$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/945213fa-6234-338b-ae1c-a23abfda7b3f.roa File: 945213fa-6234-338b-ae1c-a23abfda7b3f.roa (raw, json) Hash identifier: a4cgyCu/VjkUjL1aD6PWj216+9n2/5XePVTqcfBcdZQ= Subject key identifier: 1D:8A:C9:67:A3:E2:45:27:B5:2C:80:8E:AA:5E:2D:CB:95:8F:41:F0 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584F49741DC054330A8B07981680 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/945213fa-6234-338b-ae1c-a23abfda7b3f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10794 IP address blocks: 171.161.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:1d:c0:54:33:0a:8b:07:98:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9f82afb1-8eac-4518-a9e8-67b6e9e8820c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:ad:32:f6:41:de:db:66:31:38:89:cc:06: c3:23:a7:88:8e:da:5f:f6:82:f2:9d:4e:4d:4b:0e: 02:18:bc:1f:5d:5e:43:12:e6:90:50:2a:3e:55:d8: eb:a9:95:57:fe:3c:f5:60:2a:50:09:d4:2b:27:d6: ae:0a:b6:be:d5:9b:d0:db:19:48:61:47:b4:d1:ec: ce:43:b3:96:98:5f:13:81:fc:ed:77:8b:95:92:31: 8c:c1:ef:25:81:2c:2a:78:b6:f9:c8:b4:e9:cf:83: a9:20:ed:dd:56:5a:4c:a1:1c:c6:be:54:5a:67:1a: e8:f2:c8:9d:b1:69:1f:7d:41:d4:9c:d2:98:a5:2d: 2f:61:d8:37:9f:19:e0:04:c7:80:6c:ee:b3:73:2b: 83:e6:4d:0d:a5:94:ce:3b:02:3c:11:14:3f:4a:90: 6a:a5:f7:78:15:fd:f3:bc:84:de:57:ef:4a:38:86: 3b:e3:db:58:a9:e4:0c:54:94:ae:62:27:33:20:6d: 24:49:3a:81:20:43:7f:4f:b8:a1:02:29:bd:36:71: 73:ec:bd:2d:43:1b:ce:39:da:26:5e:60:39:ac:bd: 86:cd:06:e4:25:1f:ef:9a:1d:06:8b:c5:61:d2:ed: b9:57:c1:68:df:a2:03:b5:eb:22:55:f8:4d:dd:91: 44:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8A:C9:67:A3:E2:45:27:B5:2C:80:8E:AA:5E:2D:CB:95:8F:41:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/945213fa-6234-338b-ae1c-a23abfda7b3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:2f:60:2e:1e:a3:67:7e:2b:03:91:05:1f:e4:d3:6d:83:15: 6d:53:59:31:b0:d1:9c:6c:77:eb:d3:02:b5:6f:e6:13:22:d1: 47:0e:6b:6a:c5:2e:ab:4e:2e:61:0e:06:20:11:e2:90:61:5a: 30:b1:59:3b:9a:a1:b9:f3:ec:18:21:c4:5f:f1:35:6c:9f:aa: 0b:4e:cd:d1:31:5a:00:f8:8e:3f:47:f6:58:96:18:a0:cb:bb: a8:ea:60:36:91:44:09:ce:a8:7d:0c:e2:cc:f1:14:40:c8:a4: 80:92:6d:37:7f:a3:d5:14:70:30:71:86:5f:f4:12:38:bd:6b: df:59:a7:0d:84:ac:f2:6c:f9:84:1c:9f:fa:a4:ea:ce:42:19: fe:92:17:19:4a:bb:a8:89:8c:a0:90:6d:55:6b:ae:64:b1:17: 93:4e:f4:88:21:27:bc:be:74:b9:6b:cd:70:ca:11:b9:83:ff: ff:7e:7d:84:d0:2a:27:3a:29:3f:75:73:75:79:fc:67:fd:e1: ba:22:b2:5a:28:54:e5:9c:25:31:de:1c:99:bd:e0:41:66:64: 4e:0f:6f:a6:59:a4:68:fc:9d:32:44:21:90:b3:d9:e0:34:e5: fc:76:ea:89:ec:52:89:0f:0a:d2:b3:79:ce:fb:09:f6:bc:e2: 7d:e3:bf:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdB3AVDMKiweYFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWY4MmFmYjEtOGVhYy00NTE4LWE5ZTgtNjdiNmU5ZTg4MjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgmtMvZB3ttmMTiJzAbDI6eIjtpf9oLynU5N Sw4CGLwfXV5DEuaQUCo+VdjrqZVX/jz1YCpQCdQrJ9auCra+1ZvQ2xlIYUe00ezO Q7OWmF8Tgfztd4uVkjGMwe8lgSwqeLb5yLTpz4OpIO3dVlpMoRzGvlRaZxro8sid sWkffUHUnNKYpS0vYdg3nxngBMeAbO6zcyuD5k0NpZTOOwI8ERQ/SpBqpfd4Ff3z vITeV+9KOIY749tYqeQMVJSuYiczIG0kSTqBIEN/T7ihAim9NnFz7L0tQxvOOdom XmA5rL2GzQbkJR/vmh0Gi8Vh0u25V8Fo36IDtesiVfhN3ZFEaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2KyWej4kUntSyAjqpeLcuVj0HwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvOTQ1MjEzZmEtNjIzNC0z MzhiLWFlMWMtYTIzYWJmZGE3YjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6E1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4vYC4eo2d+KwORBR/k022DFW1TWTGw0Zxsd+vTArVv5hMi0UcOa2rF LqtOLmEOBiAR4pBhWjCxWTuaobnz7BghxF/xNWyfqgtOzdExWgD4jj9H9liWGKDL u6jqYDaRRAnOqH0M4szxFEDIpICSbTd/o9UUcDBxhl/0Eji9a99Zpw2ErPJs+YQc n/qk6s5CGf6SFxlKu6iJjKCQbVVrrmSxF5NO9IghJ7y+dLlrzXDKEbmD//9+fYTQ Kic6KT91c3V5/Gf94boislooVOWcJTHeHJm94EFmZE4Pb6ZZpGj8nTJEIZCz2eA0 5fx26onsUokPCtKzec77Cfa84n3jv2g= -----END CERTIFICATE-----Generated at Sun Sep 27 06:11:36 2026 by rpki-client