$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa File: 2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa (raw, json) Hash identifier: bAFz3zbqy+H2aL54RthKAdwf/DR18WJfBOBKAjw2Znw= Subject key identifier: 48:A7:B5:75:13:19:19:55:CD:B8:25:1B:02:E7:F4:69:53:80:0A:7A Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584A612B0EE8C2DD4B79801AF200 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 8075 IP address blocks: 170.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:0e:e8:c2:dd:4b:79:80:1a:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=8ce0f16b-760f-494f-935a-1afa0e89b683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:ce:f9:0f:65:89:21:2c:a4:3d:f5:9c:e7: 7d:56:28:5b:00:57:1d:49:0e:44:6f:0f:6c:88:fe: b1:8d:84:91:6e:a4:4c:93:66:2a:21:20:79:10:f0: e7:c3:8a:45:7a:e1:7a:2d:68:9c:cc:6a:a9:ea:16: b8:17:30:8a:64:24:27:47:95:da:31:92:20:6f:74: 4c:cc:f9:20:ac:ae:50:37:99:91:0a:f0:84:a7:5e: 72:d1:d7:72:f4:04:60:48:49:a4:92:f3:06:0f:d5: 69:f2:9f:1e:3e:bf:1a:4d:19:86:62:63:48:dd:5d: 0b:40:10:b1:ba:d5:d4:83:66:b3:8e:6f:12:4d:74: d4:94:43:cf:b1:b5:a3:a9:f9:be:3a:7c:4d:50:a4: f1:20:88:e8:8a:ed:ba:1d:01:06:f8:c2:e1:1b:23: 6b:86:8d:3a:af:0f:4e:62:a1:04:4c:09:f1:fa:4e: dd:9a:4b:c9:9f:78:70:d1:81:51:d2:1d:44:04:0b: c4:75:40:dd:2a:a6:97:b0:05:36:41:7e:80:81:06: 13:ec:ea:92:7a:b5:e7:6e:3a:97:85:e1:08:e4:58: a0:49:ab:9f:06:46:40:6f:21:d0:c7:d8:61:5d:c8: 54:9a:d2:07:3e:07:bf:79:b9:64:a4:2f:8a:4a:c5: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A7:B5:75:13:19:19:55:CD:B8:25:1B:02:E7:F4:69:53:80:0A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/2eb74f13-24dd-32a8-8c5d-9d1f53478499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:7d:d2:6d:b6:cf:15:cc:7e:b4:d9:95:0c:5b:1b:53:77:fc: 62:91:44:65:84:bd:ed:0e:1c:1b:b8:76:73:e5:19:a5:53:c9: 72:17:9a:33:2d:84:3b:6d:42:bb:0b:97:fe:07:61:e1:9d:fd: cc:7d:d5:dc:c1:fc:5d:f9:b8:87:a2:78:2b:4b:6a:f5:5f:1e: 1f:37:8c:3b:63:6a:2f:6d:42:6c:45:88:53:99:48:59:78:ab: ed:8e:6c:9a:65:52:68:a9:95:23:ca:96:84:ab:d7:72:68:74: 6c:82:15:5e:e7:9f:3a:14:7f:41:0c:dd:8b:d1:59:d9:8c:40: 29:ce:40:b2:58:9e:36:ac:65:8d:93:28:f7:47:c0:d0:13:af: 92:63:a3:c9:d7:7d:ac:3b:62:8d:08:ab:8b:38:80:40:84:9f: 62:04:16:72:bc:44:44:d9:02:5c:df:a9:02:3e:43:d9:97:6c: 0b:0b:d4:9f:6a:5c:a7:e8:28:6a:17:10:ac:87:11:99:4e:c4: f4:92:87:e2:f9:10:7a:ea:b1:8f:4c:d6:fe:0b:06:b1:d0:e8: de:81:eb:81:aa:29:7e:18:c6:12:40:9c:49:9a:1f:f4:18:ac: 7b:f4:c3:20:e5:4e:bf:4f:e2:62:ea:7b:58:09:a8:46:79:b6: 15:4d:fd:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKw7owt1LeYAa8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk OGNlMGYxNmItNzYwZi00OTRmLTkzNWEtMWFmYTBlODliNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBbO+Q9liSEspD31nOd9VihbAFcdSQ5Ebw9s iP6xjYSRbqRMk2YqISB5EPDnw4pFeuF6LWiczGqp6ha4FzCKZCQnR5XaMZIgb3RM zPkgrK5QN5mRCvCEp15y0ddy9ARgSEmkkvMGD9Vp8p8ePr8aTRmGYmNI3V0LQBCx utXUg2azjm8STXTUlEPPsbWjqfm+OnxNUKTxIIjoiu26HQEG+MLhGyNrho06rw9O YqEETAnx+k7dmkvJn3hw0YFR0h1EBAvEdUDdKqaXsAU2QX6AgQYT7OqSerXnbjqX heEI5FigSaufBkZAbyHQx9hhXchUmtIHPge/eblkpC+KSsVhvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEintXUTGRlVzbglGwLn9GlTgAp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvMmViNzRmMTMtMjRkZC0z MmE4LThjNWQtOWQxZjUzNDc4NDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl90m22zxXMfrTZlQxbG1N3/GKRRGWEve0OHBu4dnPlGaVTyXIXmjMt hDttQrsLl/4HYeGd/cx91dzB/F35uIeieCtLavVfHh83jDtjai9tQmxFiFOZSFl4 q+2ObJplUmiplSPKloSr13JodGyCFV7nnzoUf0EM3YvRWdmMQCnOQLJYnjasZY2T KPdHwNATr5Jjo8nXfaw7Yo0Iq4s4gECEn2IEFnK8RETZAlzfqQI+Q9mXbAsL1J9q XKfoKGoXEKyHEZlOxPSSh+L5EHrqsY9M1v4LBrHQ6N6B64GqKX4YxhJAnEmaH/QY rHv0wyDlTr9P4mLqe1gJqEZ5thVN/Ro= -----END CERTIFICATE-----Generated at Fri Jul 11 04:45:44 2025 by rpki-client