$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa File: fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa (raw, json) Hash identifier: jM0N+r2dN/1EOOvoSn46Eib9SpBkkqZe6WxHSjPdYFw= Subject key identifier: 96:D4:C8:DA:53:43:42:81:48:45:5C:E5:03:61:A6:79:ED:64:C9:6C Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584E97B5028D911A2B9BC4694480 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 4540 IP address blocks: 170.89.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:02:8d:91:1a:2b:9b:c4:69:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=fc4e5f26-74d7-4fe4-b0eb-4795c9d1a281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8e:e0:38:48:91:32:ad:5b:15:2d:b4:4a:a3: 63:b5:7a:5e:a4:b3:ce:df:51:a7:3b:fd:43:93:fe: b3:18:ed:28:86:f7:89:c6:61:99:bc:79:f5:fc:9a: 8c:b4:93:2c:5e:0a:9d:3f:91:da:53:de:ae:ce:89: 53:f5:68:1a:17:d0:38:d9:07:9d:2d:31:6c:36:98: 4e:28:31:f4:6b:89:b3:47:1a:e6:e9:af:21:d9:46: f5:89:a5:ad:68:d6:40:25:ec:7e:77:7a:92:a3:3d: cf:b5:7a:10:82:bb:d1:a9:6b:16:5a:28:1d:34:aa: 24:46:74:66:94:52:23:25:42:1a:8a:2b:8c:c6:17: fb:61:ee:c1:43:f5:02:8c:24:0c:21:d6:d5:57:b6: 6c:bf:79:10:45:c5:aa:e6:50:e9:ed:df:d0:63:b8: 01:84:e9:2f:e5:90:f2:9a:c0:86:26:bb:fa:83:04: bd:37:c5:e5:f9:00:42:d5:0b:a4:63:30:5c:0f:08: d0:ba:60:73:58:dc:f5:ac:06:8e:09:22:62:4b:31: da:36:2c:ed:43:85:e2:44:56:44:11:a1:e2:52:40: 5f:ec:9d:e1:6b:e7:5b:d0:5c:ab:35:ab:f0:54:08: cd:ee:70:50:96:55:0c:d8:bd:29:db:01:46:7b:2f: e8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D4:C8:DA:53:43:42:81:48:45:5C:E5:03:61:A6:79:ED:64:C9:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/fea85b0c-dac8-3185-bcf4-24845f6ef0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 170.89.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:df:67:1e:b0:30:f3:b6:9f:54:d0:a4:1d:35:f3:63:19:fe: 92:84:82:38:12:09:f7:cc:a5:de:cd:1b:7c:4f:71:ac:85:a1: 61:30:58:5c:81:2d:59:3a:34:2a:0a:c0:5c:a2:6a:e3:0a:52: da:53:18:1b:d6:70:b3:fa:7b:2a:5c:f7:92:cf:2d:27:e9:d7: ab:ff:bb:aa:7f:3e:9d:94:e9:3b:a0:44:55:10:f9:da:9b:2d: 6c:3a:e7:96:1a:5e:7a:72:8b:fb:6e:b6:48:04:c9:b3:b0:86: b1:a3:01:47:40:12:34:0c:f3:2f:9a:e1:76:36:03:76:b6:c9: f5:5f:b7:0f:85:a8:9c:a0:fa:1f:73:a4:b2:b0:41:9e:c7:cf: 35:f7:f7:b3:f3:74:a6:52:08:54:1f:bd:0e:88:48:cf:ad:6c: fb:71:1b:e7:e4:d7:a7:7d:a3:be:40:65:57:c7:94:5b:e3:bc: e1:19:03:85:c7:37:08:80:fb:46:ee:55:85:eb:68:56:36:55: ed:f5:53:62:f2:0e:dc:0b:55:0a:0e:b0:07:4c:e8:25:61:8a: 90:31:a4:3d:f2:55:40:e3:20:f5:95:4e:d7:88:ac:a9:53:9b: bc:e7:be:6e:f3:e6:43:22:16:f8:02:2d:9f:3d:a4:0e:85:2a: 9d:bb:d0:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQKNkRorm8RpRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk ZmM0ZTVmMjYtNzRkNy00ZmU0LWIwZWItNDc5NWM5ZDFhMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I7gOEiRMq1bFS20SqNjtXpepLPO31GnO/1D k/6zGO0ohveJxmGZvHn1/JqMtJMsXgqdP5HaU96uzolT9WgaF9A42QedLTFsNphO KDH0a4mzRxrm6a8h2Ub1iaWtaNZAJex+d3qSoz3PtXoQgrvRqWsWWigdNKokRnRm lFIjJUIaiiuMxhf7Ye7BQ/UCjCQMIdbVV7Zsv3kQRcWq5lDp7d/QY7gBhOkv5ZDy msCGJrv6gwS9N8Xl+QBC1QukYzBcDwjQumBzWNz1rAaOCSJiSzHaNiztQ4XiRFZE EaHiUkBf7J3ha+db0FyrNavwVAjN7nBQllUM2L0p2wFGey/oZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbUyNpTQ0KBSEVc5QNhpnntZMlsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZmVhODViMGMtZGFjOC0z MTg1LWJjZjQtMjQ4NDVmNmVmMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqlnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTfZx6wMPO2n1TQpB0182MZ/pKEgjgSCffMpd7NG3xPcayFoWEwWFyB LVk6NCoKwFyiauMKUtpTGBvWcLP6eypc95LPLSfp16v/u6p/Pp2U6TugRFUQ+dqb LWw655YaXnpyi/tutkgEybOwhrGjAUdAEjQM8y+a4XY2A3a2yfVftw+FqJyg+h9z pLKwQZ7HzzX397PzdKZSCFQfvQ6ISM+tbPtxG+fk16d9o75AZVfHlFvjvOEZA4XH NwiA+0buVYXraFY2Ve31U2LyDtwLVQoOsAdM6CVhipAxpD3yVUDjIPWVTteIrKlT m7znvm7z5kMiFvgCLZ89pA6FKp270I8= -----END CERTIFICATE-----Generated at Fri Jul 24 12:11:46 2026 by rpki-client