$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa File: ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa (raw, json) Hash identifier: HA2pkpiq5rV7lYRpVZqWrRBCRBtI5XxAWnG7yFmQ5xU= Subject key identifier: 13:DB:33:BC:A2:D7:30:FE:AC:76:A2:BD:BD:D5:37:CB:74:3D:32:66 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584DB7702F26D53DE3DC0720D900 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 4540 IP address blocks: 170.89.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:2f:26:d5:3d:e3:dc:07:20:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=d0a7da23-f412-46f2-b25e-69ff4db590fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a7:fd:6f:13:be:ea:90:23:8d:3e:87:09:3b: e8:48:c3:16:5e:65:14:2a:24:62:c8:01:b4:e0:61: 06:e4:4e:95:87:a6:af:45:58:be:67:4a:2c:39:29: 84:4b:fd:23:7e:b4:99:8b:ca:1a:b4:10:a7:ed:62: 3a:85:64:a9:09:89:86:b6:cd:7b:5d:31:6c:9a:24: 4c:c8:61:27:42:89:3f:2b:dd:e0:46:28:51:11:f0: 35:97:e8:dd:bc:f3:e0:62:96:65:f7:fe:92:a9:0c: 19:8a:f7:1f:ca:45:cf:aa:2b:71:59:5d:03:9d:35: bc:46:e5:af:6c:25:4d:26:6b:78:6d:72:51:a1:79: d8:ae:e4:c8:77:27:ec:ab:3a:15:10:7b:64:ed:60: 08:25:e0:79:ac:57:ad:e4:52:4a:4b:4f:06:84:d6: d3:34:5f:c2:b7:5a:2a:38:a9:17:f7:53:26:7d:ff: 99:ac:63:f9:26:fa:69:f9:d5:6a:e2:4d:4a:63:66: 8a:c7:4e:cf:91:00:17:c3:08:51:1a:16:5f:8b:5c: 77:53:a7:12:50:2e:a3:9a:59:ad:83:e5:29:87:69: 1f:7b:f2:67:ea:d6:5d:6a:da:6d:85:b8:fb:96:0f: 3b:5b:31:d8:30:65:99:4e:6f:74:cf:cc:a6:cc:bb: 86:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DB:33:BC:A2:D7:30:FE:AC:76:A2:BD:BD:D5:37:CB:74:3D:32:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ed6e47d8-81bc-3bf3-9729-0c390af61b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d7:cc:71:0d:56:6a:65:05:31:67:ea:25:f5:11:f7:e2:f0: 60:9f:04:3b:ca:50:10:df:3c:45:3a:a5:bb:4a:4e:e8:89:58: 31:8f:f8:f5:f2:13:d5:a5:d7:37:a6:c3:6b:34:55:c6:c9:64: bd:92:df:67:fe:40:eb:5f:e7:c6:26:9e:de:a5:7d:4c:9a:c9: 40:79:15:f2:f3:6d:88:d9:a5:84:c4:e3:6a:46:4c:1a:a6:aa: 28:35:98:37:d1:42:7c:75:a0:fb:ba:69:cb:05:3f:d0:af:29: 37:7d:e2:54:da:3c:b1:75:88:38:e0:b0:98:f3:41:15:a6:c6: 42:2a:41:20:0b:18:a1:44:ef:9a:ce:2e:d8:17:c6:4e:cb:3f: f9:e1:ec:f2:6b:c9:81:a4:19:0d:88:f3:39:10:d6:66:b9:00: 19:b7:65:c8:db:8a:ad:0c:ec:25:6a:27:5c:bf:9c:1a:a9:99: 07:70:f0:3a:22:43:5c:0c:67:ed:24:db:4f:63:af:57:e9:88: 63:06:3e:b6:8a:a2:36:da:bb:0c:54:70:f6:bd:2c:80:11:d7: a0:45:62:20:ee:00:cc:be:be:4b:55:37:bf:64:ee:ca:15:03: 1d:e8:7e:e7:ea:b7:48:2b:8c:94:03:83:2a:94:95:ed:c3:35: e2:e6:db:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cC8m1T3j3Acg2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ZDBhN2RhMjMtZjQxMi00NmYyLWIyNWUtNjlmZjRkYjU5MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6f9bxO+6pAjjT6HCTvoSMMWXmUUKiRiyAG0 4GEG5E6Vh6avRVi+Z0osOSmES/0jfrSZi8oatBCn7WI6hWSpCYmGts17XTFsmiRM yGEnQok/K93gRihREfA1l+jdvPPgYpZl9/6SqQwZivcfykXPqitxWV0DnTW8RuWv bCVNJmt4bXJRoXnYruTIdyfsqzoVEHtk7WAIJeB5rFet5FJKS08GhNbTNF/Ct1oq OKkX91Mmff+ZrGP5Jvpp+dVq4k1KY2aKx07PkQAXwwhRGhZfi1x3U6cSUC6jmlmt g+Uph2kfe/Jn6tZdatpthbj7lg87WzHYMGWZTm90z8ymzLuGbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPbM7yi1zD+rHaivb3VN8t0PTJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZWQ2ZTQ3ZDgtODFiYy0z YmYzLTk3MjktMGMzOTBhZjYxYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPXzHENVmplBTFn6iX1Effi8GCfBDvKUBDfPEU6pbtKTuiJWDGP+PXy E9Wl1zemw2s0VcbJZL2S32f+QOtf58Ymnt6lfUyayUB5FfLzbYjZpYTE42pGTBqm qig1mDfRQnx1oPu6acsFP9CvKTd94lTaPLF1iDjgsJjzQRWmxkIqQSALGKFE75rO LtgXxk7LP/nh7PJryYGkGQ2I8zkQ1ma5ABm3Zcjbiq0M7CVqJ1y/nBqpmQdw8Doi Q1wMZ+0k209jr1fpiGMGPraKojbauwxUcPa9LIAR16BFYiDuAMy+vktVN79k7soV Ax3ofufqt0grjJQDgyqUle3DNeLm22w= -----END CERTIFICATE-----Generated at Wed May 13 10:55:24 2026 by rpki-client