$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2a10617a-7db4-3995-930c-fb3482472990.roa File: 2a10617a-7db4-3995-930c-fb3482472990.roa (raw, json) Hash identifier: tKfh9WskiUmpPE4uNtilqjrb7awARxLLaiUWjgcYyHg= Subject key identifier: 48:63:5C:E5:4F:12:7B:B2:7F:7F:3E:5A:C0:27:EC:77:64:FA:2B:FE Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B43A92C033C6E0C06602CE780 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2a10617a-7db4-3995-930c-fb3482472990.roa Signing time: Sun 21 Sep 2025 04:07:43 +0000 ROA not before: Sun 21 Sep 2025 04:07:43 +0000 ROA not after: Sat 20 Dec 2025 05:07:43 +0000 asID: 10794 IP address blocks: 171.161.144.0/21 maxlen: 21 171.161.144.0/22 maxlen: 22 171.161.144.0/24 maxlen: 24 171.161.145.0/24 maxlen: 24 171.161.146.0/24 maxlen: 24 171.161.147.0/24 maxlen: 24 171.161.148.0/24 maxlen: 24 171.161.149.0/24 maxlen: 24 171.161.150.0/24 maxlen: 24 171.161.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:a9:2c:03:3c:6e:0c:06:60:2c:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 21 04:07:43 2025 GMT Not After : Dec 20 05:07:43 2025 GMT Subject: CN=325a2553-3213-4ef5-acc5-c4a1c36c7a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ad:0a:28:f9:e3:93:d4:2c:a8:31:f8:de:86: ee:a1:6f:55:64:e6:ef:0c:5f:77:d7:79:e9:42:91: 9b:9d:ad:f1:82:69:77:40:e4:51:a2:98:6b:75:40: 0f:57:eb:c2:3b:a1:6a:93:f5:42:74:ad:84:25:f8: ed:40:d8:2d:97:84:26:45:ea:76:57:4d:34:8d:bf: 5b:79:0d:84:06:a1:00:d6:11:7c:46:71:ed:01:04: 6c:00:dc:7f:51:e7:d9:f0:6d:93:ad:7c:97:84:86: 1b:dc:7d:16:bd:d0:e9:a0:75:14:2e:74:4f:23:1a: 55:ba:20:3e:dd:3c:e4:6c:ed:02:96:11:15:87:e8: c5:8c:3f:c5:5c:0b:54:3f:fd:65:46:02:1e:29:dd: a8:55:03:27:61:62:6f:e2:8c:1f:d4:8c:91:31:53: aa:bc:a5:4c:77:81:0f:aa:61:41:e6:32:1f:f8:82: ed:75:12:e8:d9:47:b8:a0:fe:1e:5f:0f:3c:b7:4b: 5e:ec:57:9b:7a:ef:7a:96:5d:8c:10:0b:8a:ab:9f: c9:2b:f7:30:1f:1f:8c:92:13:22:dd:00:89:4b:40: 6d:b7:38:8e:34:c3:e5:5e:62:de:f3:4c:10:7b:e8: 33:d5:42:29:06:5c:71:ac:ea:8b:33:32:48:be:ab: f6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:63:5C:E5:4F:12:7B:B2:7F:7F:3E:5A:C0:27:EC:77:64:FA:2B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/2a10617a-7db4-3995-930c-fb3482472990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f7:be:f0:60:fb:6e:c0:1f:4d:a8:73:e8:04:f5:29:4c:33: 98:a3:35:18:ce:ea:a5:49:96:33:1b:56:bf:57:81:fa:34:05: 11:38:3c:6a:0e:ad:ac:0b:1b:68:81:d1:3a:99:98:41:74:a0: 63:e6:ff:42:8b:5b:51:23:16:a9:ba:f8:be:f6:7a:6a:a6:70: 4e:53:2f:7f:99:70:89:09:1b:1d:d2:86:82:5c:f5:e7:8a:0d: e6:7a:99:40:63:e2:74:0e:d3:36:93:9c:3d:58:fb:41:96:3c: f7:3b:33:51:69:f2:24:7c:f9:ce:93:4e:8a:3c:67:68:b2:f9: 02:6c:9a:b5:b9:cd:b0:6c:31:1f:91:13:a9:e3:ee:4c:d3:4d: 3c:7d:fb:8c:21:e2:27:cf:b5:4d:76:18:0b:fb:4c:c5:7e:2e: 0b:57:90:ba:51:82:ee:9c:54:9a:15:95:80:64:33:30:6a:8c: 8c:3b:a7:5e:ad:a3:ee:e0:9f:29:53:2b:04:9f:d9:79:64:dd: 69:c8:5e:b6:91:44:4f:f9:43:46:aa:5d:16:84:20:16:f6:c5: d3:87:2d:d3:9a:30:66:b1:8c:44:08:c6:07:5f:8c:2f:b2:a1: 40:e8:69:17:d4:7f:d7:48:4e:c2:58:3a:35:af:b9:cc:2c:bb: bf:98:5d:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDqSwDPG4MBmAs54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyMTA0MDc0M1oXDTI1MTIyMDA1MDc0M1owLzEtMCsGA1UEAxMk MzI1YTI1NTMtMzIxMy00ZWY1LWFjYzUtYzRhMWMzNmM3YTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K0KKPnjk9QsqDH43obuoW9VZObvDF9313np QpGbna3xgml3QORRophrdUAPV+vCO6Fqk/VCdK2EJfjtQNgtl4QmRep2V000jb9b eQ2EBqEA1hF8RnHtAQRsANx/UefZ8G2TrXyXhIYb3H0WvdDpoHUULnRPIxpVuiA+ 3TzkbO0ClhEVh+jFjD/FXAtUP/1lRgIeKd2oVQMnYWJv4owf1IyRMVOqvKVMd4EP qmFB5jIf+ILtdRLo2Ue4oP4eXw88t0te7Febeu96ll2MEAuKq5/JK/cwHx+MkhMi 3QCJS0BttziONMPlXmLe80wQe+gz1UIpBlxxrOqLMzJIvqv2WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhjXOVPEnuyf38+WsAn7Hdk+iv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMmExMDYxN2EtN2RiNC0z OTk1LTkzMGMtZmIzNDgyNDcyOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDq6GQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb3vvBg+27AH02oc+gE9SlMM5ijNRjO6qVJljMbVr9Xgfo0BRE4PGoO rawLG2iB0TqZmEF0oGPm/0KLW1EjFqm6+L72emqmcE5TL3+ZcIkJGx3ShoJc9eeK DeZ6mUBj4nQO0zaTnD1Y+0GWPPc7M1Fp8iR8+c6TToo8Z2iy+QJsmrW5zbBsMR+R E6nj7kzTTTx9+4wh4ifPtU12GAv7TMV+LgtXkLpRgu6cVJoVlYBkMzBqjIw7p16t o+7gnylTKwSf2Xlk3WnIXraRRE/5Q0aqXRaEIBb2xdOHLdOaMGaxjEQIxgdfjC+y oUDoaRfUf9dITsJYOjWvucwsu7+YXS0= -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:55 2025 by rpki-client