$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/acef1045-5c20-3085-9679-52cad1b530a5.roa File: acef1045-5c20-3085-9679-52cad1b530a5.roa (raw, json) Hash identifier: PoCCwHGNwT030WA4K/fTd33v3xMzB1GFKeFHs1QJsjM= Subject key identifier: 8D:07:6B:B0:62:77:BC:B5:B5:FC:AD:E3:73:EA:B0:8F:55:EE:C4:43 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D01A0330F2BF81D1E1210 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/acef1045-5c20-3085-9679-52cad1b530a5.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 170.85.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:01:a0:33:0f:2b:f8:1d:1e:12:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=88fbe8b8-7b40-4b27-bc39-8ed6d161343b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ad:84:a5:77:d6:43:f7:c6:6e:49:46:a1:a1: 69:05:76:f7:14:55:61:ea:02:17:4e:a4:85:e2:66: b4:d3:ad:c9:c7:b1:49:58:0b:47:a8:8d:82:de:ba: a3:59:1f:53:12:5b:34:39:78:80:ed:cc:e2:bc:56: bb:54:14:93:8a:61:db:0e:17:20:5c:bb:b8:b1:d0: bc:af:8e:19:d8:31:9c:be:ea:dc:76:43:ad:95:67: d9:aa:ce:a3:24:81:ba:4f:ed:da:dc:34:85:24:9e: 8c:d3:07:c3:80:f6:f6:53:55:29:49:3b:78:07:bd: 31:ef:a3:35:03:7e:a9:d7:ed:7f:ba:9c:b7:b3:96: e0:34:af:fc:00:86:c1:a9:80:37:90:46:8b:f3:eb: 59:15:b7:63:ae:24:dd:c9:5b:5d:d6:58:c9:e9:b3: aa:c1:a1:07:e6:ea:78:b7:29:5c:ca:cf:13:0b:5f: d5:2e:68:f0:46:54:f8:18:48:7c:dc:89:75:a8:c2: 21:8b:10:8f:e1:af:03:e5:f1:69:cf:94:fb:93:c6: be:0f:da:09:b7:3e:37:cd:93:cf:13:37:2e:8b:11: f0:fc:41:1a:a5:4e:7d:26:7e:1a:d3:e0:2c:7d:12: f6:30:67:2b:33:0c:16:c8:5a:f9:f1:28:33:5a:af: d5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:07:6B:B0:62:77:BC:B5:B5:FC:AD:E3:73:EA:B0:8F:55:EE:C4:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/acef1045-5c20-3085-9679-52cad1b530a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4e:92:b2:f2:a9:91:22:2e:36:ed:aa:f0:c0:72:f4:2c:27: b8:9f:be:17:f2:0b:88:c6:9e:5d:1d:59:f6:3b:22:07:cb:74: 82:5b:7d:f9:59:73:63:9a:19:94:98:f0:e6:0b:85:1b:c4:00: 91:99:dc:c1:76:23:83:76:72:c3:69:c4:e9:b3:fa:67:cb:a8: f2:73:ad:99:cd:86:d3:29:c2:d8:d3:24:4c:d9:09:fa:15:2d: a5:e4:5a:1e:be:7b:55:fb:eb:47:15:eb:0c:31:9f:6e:6c:48: e2:8b:95:c4:ba:47:0a:1d:a9:c4:50:c0:32:b6:6c:2e:f4:38: 49:fe:17:93:29:27:64:30:7f:0c:f7:62:da:2b:61:52:14:f0: 5c:57:de:37:cd:58:fd:27:19:5e:46:24:a4:5b:bb:af:d4:a7: bc:0b:96:7c:47:93:c0:a5:08:61:20:fe:6a:83:d7:7e:57:cd: de:f4:22:06:eb:99:65:96:0a:b7:27:9d:a1:d1:40:0c:8a:f1: 55:ae:7f:6b:e1:cd:41:53:b1:a6:38:80:1b:18:79:09:33:89: 91:fb:56:b7:dd:e2:1f:3d:f2:2e:23:55:9e:7b:5e:d7:72:a1: 35:fe:ed:24:b2:f4:11:79:5c:ba:fd:73:46:ce:d5:65:f0:6d: b1:df:0c:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQGgMw8r+B0eEhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ODhmYmU4YjgtN2I0MC00YjI3LWJjMzktOGVkNmQxNjEzNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq2EpXfWQ/fGbklGoaFpBXb3FFVh6gIXTqSF 4ma0063Jx7FJWAtHqI2C3rqjWR9TEls0OXiA7czivFa7VBSTimHbDhcgXLu4sdC8 r44Z2DGcvurcdkOtlWfZqs6jJIG6T+3a3DSFJJ6M0wfDgPb2U1UpSTt4B70x76M1 A36p1+1/upy3s5bgNK/8AIbBqYA3kEaL8+tZFbdjriTdyVtd1ljJ6bOqwaEH5up4 tylcys8TC1/VLmjwRlT4GEh83Il1qMIhixCP4a8D5fFpz5T7k8a+D9oJtz43zZPP EzcuixHw/EEapU59Jn4a0+AsfRL2MGcrMwwWyFr58SgzWq/VuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0Ha7Bid7y1tfyt43PqsI9V7sRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYWNlZjEwNDUtNWMyMC0z MDg1LTk2NzktNTJjYWQxYjUzMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlWaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1OkrLyqZEiLjbtqvDAcvQsJ7ifvhfyC4jGnl0dWfY7IgfLdIJbfflZ c2OaGZSY8OYLhRvEAJGZ3MF2I4N2csNpxOmz+mfLqPJzrZnNhtMpwtjTJEzZCfoV LaXkWh6+e1X760cV6wwxn25sSOKLlcS6RwodqcRQwDK2bC70OEn+F5MpJ2Qwfwz3 YtorYVIU8FxX3jfNWP0nGV5GJKRbu6/Up7wLlnxHk8ClCGEg/mqD135Xzd70Igbr mWWWCrcnnaHRQAyK8VWuf2vhzUFTsaY4gBsYeQkziZH7Vrfd4h898i4jVZ57Xtdy oTX+7SSy9BF5XLr9c0bO1WXwbbHfDGk= -----END CERTIFICATE-----Generated at Wed Nov 5 06:58:43 2025 by rpki-client