$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa File: 872d4d84-ef45-3f24-82b1-08082aba7e34.roa (raw, json) Hash identifier: ccI5SgAxNtOfNayrfZrRlZ2UkhX4UpnIEiRgkFOo+bA= Subject key identifier: 37:46:8D:6C:60:96:BF:29:16:CB:9D:F5:D8:9F:F5:39:1F:BB:3E:EC Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584E97B502CAD29AD01B13C010C0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 4540 IP address blocks: 170.89.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:02:ca:d2:9a:d0:1b:13:c0:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=d0e25604-b576-4798-b066-dbb735d591be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b4:dd:ba:3e:30:fe:66:57:e4:d4:47:6b:16: d5:d1:97:c7:e0:39:85:f1:85:c3:23:88:80:f0:ab: 84:24:87:65:8f:9a:17:36:e8:6a:55:18:f7:c4:10: 22:ee:b1:63:83:a6:11:f1:76:84:38:a9:85:aa:0d: b1:b6:3c:82:bd:62:4c:f8:5d:35:81:b0:5d:0d:9d: bf:f2:25:e6:11:bd:b4:17:83:33:cc:06:3a:c5:04: 5e:fb:00:04:01:5b:4e:98:4e:58:0b:92:83:ac:4d: 09:08:84:a2:6b:3c:90:81:5d:7d:a0:7b:70:8f:1e: 27:b1:3e:19:a1:ad:7e:4b:98:8f:9d:4d:2b:39:9b: 11:de:0b:9c:96:03:e9:0d:58:5c:d9:9f:e1:f8:4f: 66:19:c1:9d:25:32:42:4d:54:27:4e:b6:a1:5a:17: 51:2b:1a:86:cf:69:28:08:ed:03:bf:35:0c:76:a5: 4b:ef:fd:5e:d7:d2:56:68:eb:1f:e5:34:10:e7:3a: 02:e2:21:68:d6:ef:c4:35:54:e6:f7:03:0f:d2:e8: 31:2a:fd:ed:29:df:75:60:aa:db:67:21:ba:24:86: 88:3d:0e:56:41:f9:0c:e2:79:4c:d5:bb:f7:a1:99: 3a:65:7f:85:55:3a:77:66:17:2d:8f:c1:95:87:24: 3f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:46:8D:6C:60:96:BF:29:16:CB:9D:F5:D8:9F:F5:39:1F:BB:3E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/872d4d84-ef45-3f24-82b1-08082aba7e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d5:82:97:3f:67:3c:72:55:96:e5:c6:77:3b:d2:e0:3e:f3: 69:12:73:6e:8a:4c:59:72:0d:a7:13:af:65:de:df:98:84:d8: 12:f3:20:c7:62:1e:68:4f:db:9c:89:65:e8:d2:12:3f:73:d7: 2b:e4:10:4e:35:e6:7b:13:04:76:3d:58:ae:a2:6d:09:cf:d3: 7d:a1:24:4f:63:70:39:d0:94:cc:1c:e1:ef:9d:05:8f:4d:f4: 2f:09:77:51:74:2f:f5:84:d6:7e:c8:0f:76:14:77:f5:28:6c: f8:62:d2:1c:70:20:7a:e5:34:52:09:96:24:90:8c:2e:a4:83: 41:87:82:2d:ef:38:75:13:91:0c:f7:ab:3e:46:2a:bb:fd:c1: 09:86:cf:4a:8e:fe:56:66:47:87:09:77:82:6d:37:1c:17:82: 01:52:35:e0:7c:c0:3a:99:04:2c:ff:57:58:9a:41:64:10:28: a8:ed:13:6d:c8:56:7f:98:65:2e:29:0c:27:2e:93:87:9f:49: 84:40:60:52:e8:37:e8:8a:c2:a2:f4:ce:fc:10:ed:32:3b:b0: 11:c9:b5:61:8d:c0:81:f6:dd:d0:8d:02:3d:e1:63:3c:b2:f0: 9a:e4:eb:aa:9e:75:a4:9e:de:d1:bd:19:5e:b5:e8:14:20:5c: 3d:ea:a1:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQLK0prQGxPAEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk ZDBlMjU2MDQtYjU3Ni00Nzk4LWIwNjYtZGJiNzM1ZDU5MWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbTduj4w/mZX5NRHaxbV0ZfH4DmF8YXDI4iA 8KuEJIdlj5oXNuhqVRj3xBAi7rFjg6YR8XaEOKmFqg2xtjyCvWJM+F01gbBdDZ2/ 8iXmEb20F4MzzAY6xQRe+wAEAVtOmE5YC5KDrE0JCISiazyQgV19oHtwjx4nsT4Z oa1+S5iPnU0rOZsR3guclgPpDVhc2Z/h+E9mGcGdJTJCTVQnTrahWhdRKxqGz2ko CO0DvzUMdqVL7/1e19JWaOsf5TQQ5zoC4iFo1u/ENVTm9wMP0ugxKv3tKd91YKrb ZyG6JIaIPQ5WQfkM4nlM1bv3oZk6ZX+FVTp3Zhctj8GVhyQ/qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdGjWxglr8pFsud9dif9Tkfuz7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvODcyZDRkODQtZWY0NS0z ZjI0LTgyYjEtMDgwODJhYmE3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqln4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7Vgpc/ZzxyVZblxnc70uA+82kSc26KTFlyDacTr2Xe35iE2BLzIMdi HmhP25yJZejSEj9z1yvkEE415nsTBHY9WK6ibQnP032hJE9jcDnQlMwc4e+dBY9N 9C8Jd1F0L/WE1n7ID3YUd/UobPhi0hxwIHrlNFIJliSQjC6kg0GHgi3vOHUTkQz3 qz5GKrv9wQmGz0qO/lZmR4cJd4JtNxwXggFSNeB8wDqZBCz/V1iaQWQQKKjtE23I Vn+YZS4pDCcuk4efSYRAYFLoN+iKwqL0zvwQ7TI7sBHJtWGNwIH23dCNAj3hYzyy 8Jrk66qedaSe3tG9GV616BQgXD3qodw= -----END CERTIFICATE-----Generated at Fri Jul 24 02:02:25 2026 by rpki-client