$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa File: 88f16770-79cb-31a3-a635-4b9256702cdb.roa (raw, json) Hash identifier: QNPimRhEdXppKwrDR17F69aH06ip0rjFCg+qv1JVQpc= Subject key identifier: 13:4F:8D:3D:B7:D1:3C:38:E9:89:54:86:6D:33:CB:1B:CC:EF:BB:63 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B4418BEACD05F2E876CFD5D00 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa Signing time: Sun 21 Sep 2025 07:52:32 +0000 ROA not before: Sun 21 Sep 2025 07:52:32 +0000 ROA not after: Sat 20 Dec 2025 08:52:32 +0000 asID: 10794 IP address blocks: 171.162.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:18:be:ac:d0:5f:2e:87:6c:fd:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 21 07:52:32 2025 GMT Not After : Dec 20 08:52:32 2025 GMT Subject: CN=21908f52-ec19-4604-95f8-d1274c2a14b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a1:18:ea:04:9c:8d:35:d2:3f:b4:7d:6a:d2: cb:69:dc:e0:f5:0a:dc:f1:1a:ad:06:2a:dc:4c:25: c7:fb:bd:b2:00:ef:7b:0d:68:6a:65:37:15:66:72: 9e:7e:60:68:f1:72:ab:18:4d:fb:77:09:7a:37:ea: 2a:49:99:63:80:83:62:e7:cb:f8:ca:52:00:77:5a: 6d:5e:e4:d6:4a:68:d7:b6:81:91:01:5e:fa:98:2e: 48:d1:c8:9a:a9:0f:05:d6:b1:cf:3c:60:c8:63:89: 0d:c8:19:47:66:b5:a4:db:6a:09:bc:e6:87:78:33: d2:53:d7:fe:5f:d0:e7:2d:99:e9:4b:79:05:e8:09: 1f:b5:80:34:cb:41:9b:fb:21:07:b2:8a:8c:e9:4f: b3:59:f0:6b:d5:46:7f:a8:5a:cd:5c:ac:d1:34:f6: c0:a4:b3:17:56:ea:33:12:50:b2:48:f0:4e:fb:0e: 56:67:ea:7a:6f:e4:30:2c:47:c3:ae:b0:35:6e:b0: 8b:0d:a5:e9:5d:9f:22:0e:ce:71:99:6f:c3:7b:e3: 01:2b:54:c7:50:a0:b1:bb:c3:5c:f7:81:5c:da:84: d4:9d:b1:af:62:97:98:e8:2d:7c:e6:ae:02:ca:f8: d9:ba:90:66:7b:9f:38:24:4d:dd:b2:c5:b8:7c:fe: 56:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4F:8D:3D:B7:D1:3C:38:E9:89:54:86:6D:33:CB:1B:CC:EF:BB:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/88f16770-79cb-31a3-a635-4b9256702cdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:8c:94:30:71:a9:2f:9c:25:88:01:d7:84:b0:72:27:6d:7b: 6f:a7:ad:2d:5d:8e:a5:ae:af:80:cc:4b:d4:bb:eb:9b:78:4c: f7:c5:36:01:ac:36:ef:81:09:ba:1e:1d:60:5a:0c:3c:eb:10: 3d:dd:39:9d:5c:26:56:d6:ab:98:8c:15:56:3d:bf:6d:28:30: 43:69:41:d3:c8:cb:db:dd:4e:27:bb:74:d8:d2:02:af:89:57: 38:31:9c:f8:8d:dc:1a:af:4d:d6:04:bb:f6:5c:dd:da:74:94: 4e:c3:f4:04:9a:8f:45:1c:3a:05:e8:b6:c4:e8:7b:24:5e:e3: 3c:1a:0d:12:fb:de:0e:1e:41:81:6e:3e:d4:92:ab:ea:1a:d5: be:19:9b:79:34:b4:99:2a:60:25:ce:e9:a0:9f:c7:71:12:56: 0a:80:10:70:99:d6:7a:e4:bd:1b:bd:ac:2f:e8:e4:46:dc:b8: cc:9b:8e:53:41:ca:13:08:d9:30:b4:04:52:ce:7c:52:55:de: 79:2e:29:37:66:ba:69:a0:23:58:27:d7:fb:4d:a5:d7:ea:a6: 72:dd:8a:19:ba:7a:79:32:05:b6:95:e7:53:d8:66:91:f9:6e: 31:6a:0d:f1:c1:12:35:11:b1:ec:bd:e9:97:79:2f:89:a1:19: 9a:43:58:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEGL6s0F8uh2z9XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyMTA3NTIzMloXDTI1MTIyMDA4NTIzMlowLzEtMCsGA1UEAxMk MjE5MDhmNTItZWMxOS00NjA0LTk1ZjgtZDEyNzRjMmExNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16EY6gScjTXSP7R9atLLadzg9Qrc8RqtBirc TCXH+72yAO97DWhqZTcVZnKefmBo8XKrGE37dwl6N+oqSZljgINi58v4ylIAd1pt XuTWSmjXtoGRAV76mC5I0ciaqQ8F1rHPPGDIY4kNyBlHZrWk22oJvOaHeDPSU9f+ X9DnLZnpS3kF6AkftYA0y0Gb+yEHsoqM6U+zWfBr1UZ/qFrNXKzRNPbApLMXVuoz ElCySPBO+w5WZ+p6b+QwLEfDrrA1brCLDaXpXZ8iDs5xmW/De+MBK1THUKCxu8Nc 94Fc2oTUnbGvYpeY6C185q4CyvjZupBme584JE3dssW4fP5WewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNPjT230Tw46YlUhm0zyxvM77tjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvODhmMTY3NzAtNzljYi0z MWEzLWE2MzUtNGI5MjU2NzAyY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6MlDBxqS+cJYgB14Swcidte2+nrS1djqWur4DMS9S765t4TPfFNgGs Nu+BCboeHWBaDDzrED3dOZ1cJlbWq5iMFVY9v20oMENpQdPIy9vdTie7dNjSAq+J VzgxnPiN3BqvTdYEu/Zc3dp0lE7D9ASaj0UcOgXotsToeyRe4zwaDRL73g4eQYFu PtSSq+oa1b4Zm3k0tJkqYCXO6aCfx3ESVgqAEHCZ1nrkvRu9rC/o5EbcuMybjlNB yhMI2TC0BFLOfFJV3nkuKTdmummgI1gn1/tNpdfqpnLdihm6enkyBbaV51PYZpH5 bjFqDfHBEjURsey96Zd5L4mhGZpDWGo= -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:53 2025 by rpki-client