$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa File: a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa (raw, json) Hash identifier: CyD7UmR1ado4AuQ8CViS1YjXuZTGY85eoNoyZoM4ADA= Subject key identifier: 40:06:F0:D6:92:87:B0:E9:CE:28:FD:54:3A:02:33:D5:E6:20:C0:EE Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584DB7702EE2858562D8B6FB4840 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 4540 IP address blocks: 170.89.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:2e:e2:85:85:62:d8:b6:fb:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=87c77b65-c833-49e5-9832-4baedc8aa89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:97:1f:c3:2f:1c:ac:68:57:48:56:9e:a6: 23:a2:be:fa:ba:71:98:27:ca:67:c3:33:7e:bb:fa: 80:6e:7c:50:13:6d:96:09:34:84:f1:c3:8e:2d:ea: 72:00:9e:07:7d:ab:6f:52:9a:34:61:33:8f:b9:77: a9:e3:d9:25:32:e5:4a:53:4d:53:67:3a:73:b6:3b: ab:47:e1:83:15:75:9c:a3:b9:34:e5:73:de:ec:fb: 27:08:94:a7:0c:93:ff:c8:58:69:e5:9d:cd:a6:78: 84:ec:31:80:80:c1:65:2e:f3:00:f7:dc:24:db:4b: 3f:c6:3c:f0:2e:75:13:ad:cc:94:9a:35:01:aa:35: 7c:e5:8c:87:78:d2:7b:e3:51:b0:67:3a:da:a9:70: d1:9f:23:8b:cd:c8:9f:f4:f4:a4:d5:e2:be:1f:af: 02:ca:69:e5:07:0c:85:08:33:5a:92:c5:92:6e:c4: 17:3c:0a:b7:f3:aa:17:1e:fe:a9:ef:4b:5b:01:ff: 8f:4f:df:72:de:b0:76:c3:81:65:c8:d6:7e:71:35: 59:cf:df:02:b8:67:ad:48:d4:59:a0:18:05:ef:3d: 15:e6:1f:f0:bf:41:c0:2a:b8:51:cb:39:9c:f3:23: 61:ed:65:e6:72:1f:89:27:3b:8a:39:52:e2:da:24: 33:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:06:F0:D6:92:87:B0:E9:CE:28:FD:54:3A:02:33:D5:E6:20:C0:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/a00b67ff-c2e0-358d-b25e-0f150c687e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c8:bb:3c:ab:80:c1:7d:52:c6:6e:78:ad:80:9d:a2:9a:88: bb:1c:e2:69:dc:f3:fd:ef:e4:f2:74:4e:dd:15:3c:10:c0:73: 3e:16:c4:61:2b:24:f6:0e:cb:48:4c:33:a2:c2:2c:dc:2e:99: 61:9e:81:0f:7b:cc:6e:13:70:52:8b:b6:97:b2:14:45:53:cc: 3e:c4:9b:bb:e4:3e:3c:02:46:fe:93:1c:b9:4e:fc:c4:a4:3b: cd:6f:7d:23:a6:d3:77:34:cf:39:ac:ce:bb:3d:3e:d5:05:24: 69:8f:e6:36:69:87:71:94:85:c9:cd:b2:64:7b:6c:f1:73:d0: ac:1f:f8:29:7e:88:d1:24:03:4c:ce:8b:3d:8f:c1:06:e6:b1: 07:4b:70:23:f8:52:92:4f:36:3e:54:24:60:fa:6e:b7:b4:fd: ac:a0:29:e4:d9:62:d7:33:9c:d1:d9:e5:83:c1:14:3d:39:a5: 65:2d:22:44:64:2e:cc:3e:e7:bf:2a:dc:53:60:0f:59:04:b3: e1:19:00:ba:80:2e:48:f1:46:38:ad:34:11:85:6b:56:43:3c: c1:7d:f3:e5:ea:eb:62:10:be:75:c4:8c:0b:54:d2:da:88:e1: 35:e3:bd:82:dd:03:91:4c:9c:c8:ec:85:d6:40:70:77:de:a5: 86:3a:39:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cC7ihYVi2Lb7SEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ODdjNzdiNjUtYzgzMy00OWU1LTk4MzItNGJhZWRjOGFhODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPSXH8MvHKxoV0hWnqYjor76unGYJ8pnwzN+ u/qAbnxQE22WCTSE8cOOLepyAJ4HfatvUpo0YTOPuXep49klMuVKU01TZzpztjur R+GDFXWco7k05XPe7PsnCJSnDJP/yFhp5Z3NpniE7DGAgMFlLvMA99wk20s/xjzw LnUTrcyUmjUBqjV85YyHeNJ741GwZzraqXDRnyOLzcif9PSk1eK+H68CymnlBwyF CDNaksWSbsQXPAq386oXHv6p70tbAf+PT99y3rB2w4FlyNZ+cTVZz98CuGetSNRZ oBgF7z0V5h/wv0HAKrhRyzmc8yNh7WXmch+JJzuKOVLi2iQztQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAG8NaSh7Dpzij9VDoCM9XmIMDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYTAwYjY3ZmYtYzJlMC0z NThkLWIyNWUtMGYxNTBjNjg3ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDIuzyrgMF9UsZueK2AnaKaiLsc4mnc8/3v5PJ0Tt0VPBDAcz4WxGEr JPYOy0hMM6LCLNwumWGegQ97zG4TcFKLtpeyFEVTzD7Em7vkPjwCRv6THLlO/MSk O81vfSOm03c0zzmszrs9PtUFJGmP5jZph3GUhcnNsmR7bPFz0Kwf+Cl+iNEkA0zO iz2PwQbmsQdLcCP4UpJPNj5UJGD6bre0/aygKeTZYtcznNHZ5YPBFD05pWUtIkRk Lsw+578q3FNgD1kEs+EZALqALkjxRjitNBGFa1ZDPMF98+Xq62IQvnXEjAtU0tqI 4TXjvYLdA5FMnMjshdZAcHfepYY6OWA= -----END CERTIFICATE-----Generated at Wed May 13 06:54:34 2026 by rpki-client