$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa File: ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa (raw, json) Hash identifier: /4tJkL66n5n2fJkTkyU6Rg12RdVCFGACHeCoYan7y64= Subject key identifier: 23:54:36:A8:3A:1F:2E:CD:F0:31:9C:9A:53:E7:EA:24:9C:3D:41:5E Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584AEE268044BFF0D7AA7FBE8E80 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 85.113.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:80:44:bf:f0:d7:aa:7f:be:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=e339c773-53ad-42b9-b885-65cac5a67c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fd:2f:20:f4:99:f0:67:27:c0:53:43:04:8c: 9d:cb:f5:b9:a3:62:42:4c:8b:54:26:d5:20:da:38: 36:ff:1b:9d:d8:b3:a8:af:bf:9a:68:c5:37:de:2b: 71:b7:df:5b:3a:af:5c:ec:98:e6:d5:ee:f3:6e:52: 9f:68:64:16:50:5a:83:6c:03:55:29:db:03:eb:5e: db:a5:46:a3:2a:95:69:f7:7c:81:08:b3:f9:d2:1b: 22:53:8d:be:bc:45:fa:2b:ce:8f:e5:fe:2d:0e:90: af:a5:90:a2:45:3d:0b:60:de:ed:45:0c:ec:5e:4f: 99:48:6f:b5:b1:02:d9:d5:82:7e:ae:1d:bb:ac:17: d1:6a:bd:42:11:ac:77:8f:16:20:8a:df:fd:c8:b4: 15:68:69:8f:14:a4:d5:e6:1e:e0:da:88:9e:94:15: 44:36:a9:44:76:d0:6a:7a:c2:1f:88:c1:dc:68:3e: 58:a2:a9:b0:62:e7:76:09:d7:1f:5a:94:d3:a0:c0: d8:b4:ef:bc:1a:11:bc:0f:04:78:c1:4a:75:a9:9c: 4e:18:86:51:f1:fb:3d:20:c1:01:cb:fd:45:0d:b3: 94:34:5f:15:06:d6:17:c7:e2:6d:fe:28:95:6d:42: 04:50:7b:cc:8b:d7:b8:e9:4c:de:8c:c8:62:7e:23: f8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:54:36:A8:3A:1F:2E:CD:F0:31:9C:9A:53:E7:EA:24:9C:3D:41:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ca0e795f-409c-3995-9f6d-b873a4aec2e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 85.113.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b3:24:a4:d1:bc:75:da:cf:72:0d:a0:6a:61:c8:c2:60:21: 53:8d:0c:37:84:21:3a:ff:b7:8a:27:39:64:68:ee:83:61:94: 6d:e6:88:86:24:06:e1:00:52:66:9d:6c:74:0e:74:df:f7:d5: 99:b7:d7:55:21:e6:76:91:a8:c2:ca:5b:ad:97:3a:66:1c:4c: fb:8a:82:7d:af:30:fc:de:b9:73:00:11:4c:00:7e:23:2b:d5: 9b:4c:81:89:f6:6b:ee:e7:89:df:80:27:3f:14:6b:e7:ce:3d: 32:d1:58:c8:b5:b7:03:89:b5:de:0a:d0:00:86:f0:e7:1f:c9: 7c:17:35:11:fd:2c:08:c3:7e:5c:aa:cb:fb:53:a7:4d:39:25: 1b:31:38:99:4a:5b:a2:b2:90:68:ce:40:2d:a9:2c:0d:cf:31: c5:30:96:1a:44:8f:6d:8c:30:86:b0:3b:d7:31:8d:a5:9d:ff: 2b:b0:bc:eb:ae:aa:5e:7b:4b:f7:c2:23:a7:e0:77:07:bf:9d: 88:e1:be:a3:5b:fb:e2:d9:42:32:3a:d1:da:c2:4b:68:24:08: a2:ce:fe:e1:32:0f:c0:a4:fd:fc:b1:a8:62:98:c8:82:31:b8: 09:dc:05:57:b9:34:40:3c:98:77:90:fd:d7:6e:77:59:28:bb: 05:f6:f6:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoBEv/DXqn++joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTMzOWM3NzMtNTNhZC00MmI5LWI4ODUtNjVjYWM1YTY3YzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif0vIPSZ8GcnwFNDBIydy/W5o2JCTItUJtUg 2jg2/xud2LOor7+aaMU33itxt99bOq9c7Jjm1e7zblKfaGQWUFqDbANVKdsD617b pUajKpVp93yBCLP50hsiU42+vEX6K86P5f4tDpCvpZCiRT0LYN7tRQzsXk+ZSG+1 sQLZ1YJ+rh27rBfRar1CEax3jxYgit/9yLQVaGmPFKTV5h7g2oielBVENqlEdtBq esIfiMHcaD5YoqmwYud2CdcfWpTToMDYtO+8GhG8DwR4wUp1qZxOGIZR8fs9IMEB y/1FDbOUNF8VBtYXx+Jt/iiVbUIEUHvMi9e46UzejMhifiP41wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNUNqg6Hy7N8DGcmlPn6iScPUFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvY2EwZTc5NWYtNDA5Yy0z OTk1LTlmNmQtYjg3M2E0YWVjMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWzJKTRvHXaz3INoGphyMJgIVONDDeEITr/t4onOWRo7oNhlG3miIYk BuEAUmadbHQOdN/31Zm311Uh5naRqMLKW62XOmYcTPuKgn2vMPzeuXMAEUwAfiMr 1ZtMgYn2a+7nid+AJz8Ua+fOPTLRWMi1twOJtd4K0ACG8OcfyXwXNRH9LAjDflyq y/tTp005JRsxOJlKW6KykGjOQC2pLA3PMcUwlhpEj22MMIawO9cxjaWd/yuwvOuu ql57S/fCI6fgdwe/nYjhvqNb++LZQjI60drCS2gkCKLO/uEyD8Ck/fyxqGKYyIIx uAncBVe5NEA8mHeQ/ddud1kouwX29iA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:10:36 2025 by rpki-client