$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa File: 872d4d84-ef45-3f24-82b1-08082aba7e34.roa (raw, json) Hash identifier: Smbl90VeJyc5VzTRcgeVzKXG26+2tQLPM2eG1G5iVVc= Subject key identifier: B2:43:87:C2:9A:04:9A:56:EB:1A:38:F2:E8:2A:5A:06:37:A6:7B:07 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584F3A17CFFBC60366F0713AC5A0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 4540 IP address blocks: 170.89.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cf:fb:c6:03:66:f0:71:3a:c5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=5b015122-9c6f-4fad-9ec7-9089ac77d067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:2d:b4:34:39:6d:ef:5d:c2:b4:0c:22:26: ce:94:4a:d8:5a:3b:ca:b3:81:d3:64:c8:be:92:38: c9:90:8a:65:ee:4d:12:4c:47:19:35:70:e6:4e:d4: d7:d9:0e:aa:ee:ab:40:07:11:eb:ce:18:40:6f:65: 2d:6b:27:c6:69:69:0b:b0:a9:a3:fe:ca:72:ab:88: ff:8f:13:4b:1f:68:4f:2c:73:d1:f2:67:a8:99:9a: d1:c7:4b:d2:ce:36:db:2a:ae:f5:c6:e7:13:bf:27: 8e:a7:7f:22:e4:7e:41:76:ad:88:27:a5:ec:f0:50: 62:97:b7:2b:73:47:10:cb:4e:84:6e:c4:b4:87:48: 67:34:ad:91:74:6e:99:63:f4:99:e6:85:6f:df:36: 5c:48:da:95:0a:8e:31:04:0d:79:84:ad:5b:dd:09: 08:4b:66:5f:44:94:24:8b:ed:35:d8:09:52:93:e9: c0:66:5e:cc:4e:cd:39:3d:5c:22:3c:5f:90:7d:69: 72:16:33:6f:7e:30:b2:16:ce:c7:71:84:b0:bf:1f: aa:2d:09:29:b5:35:fe:06:b4:c2:62:01:7a:44:ee: f8:40:61:80:5f:10:10:e1:42:01:2b:e8:0b:14:7c: 08:d7:6b:7c:2e:90:46:5a:68:3a:fa:8e:9c:92:99: 3e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:43:87:C2:9A:04:9A:56:EB:1A:38:F2:E8:2A:5A:06:37:A6:7B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:dd:6d:4d:27:f4:57:9b:71:42:c8:55:cb:06:6f:dd:34:f4: 53:e4:59:89:97:9b:f3:ae:c8:11:f0:6b:36:1e:23:ad:3b:70: e6:c1:61:7b:75:98:01:4d:ee:26:ec:19:62:5f:25:f3:88:e5: 86:73:33:c7:d4:38:05:ef:11:53:b0:6d:e3:73:7c:4a:cb:5d: 08:af:58:13:af:a0:d2:d2:10:36:e3:8c:49:56:01:4c:f7:05: 35:0e:8d:36:ea:cd:a3:df:34:d4:d0:93:4a:6f:9e:f0:4e:81: e1:4e:8f:4d:7b:73:b5:3d:99:9c:39:4e:6e:7f:14:bf:4c:ce: 0d:d4:e8:d2:28:5e:58:97:c2:01:69:70:da:a9:e6:d1:f8:37: 7b:ad:d4:21:9a:c5:52:8a:64:6a:81:65:a4:33:ce:97:fc:d9: 5a:c8:59:bb:0f:86:58:ce:17:63:01:3a:1b:db:82:fb:1a:ab: 97:4a:a8:d0:69:27:7a:bc:19:db:c5:63:d7:20:e9:a4:f9:4d: 9d:2e:a9:6e:65:ec:d1:18:13:dc:b2:67:79:00:eb:8e:a2:64: f5:12:20:7e:ac:19:80:62:f2:88:87:ca:b7:8e:e6:33:3d:f6: 8c:e5:71:40:a2:bc:7f:be:38:c1:77:a6:96:be:38:18:28:6b: a9:9c:84:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8/7xgNm8HE6xaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk NWIwMTUxMjItOWM2Zi00ZmFkLTllYzctOTA4OWFjNzdkMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlUttDQ5be9dwrQMIibOlErYWjvKs4HTZMi+ kjjJkIpl7k0STEcZNXDmTtTX2Q6q7qtABxHrzhhAb2UtayfGaWkLsKmj/spyq4j/ jxNLH2hPLHPR8meomZrRx0vSzjbbKq71xucTvyeOp38i5H5Bdq2IJ6Xs8FBil7cr c0cQy06EbsS0h0hnNK2RdG6ZY/SZ5oVv3zZcSNqVCo4xBA15hK1b3QkIS2ZfRJQk i+012AlSk+nAZl7MTs05PVwiPF+QfWlyFjNvfjCyFs7HcYSwvx+qLQkptTX+BrTC YgF6RO74QGGAXxAQ4UIBK+gLFHwI12t8LpBGWmg6+o6ckpk+2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJDh8KaBJpW6xo48ugqWgY3pnsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODcyZDRkODQtZWY0NS0z ZjI0LTgyYjEtMDgwODJhYmE3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqln4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvdbU0n9FebcULIVcsGb9009FPkWYmXm/OuyBHwazYeI607cObBYXt1 mAFN7ibsGWJfJfOI5YZzM8fUOAXvEVOwbeNzfErLXQivWBOvoNLSEDbjjElWAUz3 BTUOjTbqzaPfNNTQk0pvnvBOgeFOj017c7U9mZw5Tm5/FL9Mzg3U6NIoXliXwgFp cNqp5tH4N3ut1CGaxVKKZGqBZaQzzpf82VrIWbsPhljOF2MBOhvbgvsaq5dKqNBp J3q8GdvFY9cg6aT5TZ0uqW5l7NEYE9yyZ3kA646iZPUSIH6sGYBi8oiHyreO5jM9 9ozlcUCivH++OMF3ppa+OBgoa6mchIY= -----END CERTIFICATE-----Generated at Tue Sep 22 04:26:57 2026 by rpki-client