$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/4fc10b1a-49c3-3929-9421-871da18a3032.roa File: 4fc10b1a-49c3-3929-9421-871da18a3032.roa (raw, json) Hash identifier: sY5DB6tYD4vhnnybwMwGRzDuu3uDf94Ro8ryzrCUa0k= Subject key identifier: BA:C4:8B:0B:DF:86:AF:C0:8D:A7:F4:79:9C:F8:F6:21:C8:81:F4:BA Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B440DB835753723BFB9B942E0 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/4fc10b1a-49c3-3929-9421-871da18a3032.roa Signing time: Sun 21 Sep 2025 07:30:19 +0000 ROA not before: Sun 21 Sep 2025 07:30:19 +0000 ROA not after: Sat 20 Dec 2025 08:30:19 +0000 asID: 10794 IP address blocks: 171.161.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:0d:b8:35:75:37:23:bf:b9:b9:42:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 21 07:30:19 2025 GMT Not After : Dec 20 08:30:19 2025 GMT Subject: CN=836d89b9-b2eb-4f71-8ad7-63d9adb4eccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c8:00:29:f1:9e:6b:4a:58:84:6c:d4:6f:01: 77:89:92:88:21:50:d4:0e:a2:92:b2:36:10:90:d6: 7e:3e:bc:46:fc:26:5c:cc:7a:62:0e:88:64:00:9e: 10:a7:00:77:f7:1f:b1:35:5d:57:e6:dc:f5:bc:02: cd:b5:b0:c6:c8:53:f5:11:c4:de:09:27:a6:25:71: b4:e3:5c:40:e6:2d:e9:b6:90:a3:95:6c:9f:50:82: e8:cb:d4:ba:67:36:d1:27:72:f9:0d:20:c7:a7:26: cc:d9:87:e4:60:af:2a:fc:b8:fd:88:49:97:28:5a: e8:d0:85:82:e1:ae:a6:a6:03:ba:86:8a:0c:31:0f: 45:ab:95:48:b1:89:9c:6e:47:ce:91:da:6a:6f:56: f3:9e:8e:14:b3:d1:9f:cf:aa:d7:03:ed:a7:e7:8c: e3:e2:7c:17:0a:bb:92:f9:8b:da:62:19:e8:a4:6a: d3:1a:af:1c:d5:66:18:97:85:a3:01:3d:4b:63:4a: db:6d:84:3f:e3:27:cf:7c:64:8b:0c:05:4f:48:17: 77:19:6e:3c:f2:5a:d8:f2:6e:97:56:9a:a7:51:87: a2:96:ee:e8:8b:75:71:41:f7:85:9a:87:d7:c6:ae: 91:cd:71:3d:9c:8f:31:69:0a:5d:ec:56:0a:26:47: 08:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C4:8B:0B:DF:86:AF:C0:8D:A7:F4:79:9C:F8:F6:21:C8:81:F4:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/4fc10b1a-49c3-3929-9421-871da18a3032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:3c:88:cb:70:f4:a9:94:38:34:74:db:a7:a4:9d:df:26:96: 94:ec:97:c8:0a:7d:e6:1c:07:50:ba:84:12:97:a3:0e:e0:b5: 82:ba:8a:6b:a3:a5:60:8d:a9:f2:f0:41:cf:03:fe:7d:c7:df: ac:91:c0:a3:35:e0:65:76:7f:60:0e:b0:78:4b:20:7d:47:52: e9:48:5d:93:ae:26:5f:ba:87:d0:13:e6:80:a0:ac:ac:75:40: 95:19:51:51:dd:54:16:cc:79:f1:ad:45:66:58:3b:f8:6b:d5: 84:ab:55:b8:c3:f1:4f:1f:15:17:0b:e6:80:0b:c6:03:2c:33: 6c:24:8a:6e:be:81:7e:69:59:4b:a8:28:33:b1:12:0e:75:59: f0:5d:29:c7:b1:eb:6d:f0:b6:d6:29:cf:44:cb:75:21:d6:ed: 83:61:55:23:40:61:d8:94:f7:70:d2:5f:9d:56:78:4f:fb:36: af:27:58:fb:c7:f7:0d:bc:a9:3d:f8:fe:33:cb:f2:92:08:69: e9:52:c0:1e:94:4d:5b:ac:11:bc:41:36:9c:c1:67:17:5c:53: 1e:32:ff:5f:f1:66:41:bc:97:db:04:e0:07:2e:8f:5e:d4:2b: aa:45:12:7e:1b:61:0f:9f:0a:a7:b8:54:ea:83:a5:c2:5a:43: 02:13:af:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEDbg1dTcjv7m5QuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyMTA3MzAxOVoXDTI1MTIyMDA4MzAxOVowLzEtMCsGA1UEAxMk ODM2ZDg5YjktYjJlYi00ZjcxLThhZDctNjNkOWFkYjRlY2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28gAKfGea0pYhGzUbwF3iZKIIVDUDqKSsjYQ kNZ+PrxG/CZczHpiDohkAJ4QpwB39x+xNV1X5tz1vALNtbDGyFP1EcTeCSemJXG0 41xA5i3ptpCjlWyfUILoy9S6ZzbRJ3L5DSDHpybM2YfkYK8q/Lj9iEmXKFro0IWC 4a6mpgO6hooMMQ9Fq5VIsYmcbkfOkdpqb1bzno4Us9Gfz6rXA+2n54zj4nwXCruS +YvaYhnopGrTGq8c1WYYl4WjAT1LY0rbbYQ/4yfPfGSLDAVPSBd3GW488lrY8m6X VpqnUYeilu7oi3VxQfeFmofXxq6RzXE9nI8xaQpd7FYKJkcI2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrEiwvfhq/Ajaf0eZz49iHIgfS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvNGZjMTBiMWEtNDljMy0z OTI5LTk0MjEtODcxZGExOGEzMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6FQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ88iMtw9KmUODR026eknd8mlpTsl8gKfeYcB1C6hBKXow7gtYK6imuj pWCNqfLwQc8D/n3H36yRwKM14GV2f2AOsHhLIH1HUulIXZOuJl+6h9AT5oCgrKx1 QJUZUVHdVBbMefGtRWZYO/hr1YSrVbjD8U8fFRcL5oALxgMsM2wkim6+gX5pWUuo KDOxEg51WfBdKcex623wttYpz0TLdSHW7YNhVSNAYdiU93DSX51WeE/7Nq8nWPvH 9w28qT34/jPL8pIIaelSwB6UTVusEbxBNpzBZxdcUx4y/1/xZkG8l9sE4Acuj17U K6pFEn4bYQ+fCqe4VOqDpcJaQwITr4c= -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:55 2025 by rpki-client