$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9ea08d81-af8e-3287-b9fc-b1dc6973119e.roa File: 9ea08d81-af8e-3287-b9fc-b1dc6973119e.roa (raw, json) Hash identifier: 4KqclfP0h+O8lFe9TBLCrRy/KTBj4hDEbItoq3SLtz8= Subject key identifier: 76:1D:5D:D1:74:D6:B9:D8:4D:5C:9B:AC:55:4C:D5:FC:82:17:54:68 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B52A7559E259F6DAB99260A80 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9ea08d81-af8e-3287-b9fc-b1dc6973119e.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 19886 IP address blocks: 171.162.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:55:9e:25:9f:6d:ab:99:26:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=1ae8fd61-d73b-4237-8ef7-da4cf04713f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:49:36:01:f7:af:c0:8e:67:0f:59:d1:8b: 2c:09:c1:7b:00:25:bb:56:ba:f1:d0:5b:33:a1:8a: 59:91:66:f9:ac:60:f7:cf:3c:bd:c1:2d:be:c5:38: bf:aa:cd:ed:87:f5:db:de:a2:c5:10:ee:52:75:c4: 80:1c:a6:e7:0b:e8:6a:78:89:57:77:32:d7:cc:16: ac:dd:f8:4d:7b:78:fd:cb:a5:d5:84:9b:45:aa:2e: ff:f9:a5:d7:b2:c2:35:a8:56:7e:d2:f1:1b:60:b0: 61:31:81:6c:ec:4c:34:a3:53:be:1f:a9:03:a1:8c: c4:d2:9e:d7:05:18:f1:86:a5:dd:1d:7e:e7:68:39: 2c:2e:0b:83:35:43:66:0c:16:3c:62:5a:bd:7b:d7: d9:1f:87:96:b7:9c:c0:4a:21:bb:fb:77:40:f0:4e: 08:d9:1b:20:8d:31:f6:7b:dd:6e:88:cd:20:1c:ff: f8:8b:71:cc:c8:7b:bd:44:b1:51:67:8f:50:5e:96: b1:ee:98:c9:d0:77:1c:c5:12:7a:28:a6:09:54:60: 1f:11:c3:4f:a9:a3:8c:65:8f:ad:10:c2:cd:9e:3c: 7a:bd:8e:ea:2d:5b:ff:ff:29:41:46:e6:cf:12:67: 22:a7:e1:30:86:3d:1c:0c:d3:d3:35:b0:6b:b0:4c: c2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1D:5D:D1:74:D6:B9:D8:4D:5C:9B:AC:55:4C:D5:FC:82:17:54:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/9ea08d81-af8e-3287-b9fc-b1dc6973119e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:08:29:f0:0b:8b:34:35:11:65:29:7e:74:50:27:8f:bb:0f: 3d:5a:5c:ba:c4:62:f4:03:49:4d:03:4a:f0:52:6a:6e:97:e0: ed:da:3b:e9:03:54:ed:a0:95:16:cc:45:5b:08:3a:e1:1b:4c: 60:6c:2e:7e:48:d3:b1:dc:89:6c:ea:27:5e:bc:7e:20:78:51: 13:dd:57:72:51:5a:8f:18:6b:4f:7a:f5:3e:25:06:f4:bb:a3: 67:c2:07:74:03:bc:3b:0b:ea:d3:4d:0d:72:b4:76:16:d3:ac: 73:74:e6:f0:7f:1c:f7:35:7a:55:36:27:be:77:80:60:7f:4b: 30:41:08:24:8d:db:24:c8:6e:c4:35:62:a2:bf:f7:dc:ac:44: d2:7d:bc:07:34:a6:df:b5:48:b2:94:05:1b:ef:40:38:95:0f: 55:2e:d1:8f:69:24:19:47:9f:1d:d8:80:53:98:a7:d8:83:4f: f3:39:a8:6c:e0:d5:5b:03:ec:cb:d0:d5:78:4d:3f:4e:1a:c6: 1f:54:ee:73:24:81:b3:4c:45:b4:cc:02:61:19:6d:03:0d:10: 28:3c:e6:4c:86:22:66:92:22:84:83:22:5b:2d:42:30:21:e6: 1c:10:ce:a0:43:62:f8:04:a5:f1:ac:70:0d:5b:e7:79:b7:dc: 2f:38:48:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1WeJZ9tq5kmCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MWFlOGZkNjEtZDczYi00MjM3LThlZjctZGE0Y2YwNDcxM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFJJNgH3r8COZw9Z0YssCcF7ACW7Vrrx0Fsz oYpZkWb5rGD3zzy9wS2+xTi/qs3th/Xb3qLFEO5SdcSAHKbnC+hqeIlXdzLXzBas 3fhNe3j9y6XVhJtFqi7/+aXXssI1qFZ+0vEbYLBhMYFs7Ew0o1O+H6kDoYzE0p7X BRjxhqXdHX7naDksLguDNUNmDBY8Ylq9e9fZH4eWt5zASiG7+3dA8E4I2RsgjTH2 e91uiM0gHP/4i3HMyHu9RLFRZ49QXpax7pjJ0HccxRJ6KKYJVGAfEcNPqaOMZY+t EMLNnjx6vY7qLVv//ylBRubPEmcip+Ewhj0cDNPTNbBrsEzC4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYdXdF01rnYTVybrFVM1fyCF1RoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvOWVhMDhkODEtYWY4ZS0z Mjg3LWI5ZmMtYjFkYzY5NzMxMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgIKfALizQ1EWUpfnRQJ4+7Dz1aXLrEYvQDSU0DSvBSam6X4O3aO+kD VO2glRbMRVsIOuEbTGBsLn5I07HciWzqJ168fiB4URPdV3JRWo8Ya0969T4lBvS7 o2fCB3QDvDsL6tNNDXK0dhbTrHN05vB/HPc1elU2J753gGB/SzBBCCSN2yTIbsQ1 YqK/99ysRNJ9vAc0pt+1SLKUBRvvQDiVD1Uu0Y9pJBlHnx3YgFOYp9iDT/M5qGzg 1VsD7MvQ1XhNP04axh9U7nMkgbNMRbTMAmEZbQMNECg85kyGImaSIoSDIlstQjAh 5hwQzqBDYvgEpfGscA1b53m33C84SMI= -----END CERTIFICATE-----Generated at Mon Oct 20 16:23:13 2025 by rpki-client