$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa File: fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa (raw, json) Hash identifier: JkXa9VsTi3tdQC/90xRI+e8Zd90Tv/0iPqz2Z7BS5XY= Subject key identifier: AC:72:E9:1E:95:E5:6A:B7:39:EA:52:82:D5:C2:F7:B3:BF:96:89:4F Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584DB7702EF09E4422F6FD06AD40 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 4540 IP address blocks: 170.89.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:2e:f0:9e:44:22:f6:fd:06:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=c4fa49eb-49e1-468f-af2a-9f6baa8c96d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:63:af:e4:36:80:92:d6:a1:49:c8:3d:e0: 6f:6f:92:01:22:83:5e:f5:26:81:36:4d:53:e1:dc: 36:36:3b:f7:62:bc:e4:4a:b5:8e:8e:25:8b:8e:9f: cc:f3:ae:52:3a:4a:e4:d4:45:2b:c6:a9:f5:78:e3: a6:c4:76:5a:c3:38:06:f9:af:f0:c8:b6:f8:47:f0: 30:e3:69:60:c2:1e:4a:71:6f:8c:13:10:7f:e7:3f: 82:c5:e7:0f:0e:6b:4c:aa:cc:80:b3:7b:4a:99:4d: 6a:d8:f9:40:7e:4b:76:22:a5:f7:ea:19:21:2c:45: 55:46:76:64:24:45:3d:9d:72:bb:9b:6e:8c:0a:3a: 15:96:fc:d1:0c:e5:cc:72:0e:14:ee:23:80:c6:12: 15:d6:88:4c:f3:6a:d8:a3:b4:f5:d1:d7:9e:d4:ed: f1:36:c8:9c:9e:c3:02:06:e0:58:e6:a8:40:cd:f3: 55:aa:96:a6:fe:b5:50:f2:7d:31:e2:bd:cd:be:cd: 80:e9:a6:6b:75:7d:7a:0e:5b:7e:9f:9d:93:13:50: 12:22:76:7e:c8:e6:6f:e6:ae:23:b9:f9:3d:21:80: 82:7e:1f:a6:ba:79:94:61:4c:df:2f:e2:96:71:dc: 8a:7d:b4:49:3b:59:3f:b8:dd:34:19:3b:a4:23:20: 10:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:72:E9:1E:95:E5:6A:B7:39:EA:52:82:D5:C2:F7:B3:BF:96:89:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f0:6b:3a:84:ec:0d:33:93:8f:1f:ad:26:33:62:a8:73:89: e3:62:9b:79:75:67:3e:64:99:c1:fb:50:96:2f:3d:26:8a:87: 66:d1:0d:65:d2:02:49:82:0a:22:be:77:a5:d5:0c:2c:20:11: f0:dd:40:31:ab:a8:83:47:71:ce:83:48:6f:3b:56:16:df:26: dc:99:14:b6:57:85:b6:1f:80:46:ff:db:b4:74:4d:ae:da:dc: 5e:76:89:dd:2b:26:7b:a2:6d:b7:5c:95:ce:cf:68:2c:f3:f0: 4d:7b:1d:47:4c:a7:bd:87:81:b4:b0:03:87:09:0d:a7:66:0f: a8:01:aa:55:33:4d:82:dc:bb:6c:fd:73:5e:8a:c5:36:01:af: 25:a3:13:93:08:55:d6:78:69:be:25:05:37:31:38:5b:40:f7: 2b:0e:63:8a:39:13:88:85:d8:be:20:b0:0b:83:49:0b:3e:a2: cc:d5:16:bd:b9:75:04:9b:7d:4b:30:73:ca:d3:27:0e:9c:79: af:65:b8:11:ae:ae:90:58:0d:4e:83:4a:36:c8:a7:da:11:24: 19:59:e3:9b:5e:c9:59:6c:7b:d6:73:20:04:8f:bf:8f:cc:f0: 7b:96:8e:04:ed:74:21:e5:6a:d0:63:74:c1:1e:13:60:b1:09: 58:46:1d:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cC7wnkQi9v0GrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk YzRmYTQ5ZWItNDllMS00NjhmLWFmMmEtOWY2YmFhOGM5NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24Vjr+Q2gJLWoUnIPeBvb5IBIoNe9SaBNk1T 4dw2Njv3YrzkSrWOjiWLjp/M865SOkrk1EUrxqn1eOOmxHZawzgG+a/wyLb4R/Aw 42lgwh5KcW+MExB/5z+CxecPDmtMqsyAs3tKmU1q2PlAfkt2IqX36hkhLEVVRnZk JEU9nXK7m26MCjoVlvzRDOXMcg4U7iOAxhIV1ohM82rYo7T10dee1O3xNsicnsMC BuBY5qhAzfNVqpam/rVQ8n0x4r3Nvs2A6aZrdX16Dlt+n52TE1ASInZ+yOZv5q4j ufk9IYCCfh+munmUYUzfL+KWcdyKfbRJO1k/uN00GTukIyAQiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxy6R6V5Wq3OepSgtXC97O/lolPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZmVhODViMGMtZGFjOC0z MTg1LWJjZjQtMjQ4NDVmNmVmMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvwazqE7A0zk48frSYzYqhzieNim3l1Zz5kmcH7UJYvPSaKh2bRDWXS AkmCCiK+d6XVDCwgEfDdQDGrqINHcc6DSG87VhbfJtyZFLZXhbYfgEb/27R0Ta7a 3F52id0rJnuibbdclc7PaCzz8E17HUdMp72HgbSwA4cJDadmD6gBqlUzTYLcu2z9 c16KxTYBryWjE5MIVdZ4ab4lBTcxOFtA9ysOY4o5E4iF2L4gsAuDSQs+oszVFr25 dQSbfUswc8rTJw6cea9luBGurpBYDU6DSjbIp9oRJBlZ45teyVlse9ZzIASPv4/M 8HuWjgTtdCHlatBjdMEeE2CxCVhGHb8= -----END CERTIFICATE-----Generated at Wed May 13 06:53:38 2026 by rpki-client