$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa File: 80e96d3f-650e-3ca7-b9f9-15492a817e57.roa (raw, json) Hash identifier: NJQbOXwmmB2/Wxem3XXcsicJkPD/FvSdviXAb/HlSMU= Subject key identifier: F3:F3:90:7F:45:01:2A:77:3F:3F:98:3C:FB:8C:66:03:ED:78:EA:A9 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584DB7702F0C4548BBCDD631FEC0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 4540 IP address blocks: 170.89.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:2f:0c:45:48:bb:cd:d6:31:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=a1eca118-4a56-4ef2-83ab-561f771cb5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:3c:7b:9b:20:af:97:42:2b:bd:ef:ca:ff: 7f:5b:01:70:d1:87:82:ee:11:73:41:7a:4a:07:34: e2:6b:13:66:70:2b:f3:2e:d7:d4:d3:d3:c2:96:75: 0a:7b:ee:6f:3e:58:eb:43:45:67:91:21:9a:1d:c4: 70:83:62:ec:79:c0:63:19:29:b1:3c:05:f8:35:75: 06:f5:f6:50:78:8f:45:ad:4b:60:40:ce:d0:1e:84: 9e:cd:19:57:6d:6e:17:da:47:df:7d:19:e4:48:6f: 06:98:d2:6d:6f:7e:45:4a:de:ff:08:6e:6e:d8:f7: 66:3c:d2:2d:0b:5f:77:34:bb:33:c3:13:18:7e:49: 5b:6c:7e:f7:a2:55:57:c3:7e:17:c6:53:21:c7:f4: 54:a7:80:4f:aa:f1:f5:61:c0:ff:86:88:95:d5:6f: 2b:16:e6:f0:c0:30:35:8f:5d:3b:4e:8b:ef:cd:b7: d5:1e:ef:e2:24:d8:85:ec:da:19:8b:9b:32:2b:40: ce:a5:11:bd:d5:1b:8f:cd:4c:85:07:ca:fb:59:a5: 09:fb:b9:73:f0:81:31:28:aa:2e:07:da:cf:70:52: 9c:0e:eb:c2:c4:49:ba:97:2c:0f:d2:4b:f9:7f:0c: bb:aa:5d:d4:6d:cd:d5:10:fc:0c:fc:ff:cf:ae:27: 11:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F3:90:7F:45:01:2A:77:3F:3F:98:3C:FB:8C:66:03:ED:78:EA:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a8:df:c7:9b:0f:29:3a:6c:fe:00:4a:ef:2d:03:2c:b7:e9: e1:91:d1:1d:9d:f6:d5:d8:7d:96:16:81:c3:0a:51:06:3b:09: 94:a0:41:ec:d1:bc:9a:6d:96:eb:56:46:e8:64:af:32:02:84: 11:24:d0:58:62:0e:2e:0d:70:ae:0a:8a:77:64:39:d6:4d:7e: 6d:a8:b5:8b:cb:80:96:72:be:53:d4:d5:6a:0a:bf:ee:b1:26: 75:27:13:c4:f7:7a:42:97:0f:fb:e7:57:c8:73:19:d2:6a:13: 0e:2e:8c:21:a8:36:33:04:9e:f8:f5:cf:e1:d5:bf:bf:57:aa: 29:7e:03:ac:b5:eb:bc:42:c2:a5:1c:57:cd:06:4b:0d:71:a7: 99:fa:5c:e7:8a:bb:56:af:e7:70:05:bc:e4:0e:9f:04:55:f0: c3:41:8a:69:9c:23:e3:03:37:bf:d2:d5:08:3e:56:1d:28:ae: 31:1a:7b:3f:69:de:39:9b:20:80:aa:0c:bb:8e:d7:1a:6d:3e: e8:4d:39:9a:e2:5b:57:87:cc:b8:e5:e0:f5:90:15:d2:54:be: 56:20:45:98:57:12:e0:c8:5d:8f:1f:ff:92:45:82:c1:7e:f6: 5f:51:11:33:20:51:b9:5c:05:d8:fd:b2:33:64:0b:a0:91:bc: 03:83:35:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cC8MRUi7zdYx/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk YTFlY2ExMTgtNGE1Ni00ZWYyLTgzYWItNTYxZjc3MWNiNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj48e5sgr5dCK73vyv9/WwFw0YeC7hFzQXpK BzTiaxNmcCvzLtfU09PClnUKe+5vPljrQ0VnkSGaHcRwg2LsecBjGSmxPAX4NXUG 9fZQeI9FrUtgQM7QHoSezRlXbW4X2kfffRnkSG8GmNJtb35FSt7/CG5u2PdmPNIt C193NLszwxMYfklbbH73olVXw34XxlMhx/RUp4BPqvH1YcD/hoiV1W8rFubwwDA1 j107TovvzbfVHu/iJNiF7NoZi5syK0DOpRG91RuPzUyFB8r7WaUJ+7lz8IExKKou B9rPcFKcDuvCxEm6lywP0kv5fwy7ql3Ubc3VEPwM/P/PricRwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPzkH9FASp3Pz+YPPuMZgPteOqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODBlOTZkM2YtNjUwZS0z Y2E3LWI5ZjktMTU0OTJhODE3ZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqo38ebDyk6bP4ASu8tAyy36eGR0R2d9tXYfZYWgcMKUQY7CZSgQezR vJptlutWRuhkrzIChBEk0FhiDi4NcK4KindkOdZNfm2otYvLgJZyvlPU1WoKv+6x JnUnE8T3ekKXD/vnV8hzGdJqEw4ujCGoNjMEnvj1z+HVv79Xqil+A6y167xCwqUc V80GSw1xp5n6XOeKu1av53AFvOQOnwRV8MNBimmcI+MDN7/S1Qg+Vh0orjEaez9p 3jmbIICqDLuO1xptPuhNOZriW1eHzLjl4PWQFdJUvlYgRZhXEuDIXY8f/5JFgsF+ 9l9RETMgUblcBdj9sjNkC6CRvAODNVc= -----END CERTIFICATE-----Generated at Wed May 13 07:16:37 2026 by rpki-client