$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/790fc848-d2b2-3618-af2e-754c682b4f44.roa File: 790fc848-d2b2-3618-af2e-754c682b4f44.roa (raw, json) Hash identifier: xo4mG7vD92dgKOZGnaPCcBrxUI/oMEs9+YPJUyOkp60= Subject key identifier: 37:39:27:C3:78:2F:BC:56:55:A3:DC:52:90:60:AE:80:C0:14:4F:6F Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584F4973D19D9FF06E1A1B8BDD00 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/790fc848-d2b2-3618-af2e-754c682b4f44.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 170.88.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d1:9d:9f:f0:6e:1a:1b:8b:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=32381ae1-5a03-43fd-8ab8-20b634222c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:87:ca:09:02:a2:8a:8f:de:c3:37:3e:dc:e0: 5b:53:f0:fe:3d:d2:d8:d0:28:0e:f0:0a:20:2a:9d: 79:9a:85:82:a5:88:58:72:87:94:3d:1d:73:ee:32: 63:02:e3:c0:a3:62:f1:44:b7:16:83:f4:3b:e3:4a: f0:75:3a:de:ca:b7:2e:03:47:55:b0:aa:e8:8c:dd: d1:05:3b:9a:54:ef:1d:6e:67:fa:97:cb:62:fb:51: e5:3d:4d:3b:a9:ee:de:99:97:18:2a:df:10:a4:f2: 2b:b3:dc:5b:c9:85:86:e4:8d:8a:2f:11:c3:b0:be: a6:a7:c7:b1:a4:03:e8:e9:60:d7:86:7b:70:f9:c1: 36:0e:05:07:87:6a:e4:a2:36:7d:47:b4:a3:da:53: c8:78:90:a2:92:1b:5a:a8:00:36:67:0c:11:d8:61: 60:ac:81:17:e5:9f:97:57:b0:69:13:eb:24:9a:e1: b8:62:33:6f:cf:29:ac:27:83:27:75:98:97:80:66: 5d:7c:ab:dd:4e:4e:bc:fa:79:5a:b0:f5:33:fc:96: e4:56:2b:09:c0:27:01:94:5e:06:69:35:2d:eb:a8: ff:f7:7e:c2:f4:78:a5:f9:2e:14:f1:90:6d:dd:6a: df:5d:72:aa:d8:94:71:e6:ed:6f:1f:af:c2:3c:c4: d0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:39:27:C3:78:2F:BC:56:55:A3:DC:52:90:60:AE:80:C0:14:4F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/790fc848-d2b2-3618-af2e-754c682b4f44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:9f:dd:11:41:0e:b3:04:8c:06:77:79:8f:ea:7c:cc:e7:86: af:e2:46:64:d1:dc:95:d9:70:4e:b9:a6:de:bf:90:54:ee:28: 07:2d:e6:ed:77:c9:27:97:4e:4e:11:9e:b8:ba:ae:f0:b1:ce: f6:ef:fa:d9:a6:8f:a4:a8:82:69:e5:24:b7:88:5d:b9:56:f9: 1e:18:93:ec:d4:eb:93:fb:6f:1d:60:b0:fb:97:f1:8f:1d:54: d2:e0:67:1c:51:1f:9d:14:5e:90:bf:2b:42:0b:aa:2b:6b:4a: 67:10:51:99:3d:1a:27:5a:2a:ad:16:c2:10:e9:c5:6e:4b:6f: 22:de:8d:35:22:54:ad:c3:50:5a:b1:b9:72:cd:14:43:b9:62: bd:85:0e:c7:a5:de:8f:46:11:d3:19:bb:25:d3:37:8a:f8:96: 7d:78:7d:e6:cb:e7:26:6e:8e:49:85:b4:d7:fe:03:42:9b:bc: 8a:b7:cb:00:10:c7:1e:d9:83:9f:e4:61:1b:16:c7:13:21:2c: 43:dd:98:ac:15:b3:5e:ab:b8:35:38:11:42:f2:e8:7b:d1:6f: a0:d5:67:c6:d9:56:2d:9a:b8:08:6a:72:b8:fd:99:d8:d5:f0: f2:c5:7a:d3:cb:fa:7e:2c:ad:fc:7f:0e:5e:df:ed:38:e5:27: d3:61:2b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9Gdn/BuGhuL3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzIzODFhZTEtNWEwMy00M2ZkLThhYjgtMjBiNjM0MjIyYzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4fKCQKiio/ewzc+3OBbU/D+PdLY0CgO8Aog Kp15moWCpYhYcoeUPR1z7jJjAuPAo2LxRLcWg/Q740rwdTreyrcuA0dVsKrojN3R BTuaVO8dbmf6l8ti+1HlPU07qe7emZcYKt8QpPIrs9xbyYWG5I2KLxHDsL6mp8ex pAPo6WDXhntw+cE2DgUHh2rkojZ9R7Sj2lPIeJCikhtaqAA2ZwwR2GFgrIEX5Z+X V7BpE+skmuG4YjNvzymsJ4MndZiXgGZdfKvdTk68+nlasPUz/JbkVisJwCcBlF4G aTUt66j/937C9Hil+S4U8ZBt3WrfXXKq2JRx5u1vH6/CPMTQqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDc5J8N4L7xWVaPcUpBgroDAFE9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvNzkwZmM4NDgtZDJiMi0z NjE4LWFmMmUtNzU0YzY4MmI0ZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGf3RFBDrMEjAZ3eY/qfMznhq/iRmTR3JXZcE65pt6/kFTuKAct5u13 ySeXTk4Rnri6rvCxzvbv+tmmj6SogmnlJLeIXblW+R4Yk+zU65P7bx1gsPuX8Y8d VNLgZxxRH50UXpC/K0ILqitrSmcQUZk9GidaKq0WwhDpxW5LbyLejTUiVK3DUFqx uXLNFEO5Yr2FDsel3o9GEdMZuyXTN4r4ln14febL5yZujkmFtNf+A0KbvIq3ywAQ xx7Zg5/kYRsWxxMhLEPdmKwVs16ruDU4EULy6HvRb6DVZ8bZVi2auAhqcrj9mdjV 8PLFetPL+n4srfx/Dl7f7TjlJ9NhK8s= -----END CERTIFICATE-----Generated at Mon Oct 26 02:26:07 2026 by rpki-client