$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa File: 80e96d3f-650e-3ca7-b9f9-15492a817e57.roa (raw, json) Hash identifier: bS54NK52gLbBxYgVoy0EYZURc+weEv9DwV7UYf+JkY4= Subject key identifier: B5:F2:89:CB:2A:50:1A:E4:75:21:C3:E4:0E:71:ED:98:F4:51:4E:64 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584E97B502A56F7C7C293B0DB880 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 4540 IP address blocks: 170.89.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:02:a5:6f:7c:7c:29:3b:0d:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=3243c5fb-9ee6-4006-a79b-3dd163cd8090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:c4:9b:88:7e:d7:59:6f:b1:12:03:6f:93: 91:ce:6e:70:2f:97:52:5c:dd:54:72:6d:9e:e6:b9: 65:2e:b1:42:52:e5:f3:63:74:79:a6:6e:b1:9d:9f: bb:07:8a:8b:7f:ea:7b:e9:48:41:9f:49:ec:4e:22: d4:aa:f5:c3:fa:96:18:dd:c7:30:59:ff:ae:fa:79: 54:83:3b:55:da:27:1e:a2:7f:9a:d6:50:8c:aa:04: c3:27:8f:a9:53:23:3a:05:ca:9c:4f:37:1d:ba:2f: f2:0c:1a:a4:65:71:e5:86:78:5d:a0:14:7e:33:53: 8f:93:2f:b7:b5:2d:64:26:c8:d9:94:c3:42:d3:a4: 52:91:8f:7d:75:54:de:0c:bd:a3:5b:80:2e:f0:15: 13:2b:b3:39:63:26:a1:8d:21:4b:67:56:38:40:91: d2:54:e7:35:17:15:5e:ac:ab:eb:04:38:7d:13:cb: 36:a1:ab:60:39:62:80:b2:fa:ab:ec:13:65:d8:02: 7d:12:82:fc:85:ab:3b:f7:29:fe:74:03:36:4b:2e: 1d:ef:d1:37:36:fd:16:bd:ed:e8:cf:06:5d:15:fe: 56:ea:cd:8c:03:9f:02:36:88:23:f9:fc:0d:1f:d7: 15:d6:cc:11:56:6e:30:99:c4:aa:b7:50:1b:b0:a0: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F2:89:CB:2A:50:1A:E4:75:21:C3:E4:0E:71:ED:98:F4:51:4E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/80e96d3f-650e-3ca7-b9f9-15492a817e57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a6:72:a8:d9:49:44:4d:b9:61:0a:d4:18:bd:af:f1:b8:56: 01:2f:6c:33:7c:49:2e:00:e9:e8:55:ef:20:0f:f6:d6:bc:7a: e4:fd:d3:f2:b6:f7:98:bb:22:be:72:d9:7b:ac:fc:dd:09:2d: 09:98:88:d6:86:76:38:59:5d:1b:b1:80:24:f4:4e:a7:22:af: 38:7a:7f:af:6c:b1:18:49:08:ec:d8:53:08:0e:6c:2f:07:d0: 92:3f:9c:2e:a3:42:8a:7d:a2:09:58:12:86:7d:39:1e:79:24: bc:26:14:10:fb:b6:8c:33:53:a6:ec:a4:20:03:37:1e:97:2e: e0:c4:e6:1b:75:62:46:60:27:22:4f:68:78:d4:e5:b9:c7:cc: d3:51:f1:e2:9d:f5:8b:6b:16:6c:49:79:1c:15:a4:dc:35:1d: 61:35:d7:e3:7c:7f:43:76:6f:19:7c:c6:f9:6c:fe:46:aa:ac: 56:07:38:d7:62:48:be:e9:f7:3a:66:b5:bc:7f:b1:49:7f:3a: 13:3d:b4:1f:4b:8e:2f:8b:b5:ef:03:df:9c:68:69:92:60:45: 82:65:71:6d:0f:92:d4:18:89:c6:80:1b:c9:7e:48:4f:1f:59: 2d:a8:3a:e4:24:dc:50:71:5f:7d:20:1a:9d:88:12:4d:2b:9d: 0f:16:c7:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQKlb3x8KTsNuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk MzI0M2M1ZmItOWVlNi00MDA2LWE3OWItM2RkMTYzY2Q4MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6rEm4h+11lvsRIDb5ORzm5wL5dSXN1Ucm2e 5rllLrFCUuXzY3R5pm6xnZ+7B4qLf+p76UhBn0nsTiLUqvXD+pYY3ccwWf+u+nlU gztV2iceon+a1lCMqgTDJ4+pUyM6BcqcTzcdui/yDBqkZXHlhnhdoBR+M1OPky+3 tS1kJsjZlMNC06RSkY99dVTeDL2jW4Au8BUTK7M5YyahjSFLZ1Y4QJHSVOc1FxVe rKvrBDh9E8s2oatgOWKAsvqr7BNl2AJ9EoL8has79yn+dAM2Sy4d79E3Nv0Wve3o zwZdFf5W6s2MA58CNogj+fwNH9cV1swRVm4wmcSqt1AbsKC4awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXyicsqUBrkdSHD5A5x7Zj0UU5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODBlOTZkM2YtNjUwZS0z Y2E3LWI5ZjktMTU0OTJhODE3ZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAymcqjZSURNuWEK1Bi9r/G4VgEvbDN8SS4A6ehV7yAP9ta8euT90/K2 95i7Ir5y2Xus/N0JLQmYiNaGdjhZXRuxgCT0Tqcirzh6f69ssRhJCOzYUwgObC8H 0JI/nC6jQop9oglYEoZ9OR55JLwmFBD7towzU6bspCADNx6XLuDE5ht1YkZgJyJP aHjU5bnHzNNR8eKd9YtrFmxJeRwVpNw1HWE11+N8f0N2bxl8xvls/kaqrFYHONdi SL7p9zpmtbx/sUl/OhM9tB9Lji+Lte8D35xoaZJgRYJlcW0PktQYicaAG8l+SE8f WS2oOuQk3FBxX30gGp2IEk0rnQ8Wx+4= -----END CERTIFICATE-----Generated at Fri Jul 24 12:15:04 2026 by rpki-client