$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0ac42e13-1fbf-33b1-924f-24f9e61ba070.roa File: 0ac42e13-1fbf-33b1-924f-24f9e61ba070.roa (raw, json) Hash identifier: qjD8qOtX+/+7tF7uS9jvefejs3MzIM0WF5Fgxv8WF5s= Subject key identifier: 71:7D:D2:26:5C:B3:4A:4D:4B:86:8D:7F:44:67:E9:C4:8A:F6:02:5B Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584AD50672EC89BF14F5C8D49F00 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0ac42e13-1fbf-33b1-924f-24f9e61ba070.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 19886 IP address blocks: 171.162.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:72:ec:89:bf:14:f5:c8:d4:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=4a5292ee-ca70-41ab-9481-9fba1894878f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:cd:45:76:c7:81:8d:a9:fc:95:6c:cd:a1: dc:a3:53:68:70:5e:e5:06:50:4b:b9:30:7c:40:ff: 7f:39:db:e1:a6:55:45:f6:03:45:ba:c6:4b:51:f4: 9a:0a:57:9b:9d:b7:9b:f6:76:35:eb:0b:4b:a7:a1: bf:a2:cf:af:0e:d9:72:6c:77:5b:44:32:e2:e5:5c: 73:dd:8c:4c:15:79:89:3f:89:35:3c:d7:e1:c5:29: ba:fa:d6:8d:b5:7a:1d:a9:ed:c1:07:33:e8:70:06: 2d:b0:8e:47:e8:e2:46:3e:c5:4c:ce:ab:67:25:2f: 63:8c:b3:3f:95:74:7e:6e:78:2b:7e:b9:0c:e2:43: a2:9a:85:e0:fe:1f:da:ce:f4:9d:28:c3:34:9f:bf: ae:af:01:d2:28:ac:2e:42:67:2b:25:a1:e2:e8:5c: d3:58:7d:a9:a2:98:47:fa:0b:73:b3:44:4e:2e:85: 30:71:11:56:ba:0b:bf:21:b5:db:84:f9:ca:8f:05: ee:a9:41:a3:36:84:b2:1b:6e:fd:e3:2b:49:3e:fb: f7:b4:52:5f:f8:d9:87:a3:40:59:13:b8:f7:5d:ae: 74:1e:6d:a2:86:8b:0e:1a:ed:88:9d:4a:68:c5:eb: 80:13:3d:e9:a8:b0:45:d1:a4:3e:94:63:75:a8:75: 0f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7D:D2:26:5C:B3:4A:4D:4B:86:8D:7F:44:67:E9:C4:8A:F6:02:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0ac42e13-1fbf-33b1-924f-24f9e61ba070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:e2:ec:e3:dc:40:82:b1:34:5a:b0:37:fb:69:6f:0e:20:b6: c5:6b:9b:71:57:0f:45:ee:00:62:68:64:6b:1e:8b:d3:0e:4f: 34:5c:a9:43:3f:3c:d3:fe:93:bf:0e:5f:9d:a2:bd:02:56:3e: 8d:fb:d2:96:e0:38:6c:fa:7a:52:ff:be:88:43:4e:49:e2:9b: 4f:e2:6b:7b:19:c0:34:0a:fc:4b:bf:f9:e1:b6:ef:b3:eb:ad: e1:ec:42:fe:49:1f:02:4b:82:e8:37:a6:39:77:e1:99:b5:1d: 25:7b:9f:6c:29:34:74:3e:fc:c5:4a:2b:b2:bb:d3:f0:56:e8: 16:fd:e1:d0:f1:7b:09:f5:5a:51:1c:d4:91:c2:ea:64:d3:af: 3c:ca:3c:92:cd:88:37:d6:11:e7:89:c0:1a:75:7b:67:eb:a0: 4b:1b:e7:d3:cf:b1:7e:9b:8c:30:7e:04:62:cd:c1:bc:c7:03: c8:37:96:de:76:64:82:2b:98:3b:d4:f0:cb:3e:83:a4:4b:53: 68:9e:a2:e8:19:ad:33:23:2e:bb:e4:4f:b9:0f:d3:ec:70:b9: d5:e7:a9:33:8f:13:4c:1e:6c:f4:01:63:58:09:e7:16:87:ae: 4a:9e:f4:5d:2c:b3:90:ce:ad:00:94:3b:52:03:ce:1f:60:0f: b6:73:f5:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBnLsib8U9cjUnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk NGE1MjkyZWUtY2E3MC00MWFiLTk0ODEtOWZiYTE4OTQ4NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwifNRXbHgY2p/JVszaHco1NocF7lBlBLuTB8 QP9/OdvhplVF9gNFusZLUfSaClebnbeb9nY16wtLp6G/os+vDtlybHdbRDLi5Vxz 3YxMFXmJP4k1PNfhxSm6+taNtXodqe3BBzPocAYtsI5H6OJGPsVMzqtnJS9jjLM/ lXR+bngrfrkM4kOimoXg/h/azvSdKMM0n7+urwHSKKwuQmcrJaHi6FzTWH2pophH +gtzs0ROLoUwcRFWugu/IbXbhPnKjwXuqUGjNoSyG2794ytJPvv3tFJf+NmHo0BZ E7j3Xa50Hm2ihosOGu2InUpoxeuAEz3pqLBF0aQ+lGN1qHUPgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF90iZcs0pNS4aNf0Rn6cSK9gJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMGFjNDJlMTMtMWZiZi0z M2IxLTkyNGYtMjRmOWU2MWJhMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/i7OPcQIKxNFqwN/tpbw4gtsVrm3FXD0XuAGJoZGsei9MOTzRcqUM/ PNP+k78OX52ivQJWPo370pbgOGz6elL/vohDTknim0/ia3sZwDQK/Eu/+eG277Pr reHsQv5JHwJLgug3pjl34Zm1HSV7n2wpNHQ+/MVKK7K70/BW6Bb94dDxewn1WlEc 1JHC6mTTrzzKPJLNiDfWEeeJwBp1e2froEsb59PPsX6bjDB+BGLNwbzHA8g3lt52 ZIIrmDvU8Ms+g6RLU2ieougZrTMjLrvkT7kP0+xwudXnqTOPE0webPQBY1gJ5xaH rkqe9F0ss5DOrQCUO1IDzh9gD7Zz9S8= -----END CERTIFICATE-----Generated at Sun Aug 24 04:40:53 2025 by rpki-client