$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ae141b50-3702-31e2-a6c9-34f8e3ab076f.roa File: ae141b50-3702-31e2-a6c9-34f8e3ab076f.roa (raw, json) Hash identifier: lfmf4OoUJo/CdYM0q3h0a1/RFYxi7zAlW2fxFZMmhWw= Subject key identifier: 01:E6:D4:D4:D3:05:7B:D1:11:19:5B:CC:73:BB:C2:D8:81:D3:1A:BF Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B52A756D20581F3ABD5245740 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ae141b50-3702-31e2-a6c9-34f8e3ab076f.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 19886 IP address blocks: 171.162.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:56:d2:05:81:f3:ab:d5:24:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=c069fcc1-af1c-486f-a949-1b8063c06ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:81:0a:c4:df:24:6d:e7:7a:c5:29:1a:09: 7c:2e:c0:34:21:0d:47:f9:f6:5c:9e:0a:63:9d:aa: 78:1b:68:bb:98:26:3e:99:3e:75:28:79:61:4e:04: 76:4e:8f:b3:2a:85:d8:c0:26:9e:4e:21:43:e1:72: 35:8e:b8:0b:2c:d6:c6:ff:58:dc:c1:1d:c5:9e:d9: b6:7c:00:00:ee:a5:9e:ce:53:d1:2a:c2:d2:9b:36: b6:a8:3b:8e:3f:b2:0d:e2:9b:3d:9b:28:96:d1:02: c5:9d:79:79:ee:27:0a:b8:97:48:07:7c:8a:2f:8c: 02:09:22:65:cc:9e:3a:0e:56:c1:8c:7a:83:fa:04: 48:81:30:19:c7:4a:05:e6:86:da:7d:3b:83:76:59: d3:3b:df:03:61:c3:46:8d:53:d3:68:44:64:72:d3: 4a:92:ae:f4:df:4e:28:2f:67:f1:fa:60:7d:0d:a4: 7b:9b:4f:1a:6b:41:71:b5:2d:35:91:bb:47:09:dd: 81:b1:d0:1e:31:f0:ae:fe:62:e0:eb:a5:89:7c:db: 16:b4:ca:72:ee:b9:dc:1f:08:56:3e:31:d8:05:22: 3f:26:bc:4b:9b:e6:0b:e2:77:d1:b1:4b:a9:ed:74: 09:66:fc:27:b4:db:8f:18:81:7a:4c:d5:b0:2f:a9: 64:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E6:D4:D4:D3:05:7B:D1:11:19:5B:CC:73:BB:C2:D8:81:D3:1A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ae141b50-3702-31e2-a6c9-34f8e3ab076f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:93:ee:2d:1e:b3:dd:2d:15:a4:55:42:18:6a:11:bf:07:e5: f2:b0:70:6e:42:74:a1:b1:9f:e0:e0:26:f6:58:42:5d:ec:64: 02:bf:22:c7:4d:65:72:64:90:ce:7c:a5:79:2a:7e:28:4a:71: e4:60:f7:9a:4a:5a:46:ac:5f:07:b0:61:0c:5a:59:37:cc:40: 32:a3:22:d9:45:5d:11:24:b1:67:c4:be:39:b3:79:11:0a:e5: ff:0c:cf:4f:ca:2a:5e:53:55:ae:62:6a:d5:df:21:df:7a:3c: 62:2e:5f:36:b4:25:61:dc:0d:23:9e:eb:b3:55:c8:96:ba:cc: 1d:99:47:9a:00:93:54:50:7b:c4:54:ea:4f:b8:4c:35:e2:73: c2:6d:10:79:71:f2:90:d2:90:f0:b7:7c:e2:d3:21:78:81:37: 24:53:8b:d4:c9:53:f4:f0:9b:92:51:ac:0c:65:79:f6:eb:ee: 95:da:4a:08:16:e0:10:ff:14:e1:c8:c9:68:05:8c:92:49:f2: 23:15:56:3a:1e:a9:46:76:c3:b2:a2:1e:47:b8:8b:6b:34:81: e1:6c:bd:bb:e6:bd:80:2f:41:eb:08:a8:83:2c:6b:02:76:cd: ed:f7:dd:67:4d:fd:0e:fb:cb:1e:0c:b1:0f:f3:7d:c4:3d:0c: ac:7d:ad:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1bSBYHzq9UkV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YzA2OWZjYzEtYWYxYy00ODZmLWE5NDktMWI4MDYzYzA2YWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUeBCsTfJG3nesUpGgl8LsA0IQ1H+fZcngpj nap4G2i7mCY+mT51KHlhTgR2To+zKoXYwCaeTiFD4XI1jrgLLNbG/1jcwR3Fntm2 fAAA7qWezlPRKsLSmza2qDuOP7IN4ps9myiW0QLFnXl57icKuJdIB3yKL4wCCSJl zJ46DlbBjHqD+gRIgTAZx0oF5obafTuDdlnTO98DYcNGjVPTaERkctNKkq70304o L2fx+mB9DaR7m08aa0FxtS01kbtHCd2BsdAeMfCu/mLg66WJfNsWtMpy7rncHwhW PjHYBSI/JrxLm+YL4nfRsUup7XQJZvwntNuPGIF6TNWwL6lkcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHm1NTTBXvRERlbzHO7wtiB0xq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYWUxNDFiNTAtMzcwMi0z MWUyLWE2YzktMzRmOGUzYWIwNzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6LhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqT7i0es90tFaRVQhhqEb8H5fKwcG5CdKGxn+DgJvZYQl3sZAK/IsdN ZXJkkM58pXkqfihKceRg95pKWkasXwewYQxaWTfMQDKjItlFXREksWfEvjmzeREK 5f8Mz0/KKl5TVa5iatXfId96PGIuXza0JWHcDSOe67NVyJa6zB2ZR5oAk1RQe8RU 6k+4TDXic8JtEHlx8pDSkPC3fOLTIXiBNyRTi9TJU/Twm5JRrAxlefbr7pXaSggW 4BD/FOHIyWgFjJJJ8iMVVjoeqUZ2w7KiHke4i2s0geFsvbvmvYAvQesIqIMsawJ2 ze333WdN/Q77yx4MsQ/zfcQ9DKx9rR0= -----END CERTIFICATE-----Generated at Mon Oct 20 16:23:01 2025 by rpki-client