$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bc41c424-1b99-3383-a74f-f34b0adc3e1d.roa File: bc41c424-1b99-3383-a74f-f34b0adc3e1d.roa (raw, json) Hash identifier: qCEdXD1swJ6uAObSaJd1YmxA7rUp68QGC6bEU86u+WA= Subject key identifier: BD:DD:DC:0E:EB:87:76:AC:21:61:35:DE:28:BB:C8:2A:CA:F8:86:5D Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B441A254D6AE20A5FD768F338 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bc41c424-1b99-3383-a74f-f34b0adc3e1d.roa Signing time: Sun 21 Sep 2025 07:55:21 +0000 ROA not before: Sun 21 Sep 2025 07:55:21 +0000 ROA not after: Sat 20 Dec 2025 08:55:21 +0000 asID: 10794 IP address blocks: 171.161.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:1a:25:4d:6a:e2:0a:5f:d7:68:f3:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 21 07:55:21 2025 GMT Not After : Dec 20 08:55:21 2025 GMT Subject: CN=23b5bd34-3012-4bd8-88c2-a21e286ceabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c8:23:94:09:33:02:d7:7c:5b:45:4a:c7:0a: 01:71:63:ce:b8:2e:58:29:8c:4e:fa:ab:23:c0:1b: 1b:0b:91:53:0e:47:01:f9:02:5d:14:4f:ca:86:60: c0:17:6f:8f:4d:b9:ac:b1:12:d9:a1:7c:7e:da:ea: a0:64:6f:3d:a7:a9:a8:5c:e9:a3:7c:13:a0:a9:e2: 34:65:17:e1:90:5d:83:12:df:0c:57:a0:31:53:63: d3:fd:eb:cd:3c:ab:de:6c:1d:15:1b:f9:38:56:6d: c3:81:87:e9:33:63:59:de:f4:8b:97:21:0b:69:7a: 81:38:b6:49:db:46:38:2d:17:0d:80:25:58:d5:e5: 7f:6e:62:5c:1a:32:03:a9:cb:28:65:51:e3:89:d0: d6:c5:4d:82:9d:70:dc:2b:f9:b1:f1:97:d6:3e:f2: af:c3:02:6a:03:44:a9:6f:51:cc:09:b0:94:37:7c: 54:4a:1b:29:58:e0:9e:43:ec:80:e6:dd:38:96:b9: 50:1c:e0:67:74:f9:58:74:5b:34:b5:70:bf:94:aa: 8f:a6:bb:07:d7:c3:9a:1b:7f:b6:e2:c4:b6:14:bd: 0a:7a:2e:c1:0e:5f:6c:9e:ac:8a:d6:f6:f6:ee:c1: a6:85:9b:85:13:b9:ba:db:45:ba:68:4d:b8:a9:c0: 74:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DD:DC:0E:EB:87:76:AC:21:61:35:DE:28:BB:C8:2A:CA:F8:86:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/bc41c424-1b99-3383-a74f-f34b0adc3e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.161.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:fc:6b:85:f8:6c:46:96:82:10:e4:c2:b4:3f:e5:3b:e9:b2: d9:1a:46:7f:51:91:54:bf:ed:8b:0e:0c:b7:3f:e4:a8:b7:b4: 87:5d:4a:74:66:50:68:82:df:df:da:ec:4c:4a:74:ce:43:91: 97:4c:67:16:46:3c:98:f3:1d:c5:65:e9:28:3f:7d:6b:d7:6b: 26:95:65:11:e6:d3:97:6f:90:d6:ed:72:04:f8:01:c8:43:ed: 70:ee:4e:2e:51:7f:54:e4:55:67:3f:d7:e2:d3:70:58:1f:ee: 00:fd:f2:e2:d6:12:81:6b:a1:6d:b6:87:97:b0:21:01:90:e8: f6:33:ce:37:8c:20:90:6c:e8:4f:f8:de:a4:03:86:53:98:61: 81:55:ca:99:50:c1:4b:7f:54:13:3d:39:f8:33:ec:ef:9d:47: 35:5b:64:df:f1:f6:97:52:a3:a0:f8:a6:7d:52:4a:13:ae:60: 13:cb:da:17:f7:cd:48:36:c6:5c:c9:34:5c:31:f6:9b:c2:79: 5e:68:fb:2d:6e:1e:ae:04:c9:09:c8:73:ea:66:f4:29:f9:85: df:0f:63:8c:e4:c7:4d:6a:fd:70:e0:fd:58:fe:3a:2a:21:a4: 15:c2:45:61:ba:92:25:43:3c:43:2e:c2:bf:75:6a:24:a5:4f: 05:3c:0b:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEGiVNauIKX9do8zgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyMTA3NTUyMVoXDTI1MTIyMDA4NTUyMVowLzEtMCsGA1UEAxMk MjNiNWJkMzQtMzAxMi00YmQ4LTg4YzItYTIxZTI4NmNlYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMgjlAkzAtd8W0VKxwoBcWPOuC5YKYxO+qsj wBsbC5FTDkcB+QJdFE/KhmDAF2+PTbmssRLZoXx+2uqgZG89p6moXOmjfBOgqeI0 ZRfhkF2DEt8MV6AxU2PT/evNPKvebB0VG/k4Vm3DgYfpM2NZ3vSLlyELaXqBOLZJ 20Y4LRcNgCVY1eV/bmJcGjIDqcsoZVHjidDWxU2CnXDcK/mx8ZfWPvKvwwJqA0Sp b1HMCbCUN3xUShspWOCeQ+yA5t04lrlQHOBndPlYdFs0tXC/lKqPprsH18OaG3+2 4sS2FL0Kei7BDl9snqyK1vb27sGmhZuFE7m620W6aE24qcB0RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3d3A7rh3asIWE13ii7yCrK+IZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYmM0MWM0MjQtMWI5OS0z MzgzLWE3NGYtZjM0YjBhZGMzZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6FUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj8a4X4bEaWghDkwrQ/5TvpstkaRn9RkVS/7YsODLc/5Ki3tIddSnRm UGiC39/a7ExKdM5DkZdMZxZGPJjzHcVl6Sg/fWvXayaVZRHm05dvkNbtcgT4AchD 7XDuTi5Rf1TkVWc/1+LTcFgf7gD98uLWEoFroW22h5ewIQGQ6PYzzjeMIJBs6E/4 3qQDhlOYYYFVyplQwUt/VBM9Ofgz7O+dRzVbZN/x9pdSo6D4pn1SShOuYBPL2hf3 zUg2xlzJNFwx9pvCeV5o+y1uHq4EyQnIc+pm9Cn5hd8PY4zkx01q/XDg/Vj+Oioh pBXCRWG6kiVDPEMuwr91aiSlTwU8C4E= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:43 2025 by rpki-client