$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa File: 872d4d84-ef45-3f24-82b1-08082aba7e34.roa (raw, json) Hash identifier: ixJpY8fH8JMV1OigT7b2h9fmJnrzmn9k5m8p5Td8CyY= Subject key identifier: 7C:81:7C:BD:B7:5F:8D:8F:4D:F2:87:7E:EC:17:02:AC:9A:C7:17:85 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584A34801D2D4AFD385E4B7F3880 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 4540 IP address blocks: 170.89.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:1d:2d:4a:fd:38:5e:4b:7f:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=a9187212-e5aa-4d62-a20e-dbe8998c4b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1f:1c:3c:88:5f:46:e5:d7:43:40:7d:f6:ec: 44:8d:07:d5:cb:b8:c2:05:fa:38:36:4e:91:e0:bd: df:65:a2:3f:12:8e:74:ba:8c:8c:e3:b0:20:f2:57: b9:44:2c:d0:2b:5c:aa:fc:4a:0f:1a:32:04:aa:cc: 47:5e:d8:ce:ed:3a:d9:18:d2:f6:b5:78:b0:db:8e: be:0d:f9:d7:93:03:16:f0:2c:07:29:87:7c:7a:b8: 3d:d5:c4:1e:a7:3f:f4:93:96:3d:64:17:53:c7:4f: 28:b2:81:d9:42:71:fc:cd:d2:86:5e:dc:8d:87:72: 24:a5:74:25:73:6b:27:b9:9a:86:20:fd:3b:b9:ad: 50:66:0d:6d:82:34:d5:87:a2:5b:0c:1c:38:07:d1: d7:45:0e:91:9e:46:a9:ea:dc:b5:46:82:49:20:73: fc:18:d2:9e:d9:33:3c:46:e8:88:0e:35:ef:66:03: 57:37:ad:5d:b8:fc:a7:5e:34:c6:8e:48:b7:09:a5: 41:c4:46:87:ec:89:72:76:d8:0b:ec:3d:4a:bb:53: c5:f0:a6:9e:51:62:9d:2f:01:35:46:03:cb:0d:f6: 00:6b:49:6f:f0:55:e3:b7:c9:1a:69:b1:62:16:05: 8e:2a:1b:2d:f4:06:b1:83:05:0f:60:7f:c3:ce:7e: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:81:7C:BD:B7:5F:8D:8F:4D:F2:87:7E:EC:17:02:AC:9A:C7:17:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:17:2b:b8:96:36:3e:cf:3c:67:a7:34:6e:c0:6f:33:cc:ff: 2b:6b:3c:cc:ac:f0:dc:9e:1f:1f:e8:b4:c7:1c:1b:b1:e6:ad: e2:01:8f:ca:12:7f:af:c6:c5:16:3b:af:aa:da:e2:40:65:db: bc:50:2b:85:7e:d4:54:ad:49:83:e9:28:ab:e7:e6:b0:34:11: e8:57:ea:f5:3c:a5:27:cb:95:d6:d5:12:1f:20:86:27:88:13: 9b:4b:7c:80:e3:61:d0:e7:7b:44:a1:33:b7:c3:d8:37:5d:7a: c9:27:ba:0d:3e:47:ea:2a:8d:ca:ee:b7:54:b5:cd:59:07:c2: 05:9c:f9:0b:cf:c4:46:74:3e:95:86:7a:9f:11:08:18:f2:9b: 29:f6:d2:cd:06:9c:c2:69:2a:f1:0a:07:67:49:5f:2d:20:5a: 2e:42:25:37:2b:9d:a3:3c:a9:94:0b:c5:1a:97:00:58:a6:1d: 4a:53:ec:7c:e9:90:6f:9b:d8:72:76:42:18:c9:2b:b5:db:81: 9a:3f:83:3e:1c:3c:27:6f:e4:26:d7:af:78:94:45:db:b9:5e: 3c:3d:90:82:6b:f4:d3:51:f4:0b:98:49:7e:90:19:72:6d:cf: a0:13:8b:75:41:b6:ab:30:da:30:cb:4a:3e:99:d8:6b:17:2d: f4:33:60:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gB0tSv04Xkt/OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk YTkxODcyMTItZTVhYS00ZDYyLWEyMGUtZGJlODk5OGM0YjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x8cPIhfRuXXQ0B99uxEjQfVy7jCBfo4Nk6R 4L3fZaI/Eo50uoyM47Ag8le5RCzQK1yq/EoPGjIEqsxHXtjO7TrZGNL2tXiw246+ DfnXkwMW8CwHKYd8erg91cQepz/0k5Y9ZBdTx08osoHZQnH8zdKGXtyNh3IkpXQl c2snuZqGIP07ua1QZg1tgjTVh6JbDBw4B9HXRQ6Rnkap6ty1RoJJIHP8GNKe2TM8 RuiIDjXvZgNXN61duPynXjTGjki3CaVBxEaH7IlydtgL7D1Ku1PF8KaeUWKdLwE1 RgPLDfYAa0lv8FXjt8kaabFiFgWOKhst9AaxgwUPYH/Dzn5MqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyBfL23X42PTfKHfuwXAqyaxxeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODcyZDRkODQtZWY0NS0z ZjI0LTgyYjEtMDgwODJhYmE3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqln4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwXK7iWNj7PPGenNG7AbzPM/ytrPMys8NyeHx/otMccG7HmreIBj8oS f6/GxRY7r6ra4kBl27xQK4V+1FStSYPpKKvn5rA0EehX6vU8pSfLldbVEh8ghieI E5tLfIDjYdDne0ShM7fD2Dddesknug0+R+oqjcrut1S1zVkHwgWc+QvPxEZ0PpWG ep8RCBjymyn20s0GnMJpKvEKB2dJXy0gWi5CJTcrnaM8qZQLxRqXAFimHUpT7Hzp kG+b2HJ2QhjJK7XbgZo/gz4cPCdv5CbXr3iURdu5Xjw9kIJr9NNR9AuYSX6QGXJt z6ATi3VBtqsw2jDLSj6Z2GsXLfQzYLA= -----END CERTIFICATE-----Generated at Mon Jun 30 10:44:01 2025 by rpki-client