$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/76c7fa7f-97db-3c71-b5ab-27619321b499.roa File: 76c7fa7f-97db-3c71-b5ab-27619321b499.roa (raw, json) Hash identifier: 0LMdJKIae3dWX4Uns3d3gTG9S+cUw94GiVdVGd+b1L8= Subject key identifier: 0C:A1:B4:7F:E6:FF:B0:DC:08:61:56:08:67:3B:C2:67:EC:C7:DF:F0 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B52A7577DDBE3C48AA07A367C Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/76c7fa7f-97db-3c71-b5ab-27619321b499.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 19886 IP address blocks: 171.162.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:57:7d:db:e3:c4:8a:a0:7a:36:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=70144bb4-0ef1-400c-afff-3ac6380d9369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:58:0a:16:73:a0:d9:4b:07:32:be:28:82: 39:9b:85:2a:d7:28:b5:4d:fe:2a:86:05:a6:cc:fe: ac:31:f1:f6:f2:1d:34:82:07:de:28:76:19:5e:4e: 1b:ed:db:25:81:ac:8e:58:dd:0f:76:89:ef:48:41: 08:45:e2:93:61:76:41:1c:8a:21:29:91:18:2b:46: d7:b2:a8:4e:6d:1f:06:8f:93:dc:85:77:f3:2a:92: 51:d4:5f:ff:11:f7:c1:ee:f4:09:f6:80:9c:c4:17: 1c:13:07:3c:97:ca:9b:04:6a:83:4a:89:aa:02:b2: 85:72:31:3c:88:31:ed:eb:d2:94:14:e0:59:a8:a4: a3:f6:a7:54:7c:2f:c4:97:2d:b8:f5:44:35:33:d7: 7b:79:c4:f2:17:cf:92:28:16:e4:59:da:fc:4d:57: e8:cf:15:92:29:02:44:1a:6d:6f:e1:a1:0b:10:2a: b4:0e:ab:7e:64:6c:ff:68:c2:5c:d3:1a:d2:9c:f1: ab:e8:1a:81:23:29:db:38:38:4b:7c:bc:2f:bf:d0: 9e:50:55:1a:01:a2:51:f8:1a:a9:41:46:47:bf:40: 58:fd:5e:66:a6:63:08:c7:4f:eb:a1:51:4e:e4:0b: e0:95:4f:9a:c7:03:6d:e7:28:4a:9c:4b:b1:e7:70: 37:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A1:B4:7F:E6:FF:B0:DC:08:61:56:08:67:3B:C2:67:EC:C7:DF:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/76c7fa7f-97db-3c71-b5ab-27619321b499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2d:67:d6:f2:79:97:77:1c:1b:41:35:4c:50:86:1e:00:3a: c6:07:9c:3f:a0:36:32:7d:92:f7:bc:a9:3a:ad:77:28:f0:07: 8c:9a:31:53:8a:26:4c:d0:ce:a3:32:92:79:69:86:d6:62:a8: df:a8:70:ed:94:81:4d:5a:94:03:f8:39:64:91:7d:e8:1b:74: a5:8e:9b:17:f4:d7:e9:e2:9c:96:9a:6b:91:5f:b4:04:d3:70: 78:c8:c7:46:cf:70:0a:56:5a:a0:f3:55:fa:e5:90:50:5e:56: dc:ca:b1:c8:1a:8f:1f:00:52:cb:fe:10:52:27:72:47:97:55: 61:3f:3a:81:21:3a:9c:dc:f9:51:8d:0b:9e:42:33:3e:85:d0: c9:08:64:b4:81:22:fc:09:f1:1b:39:49:d9:85:fe:8f:0a:56: 39:0d:75:8a:a8:4a:93:3c:c8:f4:76:45:81:f1:d1:58:a9:89: bf:f7:7e:fa:e9:6e:98:f4:26:55:9d:08:20:2d:5d:90:c8:ae: ff:2a:6a:fe:1d:c0:55:c9:1e:ab:01:ae:3f:5c:f3:6f:84:3a: 34:45:a7:50:ff:02:29:fb:68:d8:55:44:46:3f:94:38:49:2d: a3:3c:a5:15:4a:c2:aa:6c:70:60:87:98:fb:e2:cf:07:12:5d: 7a:ab:d3:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1d92+PEiqB6NnwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NzAxNDRiYjQtMGVmMS00MDBjLWFmZmYtM2FjNjM4MGQ5MzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYFYChZzoNlLBzK+KII5m4Uq1yi1Tf4qhgWm zP6sMfH28h00ggfeKHYZXk4b7dslgayOWN0PdonvSEEIReKTYXZBHIohKZEYK0bX sqhObR8Gj5PchXfzKpJR1F//EffB7vQJ9oCcxBccEwc8l8qbBGqDSomqArKFcjE8 iDHt69KUFOBZqKSj9qdUfC/Ely249UQ1M9d7ecTyF8+SKBbkWdr8TVfozxWSKQJE Gm1v4aELECq0Dqt+ZGz/aMJc0xrSnPGr6BqBIynbODhLfLwvv9CeUFUaAaJR+Bqp QUZHv0BY/V5mpmMIx0/roVFO5AvglU+axwNt5yhKnEux53A3CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyhtH/m/7DcCGFWCGc7wmfsx9/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvNzZjN2ZhN2YtOTdkYi0z YzcxLWI1YWItMjc2MTkzMjFiNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq6LqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABItZ9byeZd3HBtBNUxQhh4AOsYHnD+gNjJ9kve8qTqtdyjwB4yaMVOK JkzQzqMyknlphtZiqN+ocO2UgU1alAP4OWSRfegbdKWOmxf01+ninJaaa5FftATT cHjIx0bPcApWWqDzVfrlkFBeVtzKscgajx8AUsv+EFInckeXVWE/OoEhOpzc+VGN C55CMz6F0MkIZLSBIvwJ8Rs5SdmF/o8KVjkNdYqoSpM8yPR2RYHx0Vipib/3fvrp bpj0JlWdCCAtXZDIrv8qav4dwFXJHqsBrj9c82+EOjRFp1D/Ain7aNhVREY/lDhJ LaM8pRVKwqpscGCHmPvizwcSXXqr0/M= -----END CERTIFICATE-----Generated at Mon Oct 20 16:23:00 2025 by rpki-client