$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa File: 4deca47a-06dc-30d8-843f-52136e603e18.roa (raw, json) Hash identifier: KH7aknbjLSzafsy8ZBVBOOPg2Aq97yhZDBSqZf5qHjA= Subject key identifier: 61:BD:E6:D7:AB:F5:D7:E6:A8:D5:7C:8A:F2:00:7E:34:1F:37:42:0C Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584D02179B3B70A9A7CA835EFE40 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa Signing time: Sat 28 Feb 2026 02:00:32 +0000 ROA not before: Sat 28 Feb 2026 02:00:32 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 36642 IP address blocks: 170.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:02:17:9b:3b:70:a9:a7:ca:83:5e:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Feb 28 02:00:32 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=cbd30bd1-e71e-4b67-95a1-058303dea344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c4:b2:af:09:59:d9:84:7c:16:e4:34:57:9d: 86:9a:55:33:6c:cd:6a:4a:59:62:a1:fd:75:a3:32: 89:e5:88:2c:50:e7:4b:42:6f:3a:56:10:98:ee:7c: 51:5f:aa:24:47:b3:80:a5:a3:75:d1:25:03:8a:ba: 87:ff:2b:06:82:4b:42:cc:d9:10:79:b1:e8:e0:1b: b0:b4:82:3d:25:22:e9:e3:2a:e3:8f:65:dc:44:5d: 57:57:f1:8a:f5:71:08:d7:a2:ee:f4:02:f6:c7:07: 8d:91:81:5e:84:5c:1b:65:13:93:57:e4:89:87:f6: 7c:cd:95:2a:37:c9:9f:9d:01:94:27:be:e4:56:d3: a9:52:85:77:4a:a0:93:71:39:61:73:59:26:e9:46: 4f:48:f8:e6:99:4a:aa:71:e2:1f:cd:7f:74:98:d2: 6d:97:2c:b2:ad:f6:88:38:3b:32:18:30:3b:cb:d1: 2e:05:b5:9d:cf:0b:cd:60:6a:d6:e3:43:3b:2d:70: 6d:85:f7:9c:0e:09:8e:c5:d2:da:76:53:7e:9a:b9: 0e:fd:95:21:3c:e4:cf:d1:a0:e8:ac:2b:2a:cf:01: b1:2e:a9:8d:8a:1e:d1:6f:30:61:0b:77:93:47:68: b1:bf:ed:a1:e2:b8:8c:7e:e7:30:61:fd:fb:3f:62: 74:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BD:E6:D7:AB:F5:D7:E6:A8:D5:7C:8A:F2:00:7E:34:1F:37:42:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2e:84:d8:a6:e1:8a:42:06:45:b1:e7:71:58:b5:60:7a:f4: 6c:a2:17:03:7b:70:99:7e:63:55:c7:e2:82:06:80:2c:26:e0: 17:ae:7d:29:7e:57:bb:5f:dd:65:e8:0a:9f:cb:a3:53:7e:e8: 26:c1:af:04:58:d5:6e:a7:52:51:24:f8:7d:22:a9:d6:2b:42: fa:84:44:57:f9:7d:a1:b8:af:07:98:97:fc:e8:ad:de:38:d2: c3:78:8f:3b:91:5f:82:a6:0f:34:89:1c:3f:c7:5d:a3:d9:c3: 62:e4:d1:07:09:65:c0:73:75:6b:1a:19:0a:5c:67:4c:87:51: e6:6e:81:46:23:ea:6d:53:ed:12:52:f5:fc:c3:d2:a7:d8:11: 7d:1f:11:e4:28:9a:c3:83:12:a7:be:ae:11:96:4b:ee:b7:eb: 36:46:00:8f:93:40:66:3b:ba:65:ae:84:63:c8:ae:64:79:ff: fd:4e:7d:75:56:74:b4:1f:48:f8:08:8d:86:52:2c:15:2b:72: c6:4e:42:eb:02:ac:46:2e:74:25:42:5d:65:36:de:5c:5d:03: b8:ca:3e:7c:68:e5:0c:c4:19:38:8c:08:3f:a7:3d:d0:9b:1e: 54:cb:ee:45:cb:b9:2c:33:a7:2c:fa:28:24:53:cf:96:b7:60: 85:68:c1:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF5s7cKmnyoNe/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2JkMzBiZDEtZTcxZS00YjY3LTk1YTEtMDU4MzAzZGVhMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68SyrwlZ2YR8FuQ0V52GmlUzbM1qSlliof11 ozKJ5YgsUOdLQm86VhCY7nxRX6okR7OApaN10SUDirqH/ysGgktCzNkQebHo4Buw tII9JSLp4yrjj2XcRF1XV/GK9XEI16Lu9AL2xweNkYFehFwbZROTV+SJh/Z8zZUq N8mfnQGUJ77kVtOpUoV3SqCTcTlhc1km6UZPSPjmmUqqceIfzX90mNJtlyyyrfaI ODsyGDA7y9EuBbWdzwvNYGrW40M7LXBthfecDgmOxdLadlN+mrkO/ZUhPOTP0aDo rCsqzwGxLqmNih7RbzBhC3eTR2ixv+2h4riMfucwYf37P2J0vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGG95ter9dfmqNV8ivIAfjQfN0IMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvNGRlY2E0N2EtMDZkYy0z MGQ4LTg0M2YtNTIxMzZlNjAzZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHguhNim4YpCBkWx53FYtWB69GyiFwN7cJl+Y1XH4oIGgCwm4BeufSl+ V7tf3WXoCp/Lo1N+6CbBrwRY1W6nUlEk+H0iqdYrQvqERFf5faG4rweYl/zord44 0sN4jzuRX4KmDzSJHD/HXaPZw2Lk0QcJZcBzdWsaGQpcZ0yHUeZugUYj6m1T7RJS 9fzD0qfYEX0fEeQomsODEqe+rhGWS+636zZGAI+TQGY7umWuhGPIrmR5//1OfXVW dLQfSPgIjYZSLBUrcsZOQusCrEYudCVCXWU23lxdA7jKPnxo5QzEGTiMCD+nPdCb HlTL7kXLuSwzpyz6KCRTz5a3YIVowU8= -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:43 2026 by rpki-client