$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/d5e4478b-a288-34c2-a857-fe6c6052b6d0.roa File: d5e4478b-a288-34c2-a857-fe6c6052b6d0.roa (raw, json) Hash identifier: z8U582vhHSgps2qOgoy2UN/JSzfu3scSjJtIbeBshJk= Subject key identifier: 8C:48:AB:B8:B0:41:A7:CD:81:1D:1E:E3:78:46:84:2F:84:8B:67:59 Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584AC770CAE8DBA68181923CA780 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/d5e4478b-a288-34c2-a857-fe6c6052b6d0.roa Signing time: Thu 07 Aug 2025 16:13:53 +0000 ROA not before: Thu 07 Aug 2025 16:13:53 +0000 ROA not after: Wed 05 Nov 2025 17:13:53 +0000 asID: 54478 IP address blocks: 170.88.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:70:ca:e8:db:a6:81:81:92:3c:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Aug 7 16:13:53 2025 GMT Not After : Nov 5 17:13:53 2025 GMT Subject: CN=f8dc9597-3fd5-4772-a261-a2e436f7a430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:b4:6e:a5:3a:57:f5:86:dc:f6:e4:e6:2a: df:d4:4d:48:95:83:4d:b1:f4:cc:73:09:4a:8c:69: 44:c4:b5:b5:3e:96:1a:49:45:71:06:e8:55:9c:27: 5d:ec:2e:f4:79:64:02:f0:6b:56:83:99:c8:2a:74: 88:1d:91:fd:e9:42:f5:6a:5e:a4:0b:14:53:e8:80: 55:e1:1c:cb:3f:7f:ce:0c:13:55:da:f2:a0:95:ae: 1d:33:e1:c0:c2:72:60:a9:a7:9e:12:34:ad:4d:7e: d4:f7:4d:bf:18:5b:f7:1e:c8:35:f6:f1:90:d5:ae: 12:0c:1f:4d:27:62:f7:a8:05:16:21:d0:7c:90:50: 57:db:ab:6e:6b:e5:6a:c9:7b:2b:2d:b0:8b:e2:ee: fd:cc:7a:c2:44:6c:7e:08:76:e3:cb:12:88:73:4f: 5d:f0:a7:51:5d:ef:15:1f:c8:82:94:81:20:0d:07: 2f:5c:a9:b2:12:31:0b:6b:70:33:5b:1e:f8:21:72: 57:1d:94:ff:3d:93:b1:02:24:55:68:f9:04:d8:4a: 5e:0b:8b:b9:2b:bf:9f:f4:dc:12:f0:7d:dc:15:fb: 7b:94:05:0e:07:f5:ea:77:d2:95:14:79:6f:c1:48: d6:05:c9:50:a8:37:13:df:2a:40:91:ae:08:1c:0a: 8b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:48:AB:B8:B0:41:A7:CD:81:1D:1E:E3:78:46:84:2F:84:8B:67:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/d5e4478b-a288-34c2-a857-fe6c6052b6d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:de:83:7c:19:bb:2d:fc:f3:31:00:20:b2:b8:fa:46:53:50: 0d:c6:5b:6a:a9:c1:d6:7b:9f:85:97:d6:19:89:c7:5b:1a:68: e8:33:8c:df:33:7a:32:1f:a8:7d:f0:7c:89:4c:e4:c9:35:66: 7a:25:8c:4b:f9:bf:28:2d:f1:75:a1:2b:b0:84:7d:18:e7:7e: 24:d8:15:57:bb:ae:09:ee:c6:67:6c:7f:f1:42:3d:84:1c:bb: 23:8e:d6:a9:95:78:5c:f1:ab:9b:05:b7:76:32:e4:98:0b:dc: ae:14:97:5b:ec:2f:b5:0d:59:c6:5b:ed:58:ad:d4:a5:ae:5b: 7a:c9:89:bb:c3:5e:7b:a2:ab:ca:ce:7a:c3:30:d9:51:66:ba: 4c:5a:94:3f:92:35:aa:ad:89:de:b7:86:77:72:e4:91:ef:ac: c6:69:41:97:9f:4a:dc:53:ec:9f:da:a0:12:f0:5d:0d:68:5a: 4f:a3:71:9b:7d:1b:1a:43:ed:8d:a4:a0:a5:d3:cc:a2:b7:6c: d3:94:9d:e3:50:a9:d1:cb:69:ef:aa:4d:9b:d0:12:47:09:84: be:af:7b:22:0b:ba:4f:ca:8f:6c:af:b5:44:12:f0:8e:cc:b4: 2a:ca:de:cd:0f:7e:91:47:67:9b:7f:2b:33:8b:b8:bf:a7:3d: b6:77:7a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHcMro26aBgZI8p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI1MDgwNzE2MTM1M1oXDTI1MTEwNTE3MTM1M1owLzEtMCsGA1UEAxMk ZjhkYzk1OTctM2ZkNS00NzcyLWEyNjEtYTJlNDM2ZjdhNDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykW0bqU6V/WG3Pbk5irf1E1IlYNNsfTMcwlK jGlExLW1PpYaSUVxBuhVnCdd7C70eWQC8GtWg5nIKnSIHZH96UL1al6kCxRT6IBV 4RzLP3/ODBNV2vKgla4dM+HAwnJgqaeeEjStTX7U902/GFv3Hsg19vGQ1a4SDB9N J2L3qAUWIdB8kFBX26tua+VqyXsrLbCL4u79zHrCRGx+CHbjyxKIc09d8KdRXe8V H8iClIEgDQcvXKmyEjELa3AzWx74IXJXHZT/PZOxAiRVaPkE2EpeC4u5K7+f9NwS 8H3cFft7lAUOB/Xqd9KVFHlvwUjWBclQqDcT3ypAka4IHAqL0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxIq7iwQafNgR0e43hGhC+Ei2dZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvZDVlNDQ3OGItYTI4OC0z NGMyLWE4NTctZmU2YzYwNTJiNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGreg3wZuy388zEAILK4+kZTUA3GW2qpwdZ7n4WX1hmJx1saaOgzjN8z ejIfqH3wfIlM5Mk1ZnoljEv5vygt8XWhK7CEfRjnfiTYFVe7rgnuxmdsf/FCPYQc uyOO1qmVeFzxq5sFt3Yy5JgL3K4Ul1vsL7UNWcZb7Vit1KWuW3rJibvDXnuiq8rO esMw2VFmukxalD+SNaqtid63hndy5JHvrMZpQZefStxT7J/aoBLwXQ1oWk+jcZt9 GxpD7Y2koKXTzKK3bNOUneNQqdHLae+qTZvQEkcJhL6veyILuk/Kj2yvtUQS8I7M tCrK3s0PfpFHZ5t/KzOLuL+nPbZ3eoQ= -----END CERTIFICATE-----Generated at Sat Aug 23 22:58:12 2025 by rpki-client