$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9cf61c90-7278-3d9d-b0dd-928ab1af8547.roa File: 9cf61c90-7278-3d9d-b0dd-928ab1af8547.roa (raw, json) Hash identifier: P2CopmS3ADCf7/Pcxb9h9mACLqiNmC+p2qg0CEPnnL0= Subject key identifier: E2:C3:E1:77:9D:97:A0:99:83:B9:6D:56:BD:6D:DB:FA:F0:2A:40:D6 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B43AA370CE2138D0EF2FB9380 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9cf61c90-7278-3d9d-b0dd-928ab1af8547.roa Signing time: Sun 21 Sep 2025 04:09:49 +0000 ROA not before: Sun 21 Sep 2025 04:09:49 +0000 ROA not after: Sat 20 Dec 2025 05:09:49 +0000 asID: 10794 IP address blocks: 171.161.152.0/22 maxlen: 22 171.161.152.0/24 maxlen: 24 171.161.153.0/24 maxlen: 24 171.161.154.0/23 maxlen: 23 171.161.154.0/24 maxlen: 24 171.161.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:aa:37:0c:e2:13:8d:0e:f2:fb:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 21 04:09:49 2025 GMT Not After : Dec 20 05:09:49 2025 GMT Subject: CN=842ab348-3c5b-4d28-a7c1-ddb15e6bc1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a1:2e:2c:1e:42:f9:f3:e1:77:25:5c:f4:fe: bf:0c:87:eb:24:f3:e7:08:e0:ea:80:ee:8d:6d:65: f9:5c:4e:e3:0b:87:46:d2:32:72:70:83:ec:5b:7e: 29:91:a0:98:5b:62:91:f3:61:32:35:74:cb:59:cb: d8:19:62:a3:4a:d5:5a:6b:34:36:f7:4b:a4:fe:8f: 53:ac:8c:d7:19:5a:a8:1f:b7:8d:4b:0b:e8:ee:70: 34:16:9d:99:be:15:9b:0f:41:95:b3:8a:ce:f9:6e: 38:4d:3e:f9:40:dc:ff:5b:15:ef:dd:a5:f3:05:7e: 9f:75:3d:c7:7c:f0:f7:49:8e:d0:27:0b:ab:fd:d6: dd:b3:98:8f:dc:36:48:07:ae:a9:9d:96:6a:7d:42: c9:21:ca:f3:21:e1:a9:a8:0c:27:5f:68:fa:ce:9b: 8e:4a:2c:1a:29:69:ae:2f:b7:f2:ad:8c:e1:88:b6: cc:66:7a:4b:e9:ad:a2:85:25:9d:fb:2c:09:25:0c: 74:33:40:99:a2:e2:45:23:96:b2:73:d8:b0:36:ce: b4:02:52:b9:49:17:32:3a:60:41:d5:19:7e:cd:be: 55:a3:a0:e3:41:e3:73:ac:4a:af:80:90:57:89:cc: e8:1b:49:b5:25:94:4d:4b:95:f5:dd:5a:61:3a:c3: 53:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C3:E1:77:9D:97:A0:99:83:B9:6D:56:BD:6D:DB:FA:F0:2A:40:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9cf61c90-7278-3d9d-b0dd-928ab1af8547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a4:14:f6:e3:73:2d:e1:7e:28:7f:83:40:da:ef:23:fb:fc: 57:5b:4c:94:57:e8:6b:08:dd:52:c6:97:7b:d9:42:2f:f9:cb: 2f:50:ef:e7:fd:90:97:0c:a6:c7:7f:08:50:4f:f3:d8:8c:76: 0e:0b:98:40:aa:9c:52:c4:b3:6d:64:c3:27:b4:86:d1:2d:d9: cf:27:b6:74:6d:07:35:cc:9b:b7:c5:a2:f2:ee:4b:42:9a:39: 3c:fb:51:56:29:93:f0:aa:9d:42:a1:50:cf:7b:df:6e:a1:9d: 32:88:17:73:97:a6:a5:5e:02:07:69:7b:7d:80:31:30:bf:4b: ca:9b:ee:7a:2d:69:af:25:65:b8:29:8e:9d:41:a0:a5:9d:08: a7:b3:55:0a:fc:09:e2:4b:ae:e4:e2:97:1c:6d:e6:07:f1:29: 5c:ff:d2:89:39:49:4e:f0:84:c8:00:92:19:98:35:c9:e5:0d: c2:aa:1c:0c:e1:6f:ec:b5:ba:be:48:65:fd:08:eb:6c:27:e1: 2a:bb:cf:73:1c:bd:9f:b7:41:a0:06:ca:53:ef:f5:3a:75:f5: 58:84:89:94:a0:1c:c0:36:d4:1b:b7:a8:c0:56:79:e9:70:80: 29:bb:0a:b1:e9:42:8a:60:08:47:13:27:0e:f6:f3:eb:df:e6: 74:8e:07:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDqjcM4hONDvL7k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyMTA0MDk0OVoXDTI1MTIyMDA1MDk0OVowLzEtMCsGA1UEAxMk ODQyYWIzNDgtM2M1Yi00ZDI4LWE3YzEtZGRiMTVlNmJjMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKEuLB5C+fPhdyVc9P6/DIfrJPPnCODqgO6N bWX5XE7jC4dG0jJycIPsW34pkaCYW2KR82EyNXTLWcvYGWKjStVaazQ290uk/o9T rIzXGVqoH7eNSwvo7nA0Fp2ZvhWbD0GVs4rO+W44TT75QNz/WxXv3aXzBX6fdT3H fPD3SY7QJwur/dbds5iP3DZIB66pnZZqfULJIcrzIeGpqAwnX2j6zpuOSiwaKWmu L7fyrYzhiLbMZnpL6a2ihSWd+ywJJQx0M0CZouJFI5ayc9iwNs60AlK5SRcyOmBB 1Rl+zb5Vo6DjQeNzrEqvgJBXiczoG0m1JZRNS5X13VphOsNTkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLD4Xedl6CZg7ltVr1t2/rwKkDWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvOWNmNjFjOTAtNzI3OC0z ZDlkLWIwZGQtOTI4YWIxYWY4NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCq6GYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6kFPbjcy3hfih/g0Da7yP7/FdbTJRX6GsI3VLGl3vZQi/5yy9Q7+f9 kJcMpsd/CFBP89iMdg4LmECqnFLEs21kwye0htEt2c8ntnRtBzXMm7fFovLuS0Ka OTz7UVYpk/CqnUKhUM97326hnTKIF3OXpqVeAgdpe32AMTC/S8qb7notaa8lZbgp jp1BoKWdCKezVQr8CeJLruTilxxt5gfxKVz/0ok5SU7whMgAkhmYNcnlDcKqHAzh b+y1ur5IZf0I62wn4Sq7z3McvZ+3QaAGylPv9Tp19ViEiZSgHMA21Bu3qMBWeelw gCm7CrHpQopgCEcTJw728+vf5nSOB2I= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:52 2025 by rpki-client