$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9a9923ae-7a0e-3e14-8809-47fccc39d6ee.roa File: 9a9923ae-7a0e-3e14-8809-47fccc39d6ee.roa (raw, json) Hash identifier: m1DlFoOIii62PQpF59+Tzm6KSd+9n+GRNRo5aAXYgzk= Subject key identifier: 2B:63:18:F6:33:00:1F:90:68:88:5D:7B:28:64:76:10:F8:B9:FE:A8 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B43F4AB88BBAE580B5D944CC0 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9a9923ae-7a0e-3e14-8809-47fccc39d6ee.roa Signing time: Sun 21 Sep 2025 06:39:50 +0000 ROA not before: Sun 21 Sep 2025 06:39:50 +0000 ROA not after: Sat 20 Dec 2025 07:39:50 +0000 asID: 10794 IP address blocks: 171.161.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:f4:ab:88:bb:ae:58:0b:5d:94:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 21 06:39:50 2025 GMT Not After : Dec 20 07:39:50 2025 GMT Subject: CN=a46f0250-ae42-4bba-ad13-2d47e31def3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:86:77:f0:ed:36:d5:b1:ad:b5:40:54:cd:42: c0:d9:55:4f:18:9b:f3:cf:d3:63:ac:57:e5:42:8d: 2f:1c:f8:79:4c:76:1b:72:95:50:98:4c:56:a1:38: 15:64:2f:e2:82:5e:81:2a:3c:ef:5d:16:8d:2d:e2: 24:19:88:16:ce:7d:b3:b1:33:f4:0d:3e:c4:15:4b: cf:65:3c:ee:a1:be:13:b3:9b:4e:48:98:5f:11:f6: 10:44:c7:6d:9a:de:50:bd:96:76:3e:16:70:2c:a0: 34:71:09:d9:15:06:ab:0a:b9:6d:fa:c7:d1:61:ae: 15:b8:0e:03:e6:45:b6:a3:9a:29:aa:77:12:5e:d0: 38:af:d1:e6:00:b7:5a:c2:cb:ba:72:09:7a:8d:2d: 52:41:07:45:4d:da:88:d0:8a:a4:5b:e9:43:84:51: 5b:d6:47:cd:41:c4:77:e6:01:74:f7:f0:08:17:6d: db:64:61:36:67:4a:08:06:c1:20:65:3b:91:14:41: 80:b5:10:5b:d7:ad:64:1e:58:26:c3:b8:43:05:10: 62:02:d1:ef:14:c5:b4:db:51:90:e5:dc:98:cc:c9: 86:a1:16:cf:5e:4c:8f:2e:7b:6a:ea:77:97:8e:c1: 8d:d2:7b:04:44:3a:37:06:7d:a0:c6:75:f9:cf:33: a1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:63:18:F6:33:00:1F:90:68:88:5D:7B:28:64:76:10:F8:B9:FE:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9a9923ae-7a0e-3e14-8809-47fccc39d6ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:7b:87:aa:7e:35:13:aa:9a:2b:69:a1:1d:d2:d2:2c:92:11: 2c:c5:fb:8c:8d:f5:f0:82:ed:08:68:1f:ef:14:c5:dd:44:56: d6:2b:0d:33:1b:55:c7:a1:7b:de:7a:21:01:31:eb:49:6a:60: 0d:64:d6:a5:cb:3c:ce:7e:ec:c8:51:39:b3:cd:a6:42:11:ed: c6:1c:b7:f9:60:15:60:03:79:19:f7:1c:76:d6:f2:a4:0c:6a: 5f:a5:21:3a:51:20:6b:cf:eb:75:5d:91:ca:dd:5c:fd:9f:d6: 50:ee:b5:78:4d:16:60:77:56:f9:dd:39:f7:2d:fc:58:e1:3f: 56:58:29:6c:b3:30:81:cd:80:2f:4c:6c:d2:6b:f3:2e:eb:1f: 78:93:ff:69:8a:1d:34:db:a6:e4:c7:a2:04:94:21:9e:3f:01: b1:3e:f8:2d:3e:62:6b:a3:c8:1f:77:9d:46:dc:00:e7:e1:21: 5e:ad:c8:5b:4d:be:ce:ce:99:79:dd:c0:31:ac:fa:e1:04:ac: 96:ab:1c:6c:2b:50:de:d7:4f:6d:3c:4b:42:ea:8d:9a:ec:c8: 83:37:f5:2c:aa:68:8f:5c:31:7b:09:3c:63:ab:06:f6:77:3a: 31:43:77:72:9f:5d:76:3b:bc:f2:00:0f:96:ab:ea:72:94:f7: 59:9f:cf:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtD9KuIu65YC12UTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyMTA2Mzk1MFoXDTI1MTIyMDA3Mzk1MFowLzEtMCsGA1UEAxMk YTQ2ZjAyNTAtYWU0Mi00YmJhLWFkMTMtMmQ0N2UzMWRlZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oZ38O021bGttUBUzULA2VVPGJvzz9NjrFfl Qo0vHPh5THYbcpVQmExWoTgVZC/igl6BKjzvXRaNLeIkGYgWzn2zsTP0DT7EFUvP ZTzuob4Ts5tOSJhfEfYQRMdtmt5QvZZ2PhZwLKA0cQnZFQarCrlt+sfRYa4VuA4D 5kW2o5opqncSXtA4r9HmALdawsu6cgl6jS1SQQdFTdqI0IqkW+lDhFFb1kfNQcR3 5gF09/AIF23bZGE2Z0oIBsEgZTuRFEGAtRBb161kHlgmw7hDBRBiAtHvFMW021GQ 5dyYzMmGoRbPXkyPLntq6neXjsGN0nsERDo3Bn2gxnX5zzOhYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtjGPYzAB+QaIhdeyhkdhD4uf6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvOWE5OTIzYWUtN2EwZS0z ZTE0LTg4MDktNDdmY2NjMzlkNmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6E4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH17h6p+NROqmitpoR3S0iySESzF+4yN9fCC7QhoH+8Uxd1EVtYrDTMb Vcehe956IQEx60lqYA1k1qXLPM5+7MhRObPNpkIR7cYct/lgFWADeRn3HHbW8qQM al+lITpRIGvP63VdkcrdXP2f1lDutXhNFmB3VvndOfct/FjhP1ZYKWyzMIHNgC9M bNJr8y7rH3iT/2mKHTTbpuTHogSUIZ4/AbE++C0+YmujyB93nUbcAOfhIV6tyFtN vs7OmXndwDGs+uEErJarHGwrUN7XT208S0LqjZrsyIM39SyqaI9cMXsJPGOrBvZ3 OjFDd3KfXXY7vPIAD5ar6nKU91mfz5s= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:37 2025 by rpki-client