$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/44ced947-ce07-3fa3-9669-c63ed4ee76c4.roa File: 44ced947-ce07-3fa3-9669-c63ed4ee76c4.roa (raw, json) Hash identifier: k1Vdl24fiCd9hf2om1HNXANYgTkcc4WjRPIGkP5x0SE= Subject key identifier: 18:E4:E4:11:7E:C8:1B:B3:02:B8:24:C6:BA:69:79:EE:00:E5:86:AB Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584A34801CE872E5BBEB29E99A00 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/44ced947-ce07-3fa3-9669-c63ed4ee76c4.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 4540 IP address blocks: 170.89.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1c:e8:72:e5:bb:eb:29:e9:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=3c0ceb23-bfdc-4cb3-80d3-09f4ff0dc514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:56:3d:d4:30:25:f7:af:56:b0:4a:93:a3: e5:2d:36:22:7e:04:66:09:fd:3e:e5:77:0c:97:ac: 47:29:cf:29:d2:03:80:3e:f9:d7:7f:ff:64:02:e8: 3b:8c:1e:03:55:66:68:ae:1d:37:5b:aa:ac:43:b5: fd:90:7b:16:69:fd:fe:87:a6:a5:9b:bc:64:ea:66: 36:b5:57:1c:38:71:46:54:1e:3f:47:d4:58:4a:c6: c1:93:7d:33:fa:fa:f2:40:0a:0c:4e:ca:0b:70:e8: c4:ae:05:36:d9:5b:83:1c:b4:cd:20:49:ab:87:f0: d9:83:ba:fd:3e:9b:e2:12:32:4d:e9:ae:07:22:9e: 8b:ff:aa:61:10:3c:15:3f:0b:b4:60:66:cf:42:59: 38:19:fd:98:89:e7:12:b7:6c:5d:af:69:02:cd:58: f5:28:14:60:46:d1:3f:4f:90:4b:e9:ff:3a:fe:d3: 56:cb:88:06:83:99:f9:b1:70:78:c3:07:01:86:89: 4d:77:e1:b2:d3:a3:e2:c4:bc:8b:39:47:d7:81:dc: 3f:3b:2d:da:a5:c9:9c:6d:71:72:46:e3:37:60:be: c6:06:c4:34:34:5e:a9:32:e8:7b:2e:5d:61:56:5f: e5:4e:5c:61:f3:ed:a9:97:8a:34:a9:10:9d:0f:11: b9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E4:E4:11:7E:C8:1B:B3:02:B8:24:C6:BA:69:79:EE:00:E5:86:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/44ced947-ce07-3fa3-9669-c63ed4ee76c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:52:f7:36:0e:7c:38:68:1d:f7:18:5f:19:e6:5e:99:fc:c7: bc:9c:a9:3b:8a:46:f0:a3:bf:e3:1d:d6:9e:c8:d4:5f:ae:9f: c7:8f:d8:3e:be:3e:e1:5d:16:4e:d9:67:3a:87:5d:0c:4a:36: 59:cd:b3:69:3d:32:04:c5:52:8b:b6:cd:8a:2c:e3:d2:42:3e: a8:0e:87:66:13:96:3f:b6:32:e8:84:67:08:63:9e:57:37:f9: 5a:66:67:83:47:51:86:15:0f:c2:04:1c:cb:dc:27:8c:98:59: 29:fb:f6:45:e8:30:3d:6c:db:49:ab:1f:3b:0d:48:8e:70:b1: 90:b6:c8:2e:bc:1d:27:fe:c9:f9:05:a5:db:93:58:8d:24:7d: 73:dd:e3:cb:74:51:56:10:e5:87:42:7e:52:79:0e:f0:5d:3d: 4f:0b:ee:cd:ad:5f:53:dd:af:e8:91:d7:20:b2:65:97:bf:8c: e4:df:ff:ab:3a:c5:75:bc:90:0c:c6:48:5d:78:47:e9:cf:d2: 01:03:38:bc:f0:25:47:c3:c4:2b:5b:14:1d:f8:54:51:1d:9a: ce:0c:2c:aa:57:75:86:86:96:56:f9:5a:4b:74:22:23:f8:5f: 46:90:c6:e2:22:01:0e:6d:4e:84:7d:c4:fc:d2:f6:0b:0f:2b: 18:0f:c5:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBzocuW76ynpmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk M2MwY2ViMjMtYmZkYy00Y2IzLTgwZDMtMDlmNGZmMGRjNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9NWPdQwJfevVrBKk6PlLTYifgRmCf0+5XcM l6xHKc8p0gOAPvnXf/9kAug7jB4DVWZorh03W6qsQ7X9kHsWaf3+h6alm7xk6mY2 tVccOHFGVB4/R9RYSsbBk30z+vryQAoMTsoLcOjErgU22VuDHLTNIEmrh/DZg7r9 PpviEjJN6a4HIp6L/6phEDwVPwu0YGbPQlk4Gf2YiecSt2xdr2kCzVj1KBRgRtE/ T5BL6f86/tNWy4gGg5n5sXB4wwcBholNd+Gy06PixLyLOUfXgdw/Oy3apcmcbXFy RuM3YL7GBsQ0NF6pMuh7Ll1hVl/lTlxh8+2pl4o0qRCdDxG5fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjk5BF+yBuzArgkxrppee4A5YarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNDRjZWQ5NDctY2UwNy0z ZmEzLTk2NjktYzYzZWQ0ZWU3NmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtS9zYOfDhoHfcYXxnmXpn8x7ycqTuKRvCjv+Md1p7I1F+un8eP2D6+ PuFdFk7ZZzqHXQxKNlnNs2k9MgTFUou2zYos49JCPqgOh2YTlj+2MuiEZwhjnlc3 +VpmZ4NHUYYVD8IEHMvcJ4yYWSn79kXoMD1s20mrHzsNSI5wsZC2yC68HSf+yfkF pduTWI0kfXPd48t0UVYQ5YdCflJ5DvBdPU8L7s2tX1Pdr+iR1yCyZZe/jOTf/6s6 xXW8kAzGSF14R+nP0gEDOLzwJUfDxCtbFB34VFEdms4MLKpXdYaGllb5Wkt0IiP4 X0aQxuIiAQ5tToR9xPzS9gsPKxgPxQc= -----END CERTIFICATE-----Generated at Mon Jun 30 10:36:16 2025 by rpki-client