$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa File: 4deca47a-06dc-30d8-843f-52136e603e18.roa (raw, json) Hash identifier: GDN819VQy8+St2tFeAg+Y+K68XCn5RI0Z4ygtw5MUv8= Subject key identifier: 42:0E:A6:85:80:DA:4C:10:01:1D:E4:FD:97:2B:56:06:23:58:5D:21 Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584EA78FFAC426D976AE6A68B200 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36642 IP address blocks: 170.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:fa:c4:26:d9:76:ae:6a:68:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9e8a133c-5eb7-4af0-b4a2-26f922ba8189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:30:14:e6:92:d3:59:6d:de:86:9a:de:9c:9b: ed:e2:1a:55:48:b6:b7:e9:56:99:60:22:74:28:24: b6:c1:28:cb:2f:86:f6:f6:60:4e:12:6b:9e:6d:ae: 50:71:04:21:1f:5d:72:9c:b1:ff:41:88:47:28:b3: 0e:f6:bc:a2:ee:af:bc:22:ca:4f:e9:1a:ca:d0:ff: 61:c8:31:e4:ce:cb:1d:12:5b:87:e7:36:26:62:90: 89:b3:df:b5:e3:7b:88:c5:78:4a:1e:54:7d:9d:d4: 7b:2a:69:b5:fb:c4:9d:d1:3d:0d:a9:10:b3:af:62: e5:d7:b1:2d:0a:3f:f5:e5:4f:c0:51:92:a0:bc:9e: 4e:9a:e1:b4:68:0c:8f:cd:24:66:1d:86:9d:11:47: 81:a2:33:9f:b0:3b:e6:b3:18:4a:1d:55:83:ed:8d: a2:fc:8e:4e:46:c1:64:c6:42:ef:42:58:5f:bc:80: 9a:72:e4:ba:3c:ef:77:0c:88:65:4c:a7:84:7e:6e: da:61:0c:cf:86:e4:f9:b3:c3:0c:fc:d7:a4:aa:44: 90:40:c0:0e:4c:39:29:8f:81:e1:95:9b:4a:d0:53: 94:79:88:86:34:00:44:8e:9f:a5:a2:5b:21:fd:aa: 03:91:d6:6c:b6:fe:45:18:13:2d:b1:8d:78:d6:66: c7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0E:A6:85:80:DA:4C:10:01:1D:E4:FD:97:2B:56:06:23:58:5D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/4deca47a-06dc-30d8-843f-52136e603e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:86:2b:2b:9d:be:de:48:cb:10:86:c9:cd:c8:a3:18:70:01: 68:bc:6c:25:a6:7c:1c:02:43:b2:25:dd:66:a1:eb:9b:f8:1d: 26:a7:ac:72:74:99:25:7d:4e:45:f3:93:66:ea:db:81:ef:d5: 21:ef:36:5c:ee:f4:43:1e:22:0c:0e:3d:41:62:cb:7f:ea:9c: 26:d3:4f:27:70:de:1b:5a:c9:f6:b0:ee:aa:81:92:bc:5f:e3: d4:6e:cf:9d:64:fb:50:3e:b8:42:6d:44:30:09:b0:47:4a:e5: 24:22:d3:f8:50:15:3e:18:1e:f2:49:a2:06:e3:bb:76:f1:b5: b3:c0:18:0d:ea:6f:13:07:ad:99:8c:78:24:06:12:66:09:1b: 48:e2:7c:27:ee:96:02:d1:a1:81:c7:eb:17:87:cc:ec:06:4f: eb:d3:bc:d7:82:7b:64:18:1f:c2:ff:15:ec:29:64:a6:e6:35: 7e:e0:06:6b:21:7d:8f:3e:4a:5c:17:dc:27:b9:f5:1f:69:f7: 24:99:cb:a3:6a:83:1f:d3:0b:2e:04:d3:3a:06:61:32:cf:db: 53:15:1a:0a:56:c5:fc:07:60:5d:e4:e3:9e:7c:0d:f2:2e:37: 59:cd:1c:b4:ba:8e:4a:0e:de:73:73:84:b3:33:99:f7:40:2e: 77:f2:b4:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj/rEJtl2rmposgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWU4YTEzM2MtNWViNy00YWYwLWI0YTItMjZmOTIyYmE4MTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jAU5pLTWW3ehprenJvt4hpVSLa36VaZYCJ0 KCS2wSjLL4b29mBOEmueba5QcQQhH11ynLH/QYhHKLMO9ryi7q+8IspP6RrK0P9h yDHkzssdEluH5zYmYpCJs9+143uIxXhKHlR9ndR7Kmm1+8Sd0T0NqRCzr2Ll17Et Cj/15U/AUZKgvJ5OmuG0aAyPzSRmHYadEUeBojOfsDvmsxhKHVWD7Y2i/I5ORsFk xkLvQlhfvICacuS6PO93DIhlTKeEfm7aYQzPhuT5s8MM/NekqkSQQMAOTDkpj4Hh lZtK0FOUeYiGNABEjp+lolsh/aoDkdZstv5FGBMtsY141mbHSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIOpoWA2kwQAR3k/ZcrVgYjWF0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvNGRlY2E0N2EtMDZkYy0z MGQ4LTg0M2YtNTIxMzZlNjAzZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqGKyudvt5IyxCGyc3IoxhwAWi8bCWmfBwCQ7Il3Wah65v4HSanrHJ0 mSV9TkXzk2bq24Hv1SHvNlzu9EMeIgwOPUFiy3/qnCbTTydw3htayfaw7qqBkrxf 49Ruz51k+1A+uEJtRDAJsEdK5SQi0/hQFT4YHvJJogbju3bxtbPAGA3qbxMHrZmM eCQGEmYJG0jifCfulgLRoYHH6xeHzOwGT+vTvNeCe2QYH8L/FewpZKbmNX7gBmsh fY8+SlwX3Ce59R9p9ySZy6Nqgx/TCy4E0zoGYTLP21MVGgpWxfwHYF3k4558DfIu N1nNHLS6jkoO3nNzhLMzmfdALnfytMA= -----END CERTIFICATE-----Generated at Wed Jul 29 08:12:49 2026 by rpki-client