$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/95eebf6d-d077-352d-92fd-01a38addd17f.roa File: 95eebf6d-d077-352d-92fd-01a38addd17f.roa (raw, json) Hash identifier: 3DPBa42U/7s91tdVnluTHZFst0mmyXXMfx+LklG7ayI= Subject key identifier: 1F:D1:C7:1A:5B:45:44:83:8E:B0:13:0E:8B:62:D3:A3:DC:A7:70:6C Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584B41E70C3897063CCAEE24F020 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/95eebf6d-d077-352d-92fd-01a38addd17f.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 36642 IP address blocks: 170.88.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0c:38:97:06:3c:ca:ee:24:f0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=38a79848-4fa4-4e42-a4b7-c4ba99687829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a4:72:ed:ea:f8:f4:04:10:50:d8:9f:a8:6e: 65:11:31:95:e5:cf:34:4e:8c:50:48:b5:58:b1:f1: 70:06:44:75:16:90:45:84:04:a5:7a:63:0f:12:18: c6:d5:c7:a8:60:31:3f:10:04:51:b5:c8:6c:91:e3: f8:35:2e:49:32:00:81:2b:3f:e4:57:9b:db:9b:07: b0:68:6c:8e:58:df:9f:8d:39:ef:e9:ea:13:5b:0a: 2e:e9:0c:f3:d3:93:5e:d4:20:9e:d6:db:97:90:c2: 55:93:6b:41:42:09:8f:42:56:4a:78:21:49:a7:76: 21:7b:5a:7b:99:d3:65:db:52:f9:fd:4c:ee:39:4d: 59:1c:f8:c0:dd:81:14:61:b7:7d:39:92:90:0d:1e: a2:9b:7e:e3:83:f0:7e:9b:4f:5d:86:d1:56:56:d3: b3:d0:32:97:d3:71:54:e2:d7:b0:88:f4:3c:1f:b7: 1f:18:cd:4d:a3:31:df:f2:d5:d0:80:e4:1e:be:73: 33:68:c8:6b:d5:c8:e0:8f:8d:ca:09:78:fd:44:a1: b4:37:16:f1:3c:70:45:d6:95:0e:72:d8:98:29:f3: 65:c2:f0:24:be:2d:f0:4f:2a:e0:43:6d:1b:ff:0f: 04:41:42:ac:74:04:ee:eb:6e:7c:4e:7f:74:e3:23: 2c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D1:C7:1A:5B:45:44:83:8E:B0:13:0E:8B:62:D3:A3:DC:A7:70:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/95eebf6d-d077-352d-92fd-01a38addd17f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:38:4c:1f:91:a0:78:f3:9a:6f:b5:cd:06:ab:dc:9b:26:1f: 21:73:04:af:52:1b:83:13:a6:30:ef:37:28:75:97:5d:bb:ec: 73:a2:3f:b5:df:fe:32:d9:49:38:90:84:5c:6b:2b:05:a6:83: ba:1a:05:15:97:c1:e9:f9:26:56:80:bb:05:54:a2:92:66:d8: f5:d0:d2:50:d3:37:42:10:58:d5:00:ec:af:02:a6:cd:87:34: 18:77:03:c4:d3:81:2d:ec:7a:bf:24:d0:9b:4a:0c:73:64:03: a8:c0:21:3a:84:72:1a:28:1f:8b:87:08:4c:88:5a:5e:6b:76: f8:c9:a3:5a:6e:91:d9:0d:7e:2b:b1:44:58:ad:0a:74:9c:24: f5:c4:7b:ba:cd:de:98:96:36:a7:ac:1b:c9:26:aa:ac:9a:d9: 23:36:de:ec:2b:b8:42:5f:eb:f1:1d:de:50:f0:f1:36:64:64: 31:e1:2e:1e:a1:4c:fd:19:a3:b4:9e:c9:77:65:55:54:d0:7a: ab:ba:b8:a6:5e:f4:91:f0:39:0d:51:69:22:16:3a:95:43:6c: db:0b:11:68:e3:b0:62:10:68:e8:05:1e:c7:6a:cf:62:59:ab: 08:da:dc:35:1b:a6:40:ef:fa:bc:30:51:28:c6:db:0a:44:ce: db:cb:5c:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5ww4lwY8yu4k8CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MzhhNzk4NDgtNGZhNC00ZTQyLWE0YjctYzRiYTk5Njg3ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqRy7er49AQQUNifqG5lETGV5c80ToxQSLVY sfFwBkR1FpBFhASlemMPEhjG1ceoYDE/EARRtchskeP4NS5JMgCBKz/kV5vbmwew aGyOWN+fjTnv6eoTWwou6Qzz05Ne1CCe1tuXkMJVk2tBQgmPQlZKeCFJp3Yhe1p7 mdNl21L5/UzuOU1ZHPjA3YEUYbd9OZKQDR6im37jg/B+m09dhtFWVtOz0DKX03FU 4tewiPQ8H7cfGM1NozHf8tXQgOQevnMzaMhr1cjgj43KCXj9RKG0NxbxPHBF1pUO ctiYKfNlwvAkvi3wTyrgQ20b/w8EQUKsdATu6258Tn904yMsJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/RxxpbRUSDjrATDoti06Pcp3BsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvOTVlZWJmNmQtZDA3Ny0z NTJkLTkyZmQtMDFhMzhhZGRkMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI04TB+RoHjzmm+1zQar3JsmHyFzBK9SG4MTpjDvNyh1l1277HOiP7Xf /jLZSTiQhFxrKwWmg7oaBRWXwen5JlaAuwVUopJm2PXQ0lDTN0IQWNUA7K8Cps2H NBh3A8TTgS3ser8k0JtKDHNkA6jAITqEchooH4uHCEyIWl5rdvjJo1pukdkNfiux RFitCnScJPXEe7rN3piWNqesG8kmqqya2SM23uwruEJf6/Ed3lDw8TZkZDHhLh6h TP0Zo7SeyXdlVVTQequ6uKZe9JHwOQ1RaSIWOpVDbNsLEWjjsGIQaOgFHsdqz2JZ qwja3DUbpkDv+rwwUSjG2wpEztvLXGk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:21:57 2025 by rpki-client