$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa File: 2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa (raw, json) Hash identifier: OVfCKMc3yf6ou0+GNivMxYsOokTcyy47J/sPJdW4cgI= Subject key identifier: 5F:40:33:6C:6E:85:6D:2E:3A:6E:1D:59:32:FD:13:F1:84:5F:53:89 Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584D0217993AA33BC3EEC285B380 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 8075 IP address blocks: 170.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:99:3a:a3:3b:c3:ee:c2:85:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=f3b9dcf5-6134-4870-9022-0de81f22b84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:58:d4:31:bd:b3:d5:c4:9a:19:e6:d5:bf:10: 8c:72:e9:2a:74:4c:12:b4:c4:91:66:ce:2d:0c:d2: c6:fe:16:a5:42:65:e4:82:59:68:3b:85:b0:a4:7e: 55:55:38:5d:a3:99:c3:de:fc:f3:79:86:10:70:fe: f7:ec:63:a1:07:e2:a5:4f:13:b5:57:55:41:18:63: b3:84:3e:b1:6e:f1:4e:f0:46:15:a0:ea:2c:b0:5e: 7d:4e:00:aa:14:ed:5a:e8:10:53:13:59:c0:78:b7: 3a:ba:0e:4a:ca:76:74:c0:d1:41:bb:82:b8:69:b5: 18:e4:bb:5c:5e:b4:ba:ef:61:67:ef:d9:78:dc:53: c6:22:93:4c:52:dc:97:aa:3a:55:67:2a:bb:35:f7: d2:35:6f:4a:20:60:95:ac:08:1d:90:b4:57:9d:7a: c6:66:d2:9b:96:7e:78:11:55:53:eb:c7:ce:94:87: 2e:12:2f:e4:58:f3:c4:9b:16:1c:1a:32:a5:ef:60: 43:1d:a9:d0:98:4d:ac:60:c2:99:3b:6d:d2:2a:47: 88:6f:7f:b5:b1:d2:c5:df:1b:1a:02:f1:cd:ad:67: e5:6b:b9:9d:2c:f8:69:68:02:f7:60:81:61:40:ae: 31:cc:a8:42:53:79:1c:db:52:ba:7a:7b:b9:0e:f0: ba:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:40:33:6C:6E:85:6D:2E:3A:6E:1D:59:32:FD:13:F1:84:5F:53:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:a5:89:76:95:ab:49:c6:03:24:e1:5c:92:65:df:4c:7f:cf: 5b:21:77:b0:99:a5:f7:74:6a:f1:d8:2a:9a:04:39:18:90:44: 74:71:67:25:fc:b3:04:38:2c:89:f9:93:70:de:d5:12:0e:34: bd:7f:33:fc:a0:29:2d:09:ea:a4:d3:b1:c3:1f:49:2b:76:63: fc:ae:97:87:c9:48:3a:d6:ee:30:ba:73:80:87:57:e2:91:43: 9a:86:74:ed:35:a0:fd:5f:be:70:44:e8:9e:98:1c:73:94:2d: 55:80:87:ea:17:f5:67:5b:15:ba:04:48:dd:ff:3d:87:ba:5b: e3:8c:72:36:1e:8b:3f:8b:8f:ea:33:c9:95:04:94:3a:fc:63: 4a:d3:cb:e9:44:5f:7f:4f:00:fb:11:0d:cf:00:d2:dd:db:c9: 04:96:f2:e4:aa:cc:86:75:9f:cb:8d:00:62:0c:12:c3:af:aa: a5:88:fe:f0:2e:ed:fb:e1:b5:ed:c4:9b:62:ba:65:4b:ba:79: ad:9f:b3:ed:5a:8e:8f:29:ab:03:2e:80:9d:dd:02:05:21:3e: 43:6e:19:22:13:70:39:34:2c:58:6f:a7:0e:33:d7:f8:31:a1: c0:57:1f:9e:36:b5:c1:b0:43:f8:df:2d:45:a2:57:f8:30:a7: 7a:99:f1:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF5k6ozvD7sKFs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjNiOWRjZjUtNjEzNC00ODcwLTkwMjItMGRlODFmMjJiODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1jUMb2z1cSaGebVvxCMcukqdEwStMSRZs4t DNLG/halQmXkglloO4WwpH5VVThdo5nD3vzzeYYQcP737GOhB+KlTxO1V1VBGGOz hD6xbvFO8EYVoOossF59TgCqFO1a6BBTE1nAeLc6ug5KynZ0wNFBu4K4abUY5Ltc XrS672Fn79l43FPGIpNMUtyXqjpVZyq7NffSNW9KIGCVrAgdkLRXnXrGZtKbln54 EVVT68fOlIcuEi/kWPPEmxYcGjKl72BDHanQmE2sYMKZO23SKkeIb3+1sdLF3xsa AvHNrWfla7mdLPhpaAL3YIFhQK4xzKhCU3kc21K6enu5DvC6gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9AM2xuhW0uOm4dWTL9E/GEX1OJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvMmViNzRmMTMtMjRkZC0z MmE4LThjNWQtOWQxZjUzNDc4NDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALeliXaVq0nGAyThXJJl30x/z1shd7CZpfd0avHYKpoEORiQRHRxZyX8 swQ4LIn5k3De1RIONL1/M/ygKS0J6qTTscMfSSt2Y/yul4fJSDrW7jC6c4CHV+KR Q5qGdO01oP1fvnBE6J6YHHOULVWAh+oX9WdbFboESN3/PYe6W+OMcjYeiz+Lj+oz yZUElDr8Y0rTy+lEX39PAPsRDc8A0t3byQSW8uSqzIZ1n8uNAGIMEsOvqqWI/vAu 7fvhte3Em2K6ZUu6ea2fs+1ajo8pqwMugJ3dAgUhPkNuGSITcDk0LFhvpw4z1/gx ocBXH542tcGwQ/jfLUWiV/gwp3qZ8RE= -----END CERTIFICATE-----Generated at Mon Mar 2 02:55:06 2026 by rpki-client