$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/a256bc28-406c-348a-b5e4-37065a655b4a.roa File: a256bc28-406c-348a-b5e4-37065a655b4a.roa (raw, json) Hash identifier: FYh3oTMhVR7vUsrpv8daMYXbzc0I7fFi5PTHB7C646E= Subject key identifier: 50:1B:82:9C:49:AA:ED:01:BA:E1:16:A8:52:BA:10:CC:24:4E:27:52 Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F4328584D2A74F8868EA4A94DAFAD63C0 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/a256bc28-406c-348a-b5e4-37065a655b4a.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 54478 IP address blocks: 170.88.84.0/23 maxlen: 23 170.88.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f8:86:8e:a4:a9:4d:af:ad:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=a9e6e5b8-3380-43ef-b473-3f247d4d5e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:12:06:a3:3c:aa:93:ef:22:cf:ad:90:fe:f3: b6:54:ee:8e:9e:88:8c:67:13:4e:0e:0c:0f:09:15: 48:24:a8:6e:dc:3f:4e:14:2a:a4:ee:7c:61:b9:67: 98:19:48:69:53:8a:59:8e:9a:42:cc:f9:67:49:07: 68:d2:09:a3:b5:d0:8f:f0:12:63:08:63:a7:07:cb: c9:19:73:4c:ee:e4:1a:12:6c:0e:eb:98:20:fb:78: 15:cb:42:6a:30:7d:f5:ea:e7:f1:b8:c5:d6:53:54: 37:2f:c6:0e:4f:8e:9f:40:a0:17:4a:13:e5:32:f8: 74:16:73:80:7f:21:11:62:db:bf:c6:b9:6d:39:23: 3c:1c:c8:6e:2c:1a:db:2d:3a:ae:3c:65:1a:cf:be: 32:dc:6f:02:79:fb:a3:e0:08:fc:7b:ab:c0:99:71: 84:fc:49:78:d9:bb:ed:db:48:96:21:98:72:cf:46: 66:e2:13:17:3f:3b:32:af:26:09:ec:c1:6f:34:56: 54:d9:97:f6:7d:3d:f7:89:75:28:f4:49:44:48:65: f6:1a:32:24:b7:83:49:cf:1c:7a:bb:cc:eb:e1:dd: dd:1d:8f:db:97:43:f7:2a:0b:39:e0:c5:af:10:46: c0:79:fd:bc:6b:9c:1d:3c:56:da:b2:69:13:7f:a4: ad:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1B:82:9C:49:AA:ED:01:BA:E1:16:A8:52:BA:10:CC:24:4E:27:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/a256bc28-406c-348a-b5e4-37065a655b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:9b:13:f1:33:d7:af:7f:a0:d0:43:7c:90:c8:4e:5a:28:36: c7:e0:97:f0:fa:20:3c:52:35:c2:32:2c:47:88:36:f5:1a:30: d8:0f:b9:4e:3f:06:9b:21:aa:e2:d3:56:5d:31:14:00:9f:d8: ee:98:b8:6a:17:4f:7c:36:71:1e:67:20:ea:e3:7f:c6:49:b6: a6:8d:1f:4e:d1:09:1b:6e:d4:55:63:2c:c6:2d:9d:35:d4:bc: a1:19:f8:33:94:9f:b8:69:d2:ab:08:a4:66:2c:c3:ed:7b:56: a3:b6:ea:be:2e:9c:28:d8:4b:77:66:f5:ca:01:94:31:e9:3d: e0:6b:8a:38:8d:7c:50:50:ac:5f:ad:45:d5:47:7b:39:81:28: 2b:7e:88:fc:3c:a2:c4:2c:13:4c:e4:20:2a:aa:2c:21:2a:be: 6e:f8:6c:bd:0c:00:00:76:bd:e6:ac:61:a5:29:11:2b:6e:29: 0f:6c:07:ad:66:8d:b8:97:ea:dc:1b:e4:a5:36:2f:38:28:87: ac:77:ca:86:9e:12:1e:b4:84:b9:64:93:ad:ba:97:9e:9f:90: 40:c0:44:96:2a:df:94:e4:f3:eb:34:17:0e:44:cf:67:7b:28: 0b:ce:22:ed:b9:5a:fe:fd:df:4f:e6:79:6c:b8:f9:77:7d:18: 5d:5a:8a:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPiGjqSpTa+tY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YTllNmU1YjgtMzM4MC00M2VmLWI0NzMtM2YyNDdkNGQ1ZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hIGozyqk+8iz62Q/vO2VO6OnoiMZxNODgwP CRVIJKhu3D9OFCqk7nxhuWeYGUhpU4pZjppCzPlnSQdo0gmjtdCP8BJjCGOnB8vJ GXNM7uQaEmwO65gg+3gVy0JqMH316ufxuMXWU1Q3L8YOT46fQKAXShPlMvh0FnOA fyERYtu/xrltOSM8HMhuLBrbLTquPGUaz74y3G8Cefuj4Aj8e6vAmXGE/El42bvt 20iWIZhyz0Zm4hMXPzsyryYJ7MFvNFZU2Zf2fT33iXUo9ElESGX2GjIkt4NJzxx6 u8zr4d3dHY/bl0P3Kgs54MWvEEbAef28a5wdPFbasmkTf6StOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAbgpxJqu0BuuEWqFK6EMwkTidSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvYTI1NmJjMjgtNDA2Yy0z NDhhLWI1ZTQtMzcwNjVhNjU1YjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlhUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCbE/Ez169/oNBDfJDITlooNsfgl/D6IDxSNcIyLEeINvUaMNgPuU4/ BpshquLTVl0xFACf2O6YuGoXT3w2cR5nIOrjf8ZJtqaNH07RCRtu1FVjLMYtnTXU vKEZ+DOUn7hp0qsIpGYsw+17VqO26r4unCjYS3dm9coBlDHpPeBrijiNfFBQrF+t RdVHezmBKCt+iPw8osQsE0zkICqqLCEqvm74bL0MAAB2veasYaUpEStuKQ9sB61m jbiX6twb5KU2Lzgoh6x3yoaeEh60hLlkk626l56fkEDARJYq35Tk8+s0Fw5Ez2d7 KAvOIu25Wv7930/meWy4+Xd9GF1aigk= -----END CERTIFICATE-----Generated at Sat Mar 21 20:15:31 2026 by rpki-client