$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa File: 4deca47a-06dc-30d8-843f-52136e603e18.roa (raw, json) Hash identifier: DrKDSXnUL/NrsxPrTZKOWQ+JaNxqREUJgrWwbbYKh7E= Subject key identifier: 09:EF:AC:AF:48:2F:48:7B:1F:94:5A:2C:03:52:45:20:6E:67:81:E7 Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584B41E70EB02B4E578B26A8F780 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 36642 IP address blocks: 170.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0e:b0:2b:4e:57:8b:26:a8:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=e4d22b7d-2908-48e3-8685-611c2b66de8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:70:7d:f9:e7:38:b2:1b:27:68:76:80:85:e3: ab:00:08:e6:ea:ad:05:d7:e7:81:61:72:e9:03:cd: 26:24:6d:36:74:56:7a:ca:ca:3b:64:28:b8:2e:59: 69:6a:90:24:af:d3:de:ba:cd:ef:51:3f:e2:b3:43: a9:73:82:55:d4:55:79:a7:62:53:62:b7:fc:ff:7e: 61:97:d5:69:31:f3:55:5e:2f:eb:d1:80:9c:4a:f1: 00:4c:42:32:66:3b:53:c9:7b:ff:71:a7:06:27:0e: b4:b1:f6:71:27:f8:b3:aa:3a:3d:53:e1:9a:f0:15: e9:d2:3f:a4:4d:82:c7:97:21:6e:8d:f5:67:47:93: 80:42:ed:44:8d:28:12:38:7d:20:ea:f5:1f:b3:0f: 73:e9:63:0e:1b:85:95:04:4b:2e:32:60:0d:2a:a6: 01:44:7d:86:ff:fb:0c:53:7b:20:45:32:fd:69:2f: 05:f9:2e:f6:4e:95:2d:a7:3b:31:2f:8c:13:29:72: e8:c7:b7:6c:05:de:d0:e2:a1:4b:d2:69:94:6d:c4: 9b:63:34:77:54:47:4b:c2:40:7d:69:a6:4a:93:40: 82:f8:83:c9:f7:65:53:de:7c:46:47:e5:fb:3b:b1: 03:49:63:eb:8a:08:45:2d:89:ba:17:1d:d1:87:73: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EF:AC:AF:48:2F:48:7B:1F:94:5A:2C:03:52:45:20:6E:67:81:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:4e:4e:9f:48:55:73:d9:40:bb:2c:42:cc:4b:79:63:25:b3: 74:85:a2:64:31:36:98:f8:73:fd:b2:fc:5f:d6:e7:90:1d:fa: 33:8f:e7:92:df:70:7d:1c:6c:68:9a:2c:fb:8e:1d:8f:02:17: 38:cb:53:a5:8e:08:d1:2e:82:01:df:df:cc:c7:27:a5:d7:87: e3:ac:45:ef:33:d4:7d:42:67:dd:2d:98:2f:2f:b2:3b:db:f3: e8:42:31:14:dc:78:f9:6f:c2:5d:53:34:69:f7:a9:49:b6:d5: 74:67:eb:04:7f:33:c6:c4:ff:9f:40:77:7e:01:54:f1:bc:49: 1c:c2:0f:39:02:89:9c:cc:03:9d:8a:ce:a9:b8:6e:82:48:19: d3:90:4f:88:7b:1e:b0:28:ac:7a:55:39:32:d2:eb:e0:a3:31: 9b:5d:60:1c:65:7d:5a:de:42:da:b8:48:e1:e6:ff:7c:79:b7: 27:e7:90:b6:ca:a6:97:a7:8a:3b:3d:72:82:5b:90:e8:2e:37: ac:ae:e8:ee:24:b5:f1:5b:a2:4e:86:54:b0:a8:89:5e:2e:ee: e9:df:b1:36:f8:02:de:a4:30:db:97:6a:bf:6e:d3:45:f5:4f: 78:53:58:16:e2:0e:f5:fa:b8:63:7d:cb:e8:05:d5:01:3e:74: 13:e2:ce:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5w6wK05Xiyao94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTRkMjJiN2QtMjkwOC00OGUzLTg2ODUtNjExYzJiNjZkZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnB9+ec4shsnaHaAheOrAAjm6q0F1+eBYXLp A80mJG02dFZ6yso7ZCi4LllpapAkr9Peus3vUT/is0Opc4JV1FV5p2JTYrf8/35h l9VpMfNVXi/r0YCcSvEATEIyZjtTyXv/cacGJw60sfZxJ/izqjo9U+Ga8BXp0j+k TYLHlyFujfVnR5OAQu1EjSgSOH0g6vUfsw9z6WMOG4WVBEsuMmANKqYBRH2G//sM U3sgRTL9aS8F+S72TpUtpzsxL4wTKXLox7dsBd7Q4qFL0mmUbcSbYzR3VEdLwkB9 aaZKk0CC+IPJ92VT3nxGR+X7O7EDSWPrighFLYm6Fx3Rh3NSywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnvrK9IL0h7H5RaLANSRSBuZ4HnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvNGRlY2E0N2EtMDZkYy0z MGQ4LTg0M2YtNTIxMzZlNjAzZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhOTp9IVXPZQLssQsxLeWMls3SFomQxNpj4c/2y/F/W55Ad+jOP55Lf cH0cbGiaLPuOHY8CFzjLU6WOCNEuggHf38zHJ6XXh+OsRe8z1H1CZ90tmC8vsjvb 8+hCMRTcePlvwl1TNGn3qUm21XRn6wR/M8bE/59Ad34BVPG8SRzCDzkCiZzMA52K zqm4boJIGdOQT4h7HrAorHpVOTLS6+CjMZtdYBxlfVreQtq4SOHm/3x5tyfnkLbK ppenijs9coJbkOguN6yu6O4ktfFbok6GVLCoiV4u7unfsTb4At6kMNuXar9u00X1 T3hTWBbiDvX6uGN9y+gF1QE+dBPizsY= -----END CERTIFICATE-----Generated at Wed Nov 5 06:22:22 2025 by rpki-client