$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/6585343a-f4b9-3ec1-89e9-7b7770469b30.roa File: 6585343a-f4b9-3ec1-89e9-7b7770469b30.roa (raw, json) Hash identifier: U1TSUMIUozMBkcqxHD+EmzI5ubGI543IgZ3VCEwOCc4= Subject key identifier: 2D:CD:93:E7:7F:B9:63:11:30:6B:CD:3B:97:A5:5F:44:0D:E0:02:4A Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584EEA878B3DC8E8E52037780D00 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/6585343a-f4b9-3ec1-89e9-7b7770469b30.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 54478 IP address blocks: 170.88.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:8b:3d:c8:e8:e5:20:37:78:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=83bb305f-b612-41fa-901d-5c0e7060e958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:d0:fe:c7:23:2e:60:6b:95:7b:8a:a1:72: 24:9f:58:51:9e:78:82:8b:b5:ad:89:46:79:0f:bd: df:db:e9:dc:c5:8a:71:36:44:3e:23:31:d4:a0:c5: 28:7d:7e:a1:1c:cc:b2:95:42:df:d7:ad:ec:8d:f5: 12:93:61:0e:9b:9d:0a:e3:1a:e6:96:38:fc:bd:51: 88:bb:bc:98:4d:4f:d8:e9:95:23:63:cc:cc:94:73: c2:10:ec:40:cb:fc:07:35:fd:05:b7:41:ae:28:61: 1e:93:b7:ad:ce:7c:22:72:4f:b3:3e:e6:a9:31:15: 06:25:42:ff:98:51:95:1d:bc:c5:dc:90:9c:4b:f1: 25:ed:17:a8:92:32:51:88:d0:5e:f2:9d:39:24:67: df:1d:94:f0:9c:85:f9:c7:2e:c5:b7:45:c6:74:37: 34:c3:c1:30:2a:4c:f7:fa:57:ae:62:77:2e:db:c7: 85:f9:ca:18:38:22:cb:10:70:90:d5:69:fd:97:b0: 26:bd:63:62:05:a7:06:30:71:4b:49:d0:31:47:5a: bd:78:78:7d:0f:3f:f2:a1:df:0a:07:c7:3e:8d:2f: c2:6a:9c:76:02:7b:ce:d2:7d:c2:a7:7d:be:b4:c6: 3b:cd:d3:0d:ba:fa:7f:38:30:ee:d6:30:ac:b7:6f: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:93:E7:7F:B9:63:11:30:6B:CD:3B:97:A5:5F:44:0D:E0:02:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/6585343a-f4b9-3ec1-89e9-7b7770469b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b6:d4:0e:de:fc:36:a6:17:39:65:06:4e:d1:c6:5b:16:3a: 4f:18:82:da:5a:5c:e0:be:00:6d:8b:9b:a7:17:58:ab:f1:a2: ad:87:8b:67:87:c5:ba:e0:d4:59:00:cb:4a:e0:c9:f8:f4:86: 24:91:15:3d:c9:1c:ce:a1:75:ee:61:0f:d5:39:9c:0d:49:8a: 3e:4f:cd:79:40:7e:fc:c8:35:b8:1f:ec:89:d4:cf:ef:ed:4f: 21:a7:e7:ce:7b:ec:30:2a:d3:08:9e:eb:3b:75:2e:67:78:16: 3b:b9:6c:4c:dc:d8:0a:35:3c:0a:73:2c:3c:73:60:81:55:28: 3b:f0:4b:1c:7b:6c:c2:70:4e:66:5a:31:83:bd:a5:2d:9e:37: 72:c1:04:2e:6a:13:50:95:42:97:d6:8c:ee:81:21:2b:63:90: 7d:5e:1c:91:38:6f:4d:4c:18:95:90:76:d0:e8:13:ca:7a:24: d0:3d:f7:59:0a:13:92:b8:69:d7:4d:94:84:87:80:38:7c:a4: 4d:d3:9b:64:57:b6:30:ad:06:57:c5:74:ec:bd:b4:af:18:15: 3d:39:9a:2f:7e:e8:85:d3:55:0a:0b:da:f9:90:d3:d0:36:3d: a0:df:2c:c6:08:0c:ff:92:64:57:6e:30:ff:ce:f3:e4:89:70: d0:b5:19:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4s9yOjlIDd4DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ODNiYjMwNWYtYjYxMi00MWZhLTkwMWQtNWMwZTcwNjBlOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1HQ/scjLmBrlXuKoXIkn1hRnniCi7WtiUZ5 D73f2+ncxYpxNkQ+IzHUoMUofX6hHMyylULf163sjfUSk2EOm50K4xrmljj8vVGI u7yYTU/Y6ZUjY8zMlHPCEOxAy/wHNf0Ft0GuKGEek7etznwick+zPuapMRUGJUL/ mFGVHbzF3JCcS/El7ReokjJRiNBe8p05JGffHZTwnIX5xy7Ft0XGdDc0w8EwKkz3 +leuYncu28eF+coYOCLLEHCQ1Wn9l7AmvWNiBacGMHFLSdAxR1q9eHh9Dz/yod8K B8c+jS/Capx2AnvO0n3Cp32+tMY7zdMNuvp/ODDu1jCst2+3pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3Nk+d/uWMRMGvNO5elX0QN4AJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvNjU4NTM0M2EtZjRiOS0z ZWMxLTg5ZTktN2I3NzcwNDY5YjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS21A7e/DamFzllBk7RxlsWOk8YgtpaXOC+AG2Lm6cXWKvxoq2Hi2eH xbrg1FkAy0rgyfj0hiSRFT3JHM6hde5hD9U5nA1Jij5PzXlAfvzINbgf7InUz+/t TyGn58577DAq0wie6zt1Lmd4Fju5bEzc2Ao1PApzLDxzYIFVKDvwSxx7bMJwTmZa MYO9pS2eN3LBBC5qE1CVQpfWjO6BIStjkH1eHJE4b01MGJWQdtDoE8p6JNA991kK E5K4addNlISHgDh8pE3Tm2RXtjCtBlfFdOy9tK8YFT05mi9+6IXTVQoL2vmQ09A2 PaDfLMYIDP+SZFduMP/O8+SJcNC1GTQ= -----END CERTIFICATE-----Generated at Sun Sep 20 03:59:12 2026 by rpki-client