$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/2e5c83c0-ed6c-3094-af72-435ce5ab9766.roa File: 2e5c83c0-ed6c-3094-af72-435ce5ab9766.roa (raw, json) Hash identifier: XzS3BRvpbWe2PJiw+Kllg/cUfZeUpeJ8+4zvxPzlCwo= Subject key identifier: 2F:3C:5E:3B:6E:61:C0:77:AE:F5:81:8E:71:C2:2A:5E:3D:2A:37:63 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584AE8911EF927D4396C1C461CC0 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/2e5c83c0-ed6c-3094-af72-435ce5ab9766.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 85.113.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:1e:f9:27:d4:39:6c:1c:46:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=99b0ceb7-8e3e-4577-9301-feae5697c616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c5:b5:19:0a:cf:36:6e:9b:7d:3e:f1:00:5e: b8:4c:44:12:b9:d2:df:c4:4a:13:2a:28:44:38:d7: 0c:f9:b6:67:b6:51:5d:20:64:2d:83:24:3b:ac:6a: a8:5f:73:f3:e1:f1:cf:a0:0e:e5:14:dd:f3:41:ea: 2e:1d:13:3d:de:42:64:ca:fe:5d:2a:9b:e0:67:96: 68:eb:1b:8e:6e:1f:11:45:85:fd:82:2d:96:7e:b1: 96:78:10:f0:a7:ae:d7:01:5a:ee:4f:5e:a1:2a:6e: 20:03:b3:52:3a:05:0e:1e:57:4c:53:64:64:f4:7b: 7a:d3:86:fa:2a:5e:3e:01:7b:78:47:74:18:da:5a: 36:77:6d:10:fb:37:5c:51:ae:ab:a9:94:2d:8a:4e: 01:00:87:c8:f6:06:15:20:0d:20:ec:74:13:47:0b: 29:17:e4:98:71:60:2a:f8:bf:6a:a2:4b:be:bb:8c: cb:01:0b:43:b6:52:35:fc:d8:2e:c8:f0:93:ff:92: f9:7d:f6:99:70:7a:f1:09:72:9c:70:a1:a9:30:87: 7b:51:3c:34:cf:6d:ab:0f:d0:22:b1:fd:b0:c6:ef: 4d:66:55:f9:2c:09:09:38:77:41:85:5a:ae:8e:19: 13:98:2a:09:c4:4c:97:a2:1f:3c:2d:91:1e:0d:80: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3C:5E:3B:6E:61:C0:77:AE:F5:81:8E:71:C2:2A:5E:3D:2A:37:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/2e5c83c0-ed6c-3094-af72-435ce5ab9766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 85.113.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ac:e9:9c:82:e4:7d:34:dc:29:52:a4:d2:ab:46:f0:7c:46: ea:32:b3:24:d2:34:64:88:7c:ca:4e:98:cc:e6:59:79:dc:28: af:86:9f:40:41:07:20:6b:2b:42:b6:5d:78:c2:f1:cf:d2:1e: 82:4e:82:17:cf:2c:1c:e2:b5:45:08:56:cf:61:b6:35:7a:4b: 72:c1:fe:d4:97:2a:6b:b1:c4:7f:eb:80:d2:22:16:15:06:37: 25:07:52:f1:10:d6:9e:60:8d:33:4f:8e:84:cd:cb:2a:80:05: a9:8e:ae:4d:39:d9:5b:e9:65:79:ab:c5:5e:e1:bb:8e:d9:60: 15:51:50:55:af:8b:de:e9:9c:dc:06:1a:10:dc:78:fd:68:72: 0b:95:2f:9a:b0:cf:5e:16:9a:95:af:28:14:e3:cf:36:a0:9a: 0a:30:83:b9:42:f1:fe:cd:ce:89:b2:74:c0:46:0f:69:4f:8b: 93:21:b8:cc:0a:66:88:f2:4f:83:71:c3:2f:8d:15:b5:30:61: e4:e8:a9:af:0c:d7:b8:0e:bb:fc:3c:85:38:1e:61:9a:99:d1: 1f:5f:83:2e:38:f8:d7:e6:d6:1b:cd:e6:14:8b:ee:44:84:2d: d8:0e:2e:46:b9:39:6e:8d:d9:9b:f9:5d:f3:20:78:5c:c0:f5: 49:81:cc:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokR75J9Q5bBxGHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk OTliMGNlYjctOGUzZS00NTc3LTkzMDEtZmVhZTU2OTdjNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcW1GQrPNm6bfT7xAF64TEQSudLfxEoTKihE ONcM+bZntlFdIGQtgyQ7rGqoX3Pz4fHPoA7lFN3zQeouHRM93kJkyv5dKpvgZ5Zo 6xuObh8RRYX9gi2WfrGWeBDwp67XAVruT16hKm4gA7NSOgUOHldMU2Rk9Ht604b6 Kl4+AXt4R3QY2lo2d20Q+zdcUa6rqZQtik4BAIfI9gYVIA0g7HQTRwspF+SYcWAq +L9qoku+u4zLAQtDtlI1/NguyPCT/5L5ffaZcHrxCXKccKGpMId7UTw0z22rD9Ai sf2wxu9NZlX5LAkJOHdBhVqujhkTmCoJxEyXoh88LZEeDYAGaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC88XjtuYcB3rvWBjnHCKl49KjdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvMmU1YzgzYzAtZWQ2Yy0z MDk0LWFmNzItNDM1Y2U1YWI5NzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKas6ZyC5H003ClSpNKrRvB8RuoysyTSNGSIfMpOmMzmWXncKK+Gn0BB ByBrK0K2XXjC8c/SHoJOghfPLBzitUUIVs9htjV6S3LB/tSXKmuxxH/rgNIiFhUG NyUHUvEQ1p5gjTNPjoTNyyqABamOrk052VvpZXmrxV7hu47ZYBVRUFWvi97pnNwG GhDceP1ocguVL5qwz14WmpWvKBTjzzagmgowg7lC8f7NzomydMBGD2lPi5MhuMwK ZojyT4Nxwy+NFbUwYeToqa8M17gOu/w8hTgeYZqZ0R9fgy44+Nfm1hvN5hSL7kSE LdgOLka5OW6N2Zv5XfMgeFzA9UmBzPk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:24 2025 by rpki-client