$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa File: 872d4d84-ef45-3f24-82b1-08082aba7e34.roa (raw, json) Hash identifier: 4XEFD+djOgSKMy/KPSzCkn6FiDYVKjnNpoPin4h6YfQ= Subject key identifier: F6:5C:4E:53:7E:DA:EE:5D:47:1B:FA:EF:84:E2:C1:B5:A6:7D:4E:DD Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584B153C1829E6319905A01A92C0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 4540 IP address blocks: 170.89.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:18:29:e6:31:99:05:a0:1a:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=db5e7322-bcb5-4915-9792-b2329d8b13e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:47:d8:33:ae:6a:41:ad:23:92:96:f2:71: c9:53:36:b9:89:6e:a4:0f:ca:53:0d:df:b6:ab:42: b1:80:cb:16:9b:f9:28:ff:cd:30:f0:82:3e:0a:41: ea:59:ce:42:1c:7a:e2:10:42:71:08:e1:99:3e:2c: f5:c4:c5:9d:4e:01:e8:fc:24:41:17:41:59:89:21: 4b:03:5f:e3:89:1d:53:fe:21:8f:1f:c8:7d:dc:73: b9:6b:bf:53:ff:ac:c1:c8:a7:da:d8:f7:9e:f0:73: 0d:af:d0:7f:74:b7:05:e8:39:81:e0:23:87:39:c1: ff:34:b1:92:bd:f8:64:c3:60:8a:b7:23:4f:ad:37: 94:2f:60:4b:fe:d5:52:3d:c8:e3:0e:a8:d8:40:10: 09:1a:4b:c1:49:48:d2:a7:df:97:eb:cf:4e:9f:96: b8:1f:51:84:47:f6:27:f8:5f:41:74:1f:0d:57:41: 4e:ee:55:5c:7f:bf:a9:8d:63:be:3f:0c:d6:c9:e9: c5:dd:e4:59:62:2b:d1:ab:02:95:c4:35:6d:6b:5a: 96:ec:e6:1b:df:4d:5d:62:e2:48:98:b2:ec:d5:8e: 52:c7:35:85:c5:cf:8e:71:c4:35:54:30:56:16:11: 4a:c7:ad:63:70:72:86:59:18:09:02:d3:02:24:bd: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5C:4E:53:7E:DA:EE:5D:47:1B:FA:EF:84:E2:C1:B5:A6:7D:4E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:76:ff:77:e5:ae:45:9f:50:8b:1b:24:34:2c:fb:35:c8:2d: 3b:c4:cd:79:a2:eb:47:d5:55:8f:c0:03:a3:3a:26:97:bc:de: 02:b6:d5:14:6d:e4:8a:56:1a:4f:8b:d4:61:40:59:8b:e2:42: e6:b1:ef:cd:9d:80:79:36:d1:7d:dd:39:61:b0:bc:29:d6:ee: f7:32:cb:2e:7e:cb:59:08:7e:50:3f:e6:1f:e2:6e:55:e1:de: 8a:a6:1c:41:60:02:a9:b6:a6:bb:c4:ae:5a:a3:aa:86:66:b6: 38:37:98:01:68:a8:12:1d:13:f8:27:7a:ab:c1:da:ba:73:32: bf:25:a3:7c:7a:ce:fa:78:c3:47:32:5b:ca:ef:8f:c4:2c:a6: 2f:a2:aa:76:3a:ac:8e:1d:c2:4a:a7:e9:ab:7e:f3:47:e7:a2: d1:30:8a:6a:aa:cb:6b:28:74:34:f1:87:dc:2b:f4:6e:cf:58: ed:3c:9b:f3:91:4e:05:5b:81:7b:20:af:eb:e0:73:95:0f:a0: 8f:02:e7:0f:50:b5:b9:af:23:c3:07:5c:7e:db:ac:1e:41:a6: 32:57:78:6f:81:af:c7:5d:aa:20:66:0c:72:e3:22:44:a6:c2: 27:1f:1a:cc:39:9f:78:3d:d3:d8:39:57:16:ec:de:77:24:dd: 48:6a:75:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBgp5jGZBaAaksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ZGI1ZTczMjItYmNiNS00OTE1LTk3OTItYjIzMjlkOGIxM2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHpH2DOuakGtI5KW8nHJUza5iW6kD8pTDd+2 q0KxgMsWm/ko/80w8II+CkHqWc5CHHriEEJxCOGZPiz1xMWdTgHo/CRBF0FZiSFL A1/jiR1T/iGPH8h93HO5a79T/6zByKfa2Pee8HMNr9B/dLcF6DmB4COHOcH/NLGS vfhkw2CKtyNPrTeUL2BL/tVSPcjjDqjYQBAJGkvBSUjSp9+X689On5a4H1GER/Yn +F9BdB8NV0FO7lVcf7+pjWO+PwzWyenF3eRZYivRqwKVxDVta1qW7OYb301dYuJI mLLs1Y5SxzWFxc+OccQ1VDBWFhFKx61jcHKGWRgJAtMCJL2z8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZcTlN+2u5dRxv674TiwbWmfU7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODcyZDRkODQtZWY0NS0z ZjI0LTgyYjEtMDgwODJhYmE3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqln4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL92/3flrkWfUIsbJDQs+zXILTvEzXmi60fVVY/AA6M6Jpe83gK21RRt 5IpWGk+L1GFAWYviQuax782dgHk20X3dOWGwvCnW7vcyyy5+y1kIflA/5h/iblXh 3oqmHEFgAqm2prvErlqjqoZmtjg3mAFoqBIdE/gneqvB2rpzMr8lo3x6zvp4w0cy W8rvj8Qspi+iqnY6rI4dwkqn6at+80fnotEwimqqy2sodDTxh9wr9G7PWO08m/OR TgVbgXsgr+vgc5UPoI8C5w9QtbmvI8MHXH7brB5BpjJXeG+Br8ddqiBmDHLjIkSm wicfGsw5n3g909g5Vxbs3nck3UhqdZw= -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:23 2025 by rpki-client