$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0d0c0028-c295-3be1-b04f-253e4b1b8581.roa File: 0d0c0028-c295-3be1-b04f-253e4b1b8581.roa (raw, json) Hash identifier: 63bzed4Sc9zFyjeaz3p2/MNmg4ZWY2jejgdDp/u4fBw= Subject key identifier: B5:42:16:48:7A:81:B4:77:86:45:14:B0:23:55:CA:3E:8E:A4:52:7B Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F43285849F48CE97E63C8B1F9ECF6BD80 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0d0c0028-c295-3be1-b04f-253e4b1b8581.roa Signing time: Sat 24 May 2025 03:14:59 +0000 ROA not before: Sat 24 May 2025 03:14:59 +0000 ROA not after: Fri 22 Aug 2025 03:14:59 +0000 asID: 19886 IP address blocks: 171.162.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:8c:e9:7e:63:c8:b1:f9:ec:f6:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: May 24 03:14:59 2025 GMT Not After : Aug 22 03:14:59 2025 GMT Subject: CN=0f8dda6a-a772-4e7d-80be-9021da6fabbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:a6:c3:a3:89:f6:e1:40:4d:e6:ea:5e:30: 3c:bb:33:97:58:da:8f:f9:22:88:d8:ea:b4:4b:38: 10:c8:0a:7b:69:a5:f1:a4:43:91:cc:1b:7d:29:e7: eb:27:5a:11:b3:eb:27:9c:cb:65:54:36:57:f0:5b: 32:ad:ea:69:87:d2:f8:4f:af:57:0b:16:6a:e6:90: fa:d9:d5:f4:15:50:13:7f:1b:a1:82:72:39:4a:71: b5:35:a4:eb:0b:d7:2e:b8:ea:a5:4e:d1:00:e0:a7: d7:6d:c5:7e:8e:09:cd:e7:9b:9b:c3:87:a4:50:1f: 51:1b:31:ba:f6:06:dc:35:42:84:a0:af:fc:0f:c2: ae:c2:ce:45:ab:72:c3:8a:08:bd:bd:a2:1a:20:81: 7e:f6:62:d6:b0:fc:a9:e1:76:97:19:21:2e:a6:e4: 71:07:06:df:23:00:d6:85:39:ed:07:21:98:09:2a: 58:1c:e8:ff:b3:c5:25:0c:b5:c2:7c:56:12:45:d8: a6:af:43:92:67:61:e9:c8:26:e1:4d:7a:59:9d:0f: ed:0b:ff:4f:00:17:83:47:a1:7b:73:fa:f6:3d:b5: 62:34:3b:82:58:db:af:0f:2b:12:28:28:af:d5:c3: 6b:6e:cc:85:2e:f5:b5:bf:78:8f:e9:84:48:2e:17: 47:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:42:16:48:7A:81:B4:77:86:45:14:B0:23:55:CA:3E:8E:A4:52:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0d0c0028-c295-3be1-b04f-253e4b1b8581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:f3:da:83:ac:7c:ab:f7:b1:d0:13:d5:95:c5:14:0e:0c:23: e7:3d:1c:57:b4:99:92:7b:2b:78:71:23:cf:3d:24:c1:45:84: 84:68:f0:0f:02:53:ca:0e:00:90:af:dc:9c:33:34:40:4e:47: e0:99:a5:51:09:06:2d:ae:0a:d8:2c:00:7b:6a:fc:8c:0d:bf: 87:2c:37:c2:d7:99:ed:c4:c3:fd:fa:a9:51:bc:25:e3:84:8c: e0:e7:b6:39:e9:27:49:45:f8:bf:b6:93:37:41:f9:37:2f:3d: 4e:78:4a:5e:16:a5:9d:1e:c6:41:c8:80:74:0e:56:2e:47:80: 31:7a:6e:f3:4b:78:9e:ad:c1:43:c4:6b:ae:03:63:45:76:bc: 8b:e6:7d:8f:a0:9e:85:bb:19:1c:2b:85:26:96:2b:25:f7:75: c9:a4:2e:98:f7:6f:35:1a:fb:b6:f0:1c:8b:71:63:29:2b:6d: 3a:05:55:d7:92:b6:7d:3a:04:80:0b:d9:f5:27:47:1c:b0:91: 24:0e:a6:20:be:b5:8e:61:a6:d9:57:be:b2:b7:7a:74:57:68: 0b:db:34:e5:b2:39:9e:20:a1:06:f6:79:61:7c:d4:0c:31:0f: 07:84:ec:fa:b5:21:2f:ac:76:0b:ee:88:d7:b2:06:00:3b:9b: 88:c2:e1:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0jOl+Y8ix+ez2vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDUyNDAzMTQ1OVoXDTI1MDgyMjAzMTQ1OVowLzEtMCsGA1UEAxMk MGY4ZGRhNmEtYTc3Mi00ZTdkLTgwYmUtOTAyMWRhNmZhYmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukimw6OJ9uFATebqXjA8uzOXWNqP+SKI2Oq0 SzgQyAp7aaXxpEORzBt9KefrJ1oRs+snnMtlVDZX8Fsyrepph9L4T69XCxZq5pD6 2dX0FVATfxuhgnI5SnG1NaTrC9cuuOqlTtEA4KfXbcV+jgnN55ubw4ekUB9RGzG6 9gbcNUKEoK/8D8Kuws5Fq3LDigi9vaIaIIF+9mLWsPyp4XaXGSEupuRxBwbfIwDW hTntByGYCSpYHOj/s8UlDLXCfFYSRdimr0OSZ2HpyCbhTXpZnQ/tC/9PABeDR6F7 c/r2PbViNDuCWNuvDysSKCiv1cNrbsyFLvW1v3iP6YRILhdHwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVCFkh6gbR3hkUUsCNVyj6OpFJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMGQwYzAwMjgtYzI5NS0z YmUxLWIwNGYtMjUzZTRiMWI4NTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6I1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7z2oOsfKv3sdAT1ZXFFA4MI+c9HFe0mZJ7K3hxI889JMFFhIRo8A8C U8oOAJCv3JwzNEBOR+CZpVEJBi2uCtgsAHtq/IwNv4csN8LXme3Ew/36qVG8JeOE jODntjnpJ0lF+L+2kzdB+TcvPU54Sl4WpZ0exkHIgHQOVi5HgDF6bvNLeJ6twUPE a64DY0V2vIvmfY+gnoW7GRwrhSaWKyX3dcmkLpj3bzUa+7bwHItxYykrbToFVdeS tn06BIAL2fUnRxywkSQOpiC+tY5hptlXvrK3enRXaAvbNOWyOZ4goQb2eWF81Awx DweE7Pq1IS+sdgvuiNeyBgA7m4jC4TM= -----END CERTIFICATE-----Generated at Mon Jun 30 00:39:31 2025 by rpki-client