-client