$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa File: 4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa (raw, json) Hash identifier: KSAHRagjy7VUAWynrtce7z+9qyhMsZbtYSXmPHH1LLk= Subject key identifier: F6:30:AF:10:EC:41:1E:79:18:78:94:61:D0:3E:66:F4:2D:10:F6:E7 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584DB7702F19D91E663E994F4280 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 4540 IP address blocks: 170.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:2f:19:d9:1e:66:3e:99:4f:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=8a3efa3e-8ffc-485b-ab11-ad2154debff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:c5:d0:83:97:29:2d:e6:49:79:a3:61:50: a4:31:4f:c0:a4:2e:3f:69:44:c8:f7:61:8e:7a:55: 7d:0b:8e:f8:8f:d2:27:2d:77:ba:3c:3f:52:3b:69: b0:5f:0a:43:6c:53:bd:55:fb:32:9c:f1:a0:ff:02: 2d:b3:da:85:cc:56:03:3e:bd:1e:f9:18:f1:e2:9b: 7d:f1:09:48:81:92:b0:33:3a:a7:e1:84:4f:45:ec: f5:13:12:a1:6b:b7:09:75:35:c9:24:b3:fc:6e:02: b9:bf:42:59:df:df:d3:d0:b2:fb:47:8e:91:9c:33: 33:c5:3b:75:cd:e7:2a:d9:f4:c2:ba:6a:03:87:ec: f9:dc:cb:f8:c3:b8:b7:cf:b4:29:8a:c6:83:e2:51: a7:a3:38:67:30:05:86:5c:25:a5:c7:27:b9:24:58: d2:1f:7d:84:76:3c:50:05:33:b4:4e:44:85:b9:01: eb:a3:3d:fc:ef:1b:c9:7f:3c:5e:b9:f3:81:6c:ec: 3a:6a:6f:10:f1:0a:48:57:8d:ed:7a:5e:b2:49:67: 18:34:84:51:db:35:3a:52:50:83:e3:44:d6:39:76: c3:68:0e:61:49:dd:35:95:b0:0e:eb:5e:e5:62:95: 5d:6f:44:bb:1c:76:cc:f3:cb:b4:c9:01:67:e0:f4: 96:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:30:AF:10:EC:41:1E:79:18:78:94:61:D0:3E:66:F4:2D:10:F6:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/4aa8c3d2-cbf2-3179-9e53-9ad0af4b7194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:58:92:03:b5:92:4d:3b:e9:9d:e7:55:11:47:86:32:0b:01: 8f:e0:b2:08:d1:07:14:ff:b3:6b:3d:41:76:ad:93:40:b0:5e: 5e:7a:6b:c6:35:fa:43:c2:b4:d5:54:a3:af:be:01:0a:39:17: 19:9d:69:06:c0:d8:b0:e4:6e:52:9e:f6:60:42:60:8e:0d:f2: 7f:22:64:a7:98:35:51:32:f3:a4:25:95:6d:91:dc:04:fe:ec: 2c:53:39:89:3b:86:96:ca:28:13:3e:22:e1:75:32:82:23:2f: db:46:19:9f:29:35:5a:62:2c:43:e7:a9:b1:53:7f:bd:59:45: 2e:4a:9a:c5:8c:78:28:5a:0a:63:ac:79:18:4b:01:7e:2b:e4: 7e:bf:5e:04:97:7d:3c:c2:62:36:ae:5e:72:9e:d1:14:d4:ca: 9e:c7:c9:ca:da:08:da:22:37:75:bc:91:d7:a8:83:c4:96:2e: df:25:00:ca:ea:26:63:4f:b8:7d:6f:a6:eb:5c:16:2b:7e:14: 5d:92:f6:8a:21:34:7e:1a:f9:3e:7c:69:97:bd:27:bf:3a:4e: ab:87:14:f5:61:b4:b5:b9:35:71:fd:fe:1e:70:65:a7:3c:35: 41:de:a7:a8:06:c3:50:2c:26:8a:07:08:c5:4b:e7:72:35:b6: 38:e2:de:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cC8Z2R5mPplPQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk OGEzZWZhM2UtOGZmYy00ODViLWFiMTEtYWQyMTU0ZGViZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZHF0IOXKS3mSXmjYVCkMU/ApC4/aUTI92GO elV9C474j9InLXe6PD9SO2mwXwpDbFO9VfsynPGg/wIts9qFzFYDPr0e+Rjx4pt9 8QlIgZKwMzqn4YRPRez1ExKha7cJdTXJJLP8bgK5v0JZ39/T0LL7R46RnDMzxTt1 zecq2fTCumoDh+z53Mv4w7i3z7QpisaD4lGnozhnMAWGXCWlxye5JFjSH32EdjxQ BTO0TkSFuQHroz387xvJfzxeufOBbOw6am8Q8QpIV43tel6ySWcYNIRR2zU6UlCD 40TWOXbDaA5hSd01lbAO617lYpVdb0S7HHbM88u0yQFn4PSW4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYwrxDsQR55GHiUYdA+ZvQtEPbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNGFhOGMzZDItY2JmMi0z MTc5LTllNTMtOWFkMGFmNGI3MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxYkgO1kk076Z3nVRFHhjILAY/gsgjRBxT/s2s9QXatk0CwXl56a8Y1 +kPCtNVUo6++AQo5FxmdaQbA2LDkblKe9mBCYI4N8n8iZKeYNVEy86QllW2R3AT+ 7CxTOYk7hpbKKBM+IuF1MoIjL9tGGZ8pNVpiLEPnqbFTf71ZRS5KmsWMeChaCmOs eRhLAX4r5H6/XgSXfTzCYjauXnKe0RTUyp7HycraCNoiN3W8kdeog8SWLt8lAMrq JmNPuH1vputcFit+FF2S9oohNH4a+T58aZe9J786TquHFPVhtLW5NXH9/h5wZac8 NUHep6gGw1AsJooHCMVL53I1tjji3lg= -----END CERTIFICATE-----Generated at Wed May 13 07:24:19 2026 by rpki-client