$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa File: 872d4d84-ef45-3f24-82b1-08082aba7e34.roa (raw, json) Hash identifier: fOPbCWbDH2/Wp3YxqIUBptMZj6cMeFlzEz9luOnX3+A= Subject key identifier: EA:A4:BE:F4:C5:88:F6:70:03:4D:BA:DC:35:1D:9A:B0:E6:7E:BB:FE Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584DB7702F33DCC5A6A34ACF4000 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 4540 IP address blocks: 170.89.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:2f:33:dc:c5:a6:a3:4a:cf:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=8fc52661-1ffd-4710-af08-397f139c172e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9b:6a:93:ea:2f:15:8a:f7:5b:c9:f8:9b:71: 59:bf:82:66:cd:0f:3a:c3:7e:41:99:39:5e:b5:24: c4:5d:34:9e:04:fe:df:93:2d:59:d4:69:f0:af:6f: e1:b7:51:ad:43:a6:7d:e8:8a:96:30:56:cb:a5:1a: cd:7e:63:3d:84:9d:df:67:66:17:24:f7:35:a2:41: 89:16:66:a6:19:19:c4:32:c8:f0:90:bd:0e:5e:06: 41:7d:65:86:0a:01:75:f4:35:b2:3a:9c:b1:f5:90: 56:f0:04:66:2f:a5:18:4f:dc:0a:64:25:91:01:e3: 31:be:a5:54:81:67:0e:7b:ce:10:58:23:a6:20:32: 6e:95:7b:55:e7:b5:d2:37:4f:4b:5b:f8:c4:a3:07: 51:4d:82:38:f9:4d:8b:af:75:35:c0:9b:b3:4a:73: 66:60:13:e2:73:c3:dd:b3:d7:ce:31:02:cd:e0:03: ad:af:af:90:f7:f5:1e:81:62:61:60:de:1e:9e:56: b4:17:9a:dd:b7:35:10:24:26:d3:f9:bb:66:fa:3f: 67:0a:8e:1d:b0:3c:22:d0:18:f3:ab:8b:48:32:54: 9c:01:3d:85:a8:41:7d:d6:23:a1:4d:ee:2e:9c:c7: eb:a5:ee:e1:9f:87:01:ac:6b:eb:45:11:94:e7:80: 21:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A4:BE:F4:C5:88:F6:70:03:4D:BA:DC:35:1D:9A:B0:E6:7E:BB:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:28:61:5b:2b:a1:da:96:a3:b2:8c:10:45:a8:14:22:b9:74: 5f:b4:13:9b:8f:04:e4:82:fa:fc:cc:b0:92:91:13:6e:53:b9: 94:49:cc:bf:2f:3e:70:7d:96:65:28:c3:5f:96:d8:77:29:88: 3b:15:c4:f6:0d:c7:71:5d:63:9d:23:77:13:48:a3:1f:75:14: 9c:c4:42:b9:43:c7:91:94:8c:82:e6:83:46:b3:9d:bf:48:46: cf:f3:d9:98:f6:d1:74:32:64:2e:45:6a:0e:31:5c:73:13:d8: 05:1e:34:f9:29:77:95:1a:1f:16:3b:23:ee:d0:35:a7:84:93: a1:8e:8d:c8:13:87:7e:d4:be:b1:33:41:54:3c:c1:3d:a4:ff: fc:0a:72:1e:33:16:5c:4a:44:32:4e:9e:50:cd:35:1f:eb:35: 96:f4:12:f4:c6:02:81:65:f4:00:3d:fd:0c:9f:11:61:f0:4f: bf:5c:21:0d:00:de:a1:1b:3f:dd:c0:91:68:e8:d0:4c:e1:23: 38:f2:4d:84:03:a5:4e:d2:e2:68:9f:c1:d0:6b:97:8b:31:2f: 5e:96:9c:ca:74:77:e9:68:7a:9f:03:c5:58:f1:65:7b:9d:0e: ea:c6:9b:07:8a:0e:5b:36:5a:f2:f0:48:16:52:c2:67:17:9e: d4:46:10:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cC8z3MWmo0rPQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk OGZjNTI2NjEtMWZmZC00NzEwLWFmMDgtMzk3ZjEzOWMxNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZtqk+ovFYr3W8n4m3FZv4JmzQ86w35BmTle tSTEXTSeBP7fky1Z1Gnwr2/ht1GtQ6Z96IqWMFbLpRrNfmM9hJ3fZ2YXJPc1okGJ FmamGRnEMsjwkL0OXgZBfWWGCgF19DWyOpyx9ZBW8ARmL6UYT9wKZCWRAeMxvqVU gWcOe84QWCOmIDJulXtV57XSN09LW/jEowdRTYI4+U2Lr3U1wJuzSnNmYBPic8Pd s9fOMQLN4AOtr6+Q9/UegWJhYN4enla0F5rdtzUQJCbT+btm+j9nCo4dsDwi0Bjz q4tIMlScAT2FqEF91iOhTe4unMfrpe7hn4cBrGvrRRGU54Ah5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqkvvTFiPZwA0263DUdmrDmfrv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODcyZDRkODQtZWY0NS0z ZjI0LTgyYjEtMDgwODJhYmE3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqln4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0oYVsrodqWo7KMEEWoFCK5dF+0E5uPBOSC+vzMsJKRE25TuZRJzL8v PnB9lmUow1+W2HcpiDsVxPYNx3FdY50jdxNIox91FJzEQrlDx5GUjILmg0aznb9I Rs/z2Zj20XQyZC5Fag4xXHMT2AUeNPkpd5UaHxY7I+7QNaeEk6GOjcgTh37UvrEz QVQ8wT2k//wKch4zFlxKRDJOnlDNNR/rNZb0EvTGAoFl9AA9/QyfEWHwT79cIQ0A 3qEbP93AkWjo0EzhIzjyTYQDpU7S4mifwdBrl4sxL16WnMp0d+loep8DxVjxZXud DurGmweKDls2WvLwSBZSwmcXntRGEMs= -----END CERTIFICATE-----Generated at Wed May 13 08:26:57 2026 by rpki-client