$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa File: 4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa (raw, json) Hash identifier: MhzUc1YIkIzdcyhS8VklhRlhSQ0uMMFuaTgIfF0k1VM= Subject key identifier: 38:90:15:0A:72:7A:EA:76:3B:BE:28:4E:00:2E:25:A0:0A:1D:90:40 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584F3A17CFE2E067F514C16C3E80 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 4540 IP address blocks: 170.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cf:e2:e0:67:f5:14:c1:6c:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=8c13e09d-d0a0-46d4-8bb4-6ace80ab4b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2f:da:59:ab:f6:07:78:88:82:26:14:68:d5: 5f:bd:79:4f:05:0a:f6:f1:47:0a:9d:4f:b4:34:8d: 98:74:2c:aa:fc:7d:fc:9d:ec:a7:1e:db:f7:a0:d1: 47:bd:54:30:5c:bc:07:4f:f8:e7:e0:2a:96:d5:b8: 77:9a:0f:5b:7d:11:59:53:05:e6:9d:75:97:50:6c: 4b:de:f7:ef:25:10:81:03:7e:eb:73:d1:15:c0:80: 1d:1b:d5:f7:03:2b:51:53:d9:a7:bd:7b:7f:5b:83: 9e:69:62:25:8a:22:ba:48:28:c6:a6:6f:8c:02:fc: f8:d4:ae:88:bf:79:4a:86:14:b1:9c:a9:d5:61:79: 70:ea:e1:c2:eb:5a:70:da:da:83:41:88:34:f7:cf: cf:53:4a:cb:9d:a2:73:f6:11:ec:67:5e:77:c4:59: 6d:69:bb:2a:67:6b:32:7d:84:9e:e1:21:3c:b6:41: 85:0e:44:21:48:4e:50:c9:7e:04:0d:89:4a:25:82: 5d:68:f0:7b:eb:46:2a:37:b1:13:7d:07:68:1f:a1: 5f:27:54:40:f5:67:cc:8a:95:b9:58:e1:1e:5a:b1: 9b:97:91:0d:7a:f3:e3:50:8a:17:43:1a:0e:93:ba: 4e:c7:ce:45:0e:02:e3:8c:0c:d4:c6:da:95:9f:d1: e6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:90:15:0A:72:7A:EA:76:3B:BE:28:4E:00:2E:25:A0:0A:1D:90:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:bb:0c:5e:47:a2:6c:71:23:a5:1a:cb:3d:76:6f:14:cd:d4: 03:f1:8f:6f:17:45:71:93:40:65:2a:fa:02:ca:63:4a:d6:25: 5a:7a:7c:1e:08:13:c3:1d:c3:72:0f:50:f5:1e:d4:75:4f:cf: 8f:9b:62:6a:48:a0:14:21:a2:bf:47:51:56:40:10:a9:83:d7: ba:a0:b4:7a:56:21:ff:64:14:66:66:bb:1c:70:1b:67:9a:58: 69:a3:b2:8e:a2:54:07:be:64:cb:ea:c3:c1:bf:25:36:01:36: 82:be:d0:ed:8b:71:f1:6c:66:df:91:a7:18:61:dc:cf:c0:d3: 01:91:b6:cc:bc:6e:eb:fb:c0:16:e3:cd:e9:e4:85:4c:66:2f: f7:d7:35:81:b3:34:29:38:60:93:3d:3f:59:a1:ce:40:ff:e1: 57:cd:78:82:6f:bd:0a:af:8b:09:b6:2b:a4:24:d1:80:92:71: 96:20:82:ff:5d:d2:9b:86:36:cb:39:30:d0:cd:15:fb:9b:41: f5:70:32:0b:49:a3:f7:1e:13:ee:f9:5d:72:53:4a:a2:9d:a0: a6:08:5c:57:f1:b7:16:4a:3a:d7:52:6e:cf:04:d3:82:f0:0b: 49:43:18:04:df:89:8c:00:38:50:f6:b9:d6:d3:40:98:81:c6: 9c:47:2c:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8/i4Gf1FMFsPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk OGMxM2UwOWQtZDBhMC00NmQ0LThiYjQtNmFjZTgwYWI0YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC/aWav2B3iIgiYUaNVfvXlPBQr28UcKnU+0 NI2YdCyq/H38neynHtv3oNFHvVQwXLwHT/jn4CqW1bh3mg9bfRFZUwXmnXWXUGxL 3vfvJRCBA37rc9EVwIAdG9X3AytRU9mnvXt/W4OeaWIliiK6SCjGpm+MAvz41K6I v3lKhhSxnKnVYXlw6uHC61pw2tqDQYg098/PU0rLnaJz9hHsZ153xFltabsqZ2sy fYSe4SE8tkGFDkQhSE5QyX4EDYlKJYJdaPB760YqN7ETfQdoH6FfJ1RA9WfMipW5 WOEeWrGbl5ENevPjUIoXQxoOk7pOx85FDgLjjAzUxtqVn9Hm4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiQFQpyeup2O74oTgAuJaAKHZBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNGFhOGMzZDItY2JmMi0z MTc5LTllNTMtOWFkMGFmNGI3MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL67DF5HomxxI6Uayz12bxTN1APxj28XRXGTQGUq+gLKY0rWJVp6fB4I E8Mdw3IPUPUe1HVPz4+bYmpIoBQhor9HUVZAEKmD17qgtHpWIf9kFGZmuxxwG2ea WGmjso6iVAe+ZMvqw8G/JTYBNoK+0O2LcfFsZt+Rpxhh3M/A0wGRtsy8buv7wBbj zenkhUxmL/fXNYGzNCk4YJM9P1mhzkD/4VfNeIJvvQqviwm2K6Qk0YCScZYggv9d 0puGNss5MNDNFfubQfVwMgtJo/ceE+75XXJTSqKdoKYIXFfxtxZKOtdSbs8E04Lw C0lDGATfiYwAOFD2udbTQJiBxpxHLNs= -----END CERTIFICATE-----Generated at Sat Sep 26 09:07:14 2026 by rpki-client