$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa File: a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa (raw, json) Hash identifier: vfWLtGAbnJ7XLGxaIzBN3e9EP2X/uulQXsYVM0yVn/A= Subject key identifier: 0B:80:B0:6B:1F:CA:64:63:38:85:F5:00:F8:F0:B8:7D:EB:FF:51:23 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584A34801CC305198E0481970340 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 4540 IP address blocks: 170.89.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1c:c3:05:19:8e:04:81:97:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=f17b5681-20a5-4bba-b47a-11e11ea4f84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b8:79:6e:1f:76:cf:ab:71:3a:1c:6a:e9:e0: 66:d5:d5:2d:14:84:17:5d:a6:33:95:6b:71:b6:9f: 5b:be:4f:db:59:b5:21:d3:14:08:d5:92:34:bf:e4: 94:50:2c:64:7e:29:36:42:5d:e0:d9:ef:bb:b3:ae: a6:dc:7b:86:71:40:f1:7e:25:5d:73:53:e7:46:fe: 90:71:cd:44:f3:04:63:7e:83:6d:de:29:8f:24:1a: 89:f7:cb:8a:4e:4a:3d:84:64:47:e4:a7:75:dd:ce: a2:a8:e4:60:c7:d1:10:7d:e1:ba:bf:c8:ce:42:44: 11:a1:c7:1f:c4:88:64:47:35:d7:0d:0f:1e:67:30: 06:e5:18:c7:45:2f:5e:8e:cb:a9:cf:7f:2c:ad:f2: d1:d1:7b:7c:ff:f4:9c:b9:9f:ba:4d:66:50:ee:9b: 57:be:06:51:7a:72:e2:b6:9a:59:e7:89:6a:2f:b4: b2:12:88:30:42:6f:08:5c:11:32:95:b9:07:47:56: 0b:3a:18:e9:02:d1:86:d7:d9:b1:61:18:1e:f9:86: 5c:d6:9b:ca:2d:f6:55:c2:39:53:78:ab:be:7f:38: 29:f0:ab:70:46:3c:e3:5d:12:2b:e3:37:c0:d6:e1: 3d:97:8b:cf:08:69:7f:04:92:d3:9f:65:c6:fb:04: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:80:B0:6B:1F:CA:64:63:38:85:F5:00:F8:F0:B8:7D:EB:FF:51:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f0:16:63:fc:9f:bb:73:18:63:1d:7b:fc:9d:3a:3c:f6:7f: 58:14:c5:a8:75:dd:75:a4:cc:c9:02:cc:d6:48:8f:bf:66:4b: 3b:42:22:1f:26:a0:bd:f4:d3:76:58:0f:7b:64:bd:df:b7:0a: 24:ca:80:d2:f6:5e:67:10:c6:7d:f2:d3:1e:ff:20:98:54:d1: e4:97:5b:8f:49:a0:2e:6d:d7:3a:3b:7a:cd:55:10:cb:d4:17: 22:59:85:db:b5:ed:f5:cd:40:60:6e:c9:c0:2b:8e:69:5e:e4: b9:62:99:3e:e8:6a:b0:d8:68:31:ba:9a:02:68:6f:6b:31:78: b9:c1:62:4b:b2:62:13:8d:b0:e1:48:fa:d7:4f:89:63:1e:c9: 42:36:f9:e1:b4:eb:0f:7d:19:dc:f4:24:fa:cb:9e:ec:72:30: 28:13:c1:b3:5c:25:c7:7e:5a:1d:14:2f:07:80:dd:19:2d:a5: f5:17:e4:b8:34:ee:c9:a8:61:3a:71:9f:97:d8:b4:f7:5d:ee: 9f:b0:cd:a9:b4:fa:ae:89:e9:47:ba:35:97:f8:02:68:0d:bb: 39:f2:6c:5a:34:f3:97:23:87:a5:17:c1:4e:40:c6:72:7f:60: d8:a3:b3:58:79:c4:6b:87:64:b3:11:ff:44:08:e4:57:08:f3: 57:1e:98:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBzDBRmOBIGXA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZjE3YjU2ODEtMjBhNS00YmJhLWI0N2EtMTFlMTFlYTRmODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bh5bh92z6txOhxq6eBm1dUtFIQXXaYzlWtx tp9bvk/bWbUh0xQI1ZI0v+SUUCxkfik2Ql3g2e+7s66m3HuGcUDxfiVdc1PnRv6Q cc1E8wRjfoNt3imPJBqJ98uKTko9hGRH5Kd13c6iqORgx9EQfeG6v8jOQkQRoccf xIhkRzXXDQ8eZzAG5RjHRS9ejsupz38srfLR0Xt8//ScuZ+6TWZQ7ptXvgZRenLi tppZ54lqL7SyEogwQm8IXBEylbkHR1YLOhjpAtGG19mxYRge+YZc1pvKLfZVwjlT eKu+fzgp8KtwRjzjXRIr4zfA1uE9l4vPCGl/BJLTn2XG+wSmOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuAsGsfymRjOIX1APjwuH3r/1EjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYTAwYjY3ZmYtYzJlMC0z NThkLWIyNWUtMGYxNTBjNjg3ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvwFmP8n7tzGGMde/ydOjz2f1gUxah13XWkzMkCzNZIj79mSztCIh8m oL3003ZYD3tkvd+3CiTKgNL2XmcQxn3y0x7/IJhU0eSXW49JoC5t1zo7es1VEMvU FyJZhdu17fXNQGBuycArjmle5LlimT7oarDYaDG6mgJob2sxeLnBYkuyYhONsOFI +tdPiWMeyUI2+eG06w99Gdz0JPrLnuxyMCgTwbNcJcd+Wh0ULweA3RktpfUX5Lg0 7smoYTpxn5fYtPdd7p+wzam0+q6J6Ue6NZf4AmgNuznybFo085cjh6UXwU5AxnJ/ YNijs1h5xGuHZLMR/0QI5FcI81cemDg= -----END CERTIFICATE-----Generated at Mon Jun 16 15:31:31 2025 by rpki-client