$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa File: a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa (raw, json) Hash identifier: CAbKqvIx/TyOy6AaFDcx50JHv8/HFkpMrjgyFX5/lQg= Subject key identifier: 03:BE:1D:18:17:E8:B5:4F:71:7E:38:29:71:DB:E2:70:EE:E5:14:F2 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584F3A17CFB0752737F63DB9FF00 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 4540 IP address blocks: 170.89.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cf:b0:75:27:37:f6:3d:b9:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=34d71f78-2806-4e7b-b04b-43b95a07ac52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:b0:50:8e:59:2a:1c:bf:6b:c6:4f:e8:3b: 10:0b:48:b7:e3:20:77:9d:0c:cf:fe:be:0b:97:91: 65:a8:fc:e9:79:c9:cc:5f:04:d1:32:7c:c6:d4:a1: 88:36:c2:b2:ad:b0:8e:27:3b:50:8c:b8:77:e9:52: e7:55:34:80:fe:a5:29:82:26:09:e2:ad:5e:f8:79: 01:c4:b5:f9:ea:7d:b9:36:38:e9:67:77:12:d2:0d: 81:f4:a3:c2:46:61:3a:c4:5f:6f:ae:d0:31:01:8c: b2:1a:bc:89:83:2c:b4:41:19:d8:d4:19:84:c2:b6: 8c:0c:87:61:b5:6b:25:21:dc:69:53:b5:26:9b:74: b7:b0:46:d6:3d:21:c4:84:c1:48:ca:bc:e1:ee:29: 0d:33:6d:71:fd:71:72:81:ff:70:5f:e7:25:70:af: 9d:cd:c8:cb:32:ae:10:d2:0e:54:94:98:15:5a:d3: e6:69:35:38:ab:66:b5:22:8e:56:ec:41:f5:19:ea: 21:62:91:3e:92:21:76:db:0b:75:6a:27:5f:2e:19: df:b7:40:d0:6d:e1:ea:49:90:74:eb:94:18:0b:59: a9:3f:d8:dd:f2:c0:e4:42:6c:ff:f7:8e:66:b9:50: 6c:7e:0d:55:25:f1:ac:d1:b9:01:d5:d4:af:a3:89: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BE:1D:18:17:E8:B5:4F:71:7E:38:29:71:DB:E2:70:EE:E5:14:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:cd:de:49:35:f6:63:b8:73:d3:53:f0:ce:20:df:3b:7b:96: bc:1c:f1:97:23:4b:59:9a:6f:57:c1:96:e2:95:56:2b:c8:36: 77:47:b9:5d:7b:0c:50:d9:91:80:9d:04:10:e0:bd:75:8c:ef: 0d:04:30:b9:15:81:48:40:17:d1:aa:7e:18:97:1b:4b:42:6a: 3d:f9:e8:06:79:12:3a:7b:7a:91:c8:b8:56:02:8d:3e:c4:3a: 4e:82:d9:63:6d:a5:57:8d:d4:eb:eb:50:05:7b:c2:85:74:c5: 51:16:3b:8b:65:49:87:81:7e:7f:c0:91:6e:2b:86:a9:67:76: 04:33:ac:01:fc:7d:a3:6c:3b:70:a4:7b:69:11:f5:6a:d8:ef: 11:5f:4f:6b:3f:d2:54:0a:9d:f7:d0:af:fe:f5:67:52:0c:83: 83:81:59:7e:82:9c:84:6b:07:99:c1:af:be:a1:1b:1a:ce:47: 08:00:ca:c7:63:4d:c8:d3:94:63:6b:59:16:28:a2:10:f0:90: 15:ab:28:e0:c6:e6:02:42:f4:37:ed:2e:00:6f:87:cc:c0:19: 26:39:dd:a2:0c:95:70:4a:ea:d7:2c:1e:01:98:73:f7:37:48: a3:25:40:a9:4b:31:31:55:1d:70:db:eb:53:b8:c0:7d:86:9c: b3:56:b2:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8+wdSc39j25/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MzRkNzFmNzgtMjgwNi00ZTdiLWIwNGItNDNiOTVhMDdhYzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEuwUI5ZKhy/a8ZP6DsQC0i34yB3nQzP/r4L l5FlqPzpecnMXwTRMnzG1KGINsKyrbCOJztQjLh36VLnVTSA/qUpgiYJ4q1e+HkB xLX56n25NjjpZ3cS0g2B9KPCRmE6xF9vrtAxAYyyGryJgyy0QRnY1BmEwraMDIdh tWslIdxpU7Umm3S3sEbWPSHEhMFIyrzh7ikNM21x/XFygf9wX+clcK+dzcjLMq4Q 0g5UlJgVWtPmaTU4q2a1Io5W7EH1GeohYpE+kiF22wt1aidfLhnft0DQbeHqSZB0 65QYC1mpP9jd8sDkQmz/945muVBsfg1VJfGs0bkB1dSvo4mTPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAO+HRgX6LVPcX44KXHb4nDu5RTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYTAwYjY3ZmYtYzJlMC0z NThkLWIyNWUtMGYxNTBjNjg3ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfN3kk19mO4c9NT8M4g3zt7lrwc8ZcjS1mab1fBluKVVivINndHuV17 DFDZkYCdBBDgvXWM7w0EMLkVgUhAF9GqfhiXG0tCaj356AZ5Ejp7epHIuFYCjT7E Ok6C2WNtpVeN1OvrUAV7woV0xVEWO4tlSYeBfn/AkW4rhqlndgQzrAH8faNsO3Ck e2kR9WrY7xFfT2s/0lQKnffQr/71Z1IMg4OBWX6CnIRrB5nBr76hGxrORwgAysdj TcjTlGNrWRYoohDwkBWrKODG5gJC9DftLgBvh8zAGSY53aIMlXBK6tcsHgGYc/c3 SKMlQKlLMTFVHXDb61O4wH2GnLNWssc= -----END CERTIFICATE-----Generated at Thu Sep 24 13:52:28 2026 by rpki-client