$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/945213fa-6234-338b-ae1c-a23abfda7b3f.roa File: 945213fa-6234-338b-ae1c-a23abfda7b3f.roa (raw, json) Hash identifier: qkT+kcwXiuLVbmK9ScYhYQFqpOLvKkJZBlUMoTN7Yik= Subject key identifier: E7:01:FC:59:8D:9A:A0:D0:9D:A3:9D:5C:E9:E9:28:FF:5A:2D:2A:45 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B43F381F121D966BA71420380 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/945213fa-6234-338b-ae1c-a23abfda7b3f.roa Signing time: Sun 21 Sep 2025 06:37:30 +0000 ROA not before: Sun 21 Sep 2025 06:37:30 +0000 ROA not after: Sat 20 Dec 2025 07:37:30 +0000 asID: 10794 IP address blocks: 171.161.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:f3:81:f1:21:d9:66:ba:71:42:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 21 06:37:30 2025 GMT Not After : Dec 20 07:37:30 2025 GMT Subject: CN=2e332edb-e35c-4422-9391-8d2fe4313ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e1:94:93:56:49:a0:c3:36:01:1e:7c:70:7b: d5:86:8c:6f:7a:d8:90:08:e6:8f:5a:d0:41:fc:e7: 6b:54:d8:71:fb:62:35:f4:58:8d:16:72:7b:5d:63: 92:6f:37:6e:78:d1:1e:eb:8e:b8:e9:ef:49:92:f3: 07:a0:a2:4d:9b:ee:73:98:c2:7d:01:80:50:dd:03: 02:8d:21:a7:54:23:7f:b5:cf:d3:13:e0:96:cc:a4: 67:ee:22:7c:79:07:32:2b:8f:27:80:9c:66:f5:10: bb:dd:0f:b7:ee:c1:76:78:e2:e8:a1:be:06:46:97: d9:64:92:c2:82:9a:6e:9d:e3:f4:97:e4:b0:65:f0: 2d:86:39:aa:dc:f7:aa:8f:7d:c0:39:99:b1:be:73: ea:36:b4:80:ce:db:ee:e3:2a:65:9f:87:c6:fb:1f: d0:8a:01:24:e6:9e:bc:5d:85:e7:3a:61:f2:9b:0b: 4d:a0:b0:45:92:25:88:57:6c:d4:8e:4a:eb:14:e4: 73:eb:ce:da:1f:15:65:b4:22:d2:c7:82:91:bd:fb: f7:0c:51:a5:31:f4:cd:80:8c:1b:78:87:27:92:70: 18:24:70:2f:52:ab:cc:bb:5c:72:c3:4f:f8:c2:5b: 8c:46:50:6e:d5:c1:0e:63:7d:4d:57:cc:95:75:5d: 56:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:01:FC:59:8D:9A:A0:D0:9D:A3:9D:5C:E9:E9:28:FF:5A:2D:2A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/945213fa-6234-338b-ae1c-a23abfda7b3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d6:91:7f:71:e3:eb:71:34:28:48:f1:97:e0:33:36:d3:c6: e0:8d:12:f2:9d:22:c4:84:19:36:e2:8f:36:61:e8:dd:f5:d9: e2:4a:d9:f9:4c:9a:72:9b:f9:cb:87:3f:5d:7a:24:0d:8f:39: ae:a5:50:fc:a7:c3:5b:7b:da:7c:1d:32:f4:70:7b:ae:06:55: d1:37:6f:84:a5:ce:c5:29:13:c3:f2:9e:fc:5c:2a:65:0d:97: ea:72:4b:d1:59:5c:83:bf:1a:bf:28:d5:d2:9c:a6:b8:87:e2: 54:f2:e0:81:1e:68:21:70:10:e7:eb:7e:22:fb:95:28:7c:3f: e6:10:63:79:58:05:73:f4:54:e9:5c:1f:4b:81:70:91:c6:3f: bc:fc:0c:4e:f7:ac:ed:b4:bd:c3:64:48:87:96:ac:71:8c:d9: b0:db:3b:13:c8:92:65:68:ae:c2:24:cd:2f:01:bb:25:9a:d9: d0:fa:37:68:60:33:44:41:cc:bd:50:62:f4:b3:a0:3f:83:b0: e5:8b:f9:53:46:7a:63:3d:ca:cb:df:bd:71:98:d7:26:13:52: 35:e4:ca:f5:4a:49:ae:40:fd:f9:7a:ed:41:4c:c7:d9:ac:01: c9:72:3f:b1:da:3a:05:6e:12:c9:24:58:e0:a4:72:fa:6a:e9: 35:b7:e3:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtD84HxIdlmunFCA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyMTA2MzczMFoXDTI1MTIyMDA3MzczMFowLzEtMCsGA1UEAxMk MmUzMzJlZGItZTM1Yy00NDIyLTkzOTEtOGQyZmU0MzEzYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+GUk1ZJoMM2AR58cHvVhoxvetiQCOaPWtBB /OdrVNhx+2I19FiNFnJ7XWOSbzdueNEe64646e9JkvMHoKJNm+5zmMJ9AYBQ3QMC jSGnVCN/tc/TE+CWzKRn7iJ8eQcyK48ngJxm9RC73Q+37sF2eOLoob4GRpfZZJLC gppuneP0l+SwZfAthjmq3Peqj33AOZmxvnPqNrSAztvu4ypln4fG+x/QigEk5p68 XYXnOmHymwtNoLBFkiWIV2zUjkrrFORz687aHxVltCLSx4KRvfv3DFGlMfTNgIwb eIcnknAYJHAvUqvMu1xyw0/4wluMRlBu1cEOY31NV8yVdV1W8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcB/FmNmqDQnaOdXOnpKP9aLSpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvOTQ1MjEzZmEtNjIzNC0z MzhiLWFlMWMtYTIzYWJmZGE3YjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6E1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATWkX9x4+txNChI8ZfgMzbTxuCNEvKdIsSEGTbijzZh6N312eJK2flM mnKb+cuHP116JA2POa6lUPynw1t72nwdMvRwe64GVdE3b4SlzsUpE8PynvxcKmUN l+pyS9FZXIO/Gr8o1dKcpriH4lTy4IEeaCFwEOfrfiL7lSh8P+YQY3lYBXP0VOlc H0uBcJHGP7z8DE73rO20vcNkSIeWrHGM2bDbOxPIkmVorsIkzS8BuyWa2dD6N2hg M0RBzL1QYvSzoD+DsOWL+VNGemM9ysvfvXGY1yYTUjXkyvVKSa5A/fl67UFMx9ms AclyP7HaOgVuEskkWOCkcvpq6TW34+Y= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:02 2025 by rpki-client