$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2591a228-3c77-3a2b-b827-02aaa62bd0bd.roa File: 2591a228-3c77-3a2b-b827-02aaa62bd0bd.roa (raw, json) Hash identifier: 3SYd5qSFzBufB/whYFu/dwgC2Vub2OKiOo6VvWfqE+8= Subject key identifier: 8D:24:99:50:30:52:71:8C:9E:53:86:C4:51:55:BD:78:D1:3E:1E:58 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B43F9BD7753F17B20596B2980 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2591a228-3c77-3a2b-b827-02aaa62bd0bd.roa Signing time: Sun 21 Sep 2025 06:50:03 +0000 ROA not before: Sun 21 Sep 2025 06:50:03 +0000 ROA not after: Sat 20 Dec 2025 07:50:03 +0000 asID: 10794 IP address blocks: 171.161.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:f9:bd:77:53:f1:7b:20:59:6b:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 21 06:50:03 2025 GMT Not After : Dec 20 07:50:03 2025 GMT Subject: CN=f854e336-7a6d-45f3-a04d-da7a4c4c76cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:fb:30:1e:ce:41:4e:dc:42:7b:d2:70:dc: 02:24:b6:8f:1b:48:f9:2f:5e:83:73:04:e6:0b:fe: 98:bc:a5:fa:43:07:ad:66:df:c6:7d:7f:aa:e1:02: f0:c6:b6:57:8a:94:ca:fe:5b:78:6b:ab:27:9b:bb: 40:b3:25:fa:a2:48:d1:c6:3b:89:ce:e2:f8:ff:14: ff:7a:68:d3:ac:cc:69:55:6a:63:b2:92:16:85:89: c5:4e:5e:79:9b:09:67:a2:ae:22:87:17:b4:9c:e6: 0a:18:d7:ba:f6:4c:9b:3f:9d:42:6c:56:94:32:7b: b2:cc:3b:39:4f:18:77:a1:1f:e0:fc:9c:9e:b1:5e: fc:05:b9:b7:b1:12:6e:a9:0d:0f:ba:7c:15:b0:13: d2:d6:bf:44:f5:39:fb:b2:a5:7f:93:b9:3b:92:c5: 63:8e:c0:07:05:de:28:5b:f0:25:67:2d:ff:16:3e: af:db:98:f0:bf:2a:98:a7:fc:cb:0d:2d:45:6c:b3: 46:15:ad:bd:6b:b8:3d:7d:40:f1:bd:7a:8e:b5:1e: b8:50:6c:de:b7:5e:0b:cf:eb:79:e3:c1:8a:a0:da: 30:9c:ef:d9:cf:ce:2f:2a:84:c5:22:8c:4b:bb:ed: ad:cc:fb:b9:46:0b:bc:60:0c:4f:77:4a:a4:bc:63: 49:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:24:99:50:30:52:71:8C:9E:53:86:C4:51:55:BD:78:D1:3E:1E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2591a228-3c77-3a2b-b827-02aaa62bd0bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:68:8d:cd:e3:49:b0:00:90:53:5c:02:88:04:d8:b2:d0:33: 66:2f:63:1a:ea:1a:60:a5:1c:5d:1a:4a:97:9d:6d:53:c4:02: 9a:a2:87:ec:11:9c:dd:e7:61:10:a7:a9:d1:57:a9:bf:c3:c0: 35:42:d9:7f:c7:7c:15:43:40:32:c8:c5:59:01:b0:e7:2a:c7: 75:cc:a0:fc:3f:ce:bd:38:87:7e:3e:af:9e:85:d7:df:d4:cc: 75:2f:e2:0b:a7:e8:74:f7:8b:64:f8:ef:3e:c9:1e:fd:6d:58: 53:ee:29:a5:2d:86:a9:41:66:05:72:65:a6:e8:e0:fa:0b:8b: fc:c3:1d:39:27:4f:2d:3c:e6:39:75:ae:2c:3e:aa:5a:83:fd: 37:f9:f4:c2:d7:c1:b9:36:bd:63:5f:ed:46:38:52:7b:80:95: d3:2b:c2:a1:eb:c4:29:97:37:aa:35:78:f4:1b:4b:1f:b8:d9: 10:ca:87:c0:ce:c2:70:3f:32:85:df:96:fa:3d:15:01:1d:f3: 9a:2d:dc:3d:a5:84:32:84:94:1c:3a:bc:52:61:d9:98:59:32: 13:12:ce:32:85:c8:4a:6e:72:fe:21:74:83:20:41:a1:a7:71: 18:6d:d8:cb:c2:27:56:8f:43:45:c3:2f:04:86:d5:8d:5e:5e: e6:07:b6:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtD+b13U/F7IFlrKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyMTA2NTAwM1oXDTI1MTIyMDA3NTAwM1owLzEtMCsGA1UEAxMk Zjg1NGUzMzYtN2E2ZC00NWYzLWEwNGQtZGE3YTRjNGM3NmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgb7MB7OQU7cQnvScNwCJLaPG0j5L16DcwTm C/6YvKX6QwetZt/GfX+q4QLwxrZXipTK/lt4a6snm7tAsyX6okjRxjuJzuL4/xT/ emjTrMxpVWpjspIWhYnFTl55mwlnoq4ihxe0nOYKGNe69kybP51CbFaUMnuyzDs5 Txh3oR/g/JyesV78Bbm3sRJuqQ0PunwVsBPS1r9E9Tn7sqV/k7k7ksVjjsAHBd4o W/AlZy3/Fj6v25jwvyqYp/zLDS1FbLNGFa29a7g9fUDxvXqOtR64UGzet14Lz+t5 48GKoNownO/Zz84vKoTFIoxLu+2tzPu5Rgu8YAxPd0qkvGNJZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0kmVAwUnGMnlOGxFFVvXjRPh5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMjU5MWEyMjgtM2M3Ny0z YTJiLWI4MjctMDJhYWE2MmJkMGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6E+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhojc3jSbAAkFNcAogE2LLQM2YvYxrqGmClHF0aSpedbVPEApqih+wR nN3nYRCnqdFXqb/DwDVC2X/HfBVDQDLIxVkBsOcqx3XMoPw/zr04h34+r56F19/U zHUv4gun6HT3i2T47z7JHv1tWFPuKaUthqlBZgVyZabo4PoLi/zDHTknTy085jl1 riw+qlqD/Tf59MLXwbk2vWNf7UY4UnuAldMrwqHrxCmXN6o1ePQbSx+42RDKh8DO wnA/MoXflvo9FQEd85ot3D2lhDKElBw6vFJh2ZhZMhMSzjKFyEpucv4hdIMgQaGn cRht2MvCJ1aPQ0XDLwSG1Y1eXuYHti0= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:34 2025 by rpki-client