$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ac545d8c-567f-3bd2-9de4-897132765b2a.roa File: ac545d8c-567f-3bd2-9de4-897132765b2a.roa (raw, json) Hash identifier: TDqhwV9FzrpKApIMciJVbKSQQ+seIBRH3ElOE7vnq+o= Subject key identifier: FA:EB:8D:5F:74:40:40:D3:C3:C4:16:CA:2C:17:16:DE:C8:F6:90:15 Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Certificate serial: 010D0C9F4328584BBA104B477356209483DECC80 Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ac545d8c-567f-3bd2-9de4-897132765b2a.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 22135 IP address blocks: 173.242.8.0/24 maxlen: 24 173.242.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:4b:47:73:56:20:94:83:de:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=ea1ef31e-f805-46eb-8777-bdf8143ee99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7d:87:f3:f5:40:84:58:fc:ba:d0:8a:01:86: 17:fc:cc:a0:b2:1f:6d:9a:59:b8:04:c7:a0:72:2a: 85:a0:71:78:ef:b1:fb:a4:e5:f4:26:1d:73:05:a7: bf:0c:c2:4b:10:f0:20:04:4e:6c:58:cd:40:a3:27: 70:20:ea:ae:b1:4e:98:af:79:d9:14:de:29:71:f4: 7e:cc:e0:15:6b:4a:f9:3d:87:2d:b6:f6:0a:ee:69: ee:6a:d4:84:8a:af:7a:eb:24:82:8a:5d:31:00:97: 0a:bf:8a:ad:3a:a4:aa:73:21:c8:46:4d:eb:3b:27: 2f:b7:f7:10:f2:e9:8e:8f:de:bb:8f:13:fa:43:61: 3f:cc:2f:44:8b:18:4c:c6:e6:84:6c:20:26:d7:0e: c9:8d:db:d0:1c:53:40:03:8a:50:05:c8:88:8f:38: 31:f9:94:ed:8e:72:02:26:f5:4b:4d:5a:9a:1e:3e: 17:70:d5:b0:b7:75:de:49:95:13:5d:ac:79:b9:45: e3:80:1c:c7:3a:ce:49:7f:88:ab:f1:2f:5a:20:4a: eb:89:50:ff:26:32:86:12:5c:f7:35:1a:30:3c:73: c6:bd:b4:dd:49:f8:13:06:e8:c0:e4:60:c2:b4:3f: df:c0:28:bc:73:a2:ef:30:73:3e:79:67:b0:32:1d: cd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EB:8D:5F:74:40:40:D3:C3:C4:16:CA:2C:17:16:DE:C8:F6:90:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/ac545d8c-567f-3bd2-9de4-897132765b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl X509v3 Authority Key Identifier: keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer sbgp-ipAddrBlock: critical IPv4: 173.242.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d7:75:ef:ec:16:a6:15:5a:7e:89:db:7f:8f:99:3c:d8:4d: fe:d3:0e:2c:7f:8b:fc:6e:8c:63:a2:05:4d:50:60:a9:30:f4: 6e:e8:d5:dd:fa:28:90:8d:6b:d4:0d:fb:f9:16:82:95:b9:74: 1c:31:87:ad:02:90:77:0f:7a:6d:db:64:16:5d:a5:0c:c2:99: 8f:2b:77:89:6a:b2:4a:09:3d:21:50:e2:ad:79:46:d8:18:25: 89:b5:43:59:94:69:4a:21:bc:d3:6d:f8:1a:40:03:05:e8:cb: ea:46:be:74:5f:41:e8:4e:87:9b:52:ed:34:54:ac:c8:d8:59: 07:a4:42:e1:52:d2:90:dc:60:8f:24:10:a9:21:11:9b:42:ae: af:35:82:fc:54:14:b1:7f:99:ab:8b:bf:93:40:55:a8:1f:48: 42:85:e0:62:ad:c0:31:15:83:c6:ea:5f:a2:14:a5:19:e4:5b: a6:3f:60:04:eb:fe:a2:8b:36:80:56:64:6a:e1:68:84:17:b0: 1a:e6:f7:44:3e:67:7f:cc:2c:dd:db:3b:58:28:f5:7d:f2:6d: e1:87:1d:bf:c5:c3:b8:31:92:8a:ea:5c:21:71:0b:4e:87:b6: 64:ff:52:bf:ae:2b:1a:31:85:a1:85:c2:5f:ff:09:06:8c:38: ad:00:0a:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEtHc1YglIPezIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5NDk5YTctZGQ3My00ZDI4LWIzYWQtMjgxM2UxNDIx YzY0MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk ZWExZWYzMWUtZjgwNS00NmViLTg3NzctYmRmODE0M2VlOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr32H8/VAhFj8utCKAYYX/Mygsh9tmlm4BMeg ciqFoHF477H7pOX0Jh1zBae/DMJLEPAgBE5sWM1AoydwIOqusU6Yr3nZFN4pcfR+ zOAVa0r5PYcttvYK7mnuatSEiq966ySCil0xAJcKv4qtOqSqcyHIRk3rOycvt/cQ 8umOj967jxP6Q2E/zC9EixhMxuaEbCAm1w7JjdvQHFNAA4pQBciIjzgx+ZTtjnIC JvVLTVqaHj4XcNWwt3XeSZUTXax5uUXjgBzHOs5Jf4ir8S9aIErriVD/JjKGElz3 NRowPHPGvbTdSfgTBujA5GDCtD/fwCi8c6LvMHM+eWewMh3NAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrrjV90QEDTw8QWyiwXFt7I9pAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDk0 OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0MjFjNjQvYWM1NDVkOGMtNTY3Zi0z YmQyLTlkZTQtODk3MTMyNzY1YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ5NDk5YTctZGQ3My00ZDI4LWIz YWQtMjgxM2UxNDIxYzY0LzVkOTQ5OWE3LWRkNzMtNGQyOC1iM2FkLTI4MTNlMTQy MWM2NC5jcmwwHwYDVR0jBBgwFoAUButBQNUQLNt8DYziewcWWtswkqkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEz ZTE0MjFjNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrfIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjXde/sFqYVWn6J23+PmTzYTf7TDix/i/xujGOiBU1QYKkw9G7o1d36 KJCNa9QN+/kWgpW5dBwxh60CkHcPem3bZBZdpQzCmY8rd4lqskoJPSFQ4q15RtgY JYm1Q1mUaUohvNNt+BpAAwXoy+pGvnRfQehOh5tS7TRUrMjYWQekQuFS0pDcYI8k EKkhEZtCrq81gvxUFLF/mauLv5NAVagfSEKF4GKtwDEVg8bqX6IUpRnkW6Y/YATr /qKLNoBWZGrhaIQXsBrm90Q+Z3/MLN3bO1go9X3ybeGHHb/Fw7gxkorqXCFxC06H tmT/Ur+uKxoxhaGFwl//CQaMOK0ACrQ= -----END CERTIFICATE-----Generated at Mon Nov 3 08:58:01 2025 by rpki-client