$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/6585343a-f4b9-3ec1-89e9-7b7770469b30.roa File: 6585343a-f4b9-3ec1-89e9-7b7770469b30.roa (raw, json) Hash identifier: RVBESG2VhrIhBH8Q1bSaIc/C90XEPbBzmaSf9fn/1vA= Subject key identifier: 27:22:E5:E5:22:CC:91:F2:44:B1:FE:82:F7:86:9D:A7:60:21:C8:2C Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584BA7CD1BA4B03A783C73828920 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/6585343a-f4b9-3ec1-89e9-7b7770469b30.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 54478 IP address blocks: 170.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:1b:a4:b0:3a:78:3c:73:82:89:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=606c12f4-ce68-4123-889b-d83a614d6ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:12:fe:71:5e:28:9a:16:b6:bf:9a:07:89:bb: ea:c4:14:41:44:7a:3e:f6:7d:87:64:77:7c:d5:eb: 50:87:a2:8e:a5:07:8a:ff:98:6c:0b:79:c9:4e:00: 13:82:8f:d0:db:20:97:64:57:d8:92:1b:56:35:24: 49:de:ce:f0:bb:77:5b:a4:b8:8e:28:66:28:19:1e: 3c:c0:34:ee:5e:68:3a:ab:9b:23:e0:c8:3b:dc:00: 13:89:fc:fe:7c:87:3d:ad:b3:1c:15:d1:9b:08:39: 09:14:40:5b:45:ba:ff:1a:b6:2d:4c:55:6c:4f:33: 64:69:71:82:eb:83:3c:5c:1f:83:74:ee:f0:a4:cb: 03:0a:e2:06:09:52:bb:eb:c5:95:52:11:40:d8:81: 89:4a:73:c5:44:f2:56:dc:e4:04:4a:4a:d2:72:95: 32:29:8c:65:40:9c:69:88:b0:4a:c8:5d:9f:6a:73: 5f:c3:4b:50:84:62:8e:dd:c6:30:75:69:b8:dc:4e: 43:ab:33:91:74:21:fc:a0:a7:db:87:61:d1:83:44: 92:76:bd:25:39:0b:e3:f1:88:f3:9c:73:30:36:58: 50:e1:89:ee:26:5b:cf:b7:4e:87:b1:6e:64:b8:20: d2:03:3c:37:39:7c:1b:87:63:ab:5d:ba:d8:4c:7d: 62:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:22:E5:E5:22:CC:91:F2:44:B1:FE:82:F7:86:9D:A7:60:21:C8:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/6585343a-f4b9-3ec1-89e9-7b7770469b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:24:df:15:1b:26:ad:6b:b3:5a:fa:4c:e0:ed:bc:6a:ef:cd: 6c:3d:15:3c:a3:99:c0:6b:31:0f:e3:4d:e8:bc:04:12:ed:e2: ef:fa:7e:45:2f:af:6a:e9:d2:38:08:25:38:a8:46:e3:fc:5f: d4:fa:c9:c9:2c:48:bd:8e:26:f1:48:c4:59:8c:a4:47:80:a3: c5:68:d7:2e:15:d9:35:d6:89:14:d7:52:3a:a1:6b:1a:57:b6: 87:c6:bc:b1:6e:a0:d1:47:b1:fe:4b:6b:53:87:2c:ec:e3:75: ad:b1:c6:9d:38:0e:7f:7d:dc:28:d2:50:bc:d7:a0:43:e6:0a: 19:eb:17:4f:c2:e9:25:f4:02:70:3f:fa:c9:6d:87:a2:4e:d7: ef:07:cc:57:c8:4c:97:b9:74:ab:70:36:86:83:a8:4f:94:f7: 04:f5:5f:0b:d8:6b:a2:25:fb:b2:3d:85:3d:7b:1b:cc:f0:24: e5:06:aa:a5:d1:c0:c2:ed:70:56:85:56:61:42:fc:da:0f:fb: ed:69:ad:c0:94:78:f7:b0:c8:23:18:4a:c8:ec:9c:0e:65:ac: 97:36:52:bc:29:f2:87:99:4c:09:90:d2:5c:b6:19:28:ff:2e: e8:d7:2e:5c:2a:97:51:33:30:79:6f:66:2c:9d:b2:03:71:ba: 1e:2f:31:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRuksDp4PHOCiSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NjA2YzEyZjQtY2U2OC00MTIzLTg4OWItZDgzYTYxNGQ2ZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghL+cV4omha2v5oHibvqxBRBRHo+9n2HZHd8 1etQh6KOpQeK/5hsC3nJTgATgo/Q2yCXZFfYkhtWNSRJ3s7wu3dbpLiOKGYoGR48 wDTuXmg6q5sj4Mg73AATifz+fIc9rbMcFdGbCDkJFEBbRbr/GrYtTFVsTzNkaXGC 64M8XB+DdO7wpMsDCuIGCVK768WVUhFA2IGJSnPFRPJW3OQESkrScpUyKYxlQJxp iLBKyF2fanNfw0tQhGKO3cYwdWm43E5DqzORdCH8oKfbh2HRg0SSdr0lOQvj8Yjz nHMwNlhQ4YnuJlvPt06HsW5kuCDSAzw3OXwbh2OrXbrYTH1i9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCci5eUizJHyRLH+gveGnadgIcgsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvNjU4NTM0M2EtZjRiOS0z ZWMxLTg5ZTktN2I3NzcwNDY5YjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJok3xUbJq1rs1r6TODtvGrvzWw9FTyjmcBrMQ/jTei8BBLt4u/6fkUv r2rp0jgIJTioRuP8X9T6ycksSL2OJvFIxFmMpEeAo8Vo1y4V2TXWiRTXUjqhaxpX tofGvLFuoNFHsf5La1OHLOzjda2xxp04Dn993CjSULzXoEPmChnrF0/C6SX0AnA/ +slth6JO1+8HzFfITJe5dKtwNoaDqE+U9wT1XwvYa6Il+7I9hT17G8zwJOUGqqXR wMLtcFaFVmFC/NoP++1prcCUePewyCMYSsjsnA5lrJc2Urwp8oeZTAmQ0ly2GSj/ LujXLlwql1EzMHlvZiydsgNxuh4vMRw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:17:48 2025 by rpki-client