$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c21df20d-d0de-3450-8ddb-0d5d4315b258.roa File: c21df20d-d0de-3450-8ddb-0d5d4315b258.roa (raw, json) Hash identifier: CRGnZzYx97H9T8WNZ4M8JihCP3+w6bTU+BjS7R1+GtI= Subject key identifier: FB:52:BF:07:6A:6B:BC:15:4A:33:F5:3D:75:5F:19:8B:20:61:77:2B Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B609CB7C2B888A0B9C0D8E500 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c21df20d-d0de-3450-8ddb-0d5d4315b258.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 10794 IP address blocks: 171.162.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:b7:c2:b8:88:a0:b9:c0:d8:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=78953008-f8ca-43b6-ae79-ff0673e33ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:bc:3f:6c:9d:45:25:13:d8:36:9b:ca:1a: 6a:27:6a:e1:8b:ec:90:cf:8c:ed:8c:aa:de:67:c7: 71:03:9d:20:4b:4f:5a:93:7c:83:e4:d9:2b:42:f9: cc:df:4b:7e:5e:da:e3:5e:c7:22:cd:00:72:ac:33: e5:7d:dc:8f:f6:a0:aa:4e:93:99:a0:be:23:d8:53: e2:c6:c7:80:bc:d8:57:db:76:b1:d3:44:8e:86:85: 76:f3:c2:5f:79:27:42:e0:35:3e:99:49:13:ff:c6: 5f:ec:be:ef:65:40:f7:b4:b2:15:9e:5c:f1:1c:1d: 2d:11:45:63:d2:a8:68:a1:eb:24:e1:1f:25:ed:7a: 24:0c:cb:1e:05:04:0f:5b:86:4c:c8:ed:3a:6c:c7: 03:c1:19:4b:0e:4c:6f:24:c4:f7:34:29:d0:58:86: 10:fe:2d:e6:4e:4e:78:f5:51:04:d1:92:35:a0:5f: bf:cc:39:88:21:44:90:5a:10:bc:21:53:e9:c8:c4: 29:10:79:73:8d:15:ec:12:d0:85:9e:bc:82:f9:a9: fe:1d:a0:45:6d:2c:6d:93:e0:4b:03:49:69:4b:e1: 2d:74:13:03:3e:90:30:21:8f:85:e4:d0:52:21:a8: 2d:37:4b:84:52:02:9a:e2:05:c5:30:d9:1c:f7:56: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:52:BF:07:6A:6B:BC:15:4A:33:F5:3D:75:5F:19:8B:20:61:77:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c21df20d-d0de-3450-8ddb-0d5d4315b258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:20:29:68:49:83:b0:da:d1:95:a5:e7:2f:43:d8:fe:bd:d9: d5:5d:1a:17:d5:4b:71:cf:c8:c7:a0:bb:5c:33:cb:84:19:ad: 65:a9:1e:f1:38:c5:98:22:e8:9b:c1:ed:67:e9:00:7b:b9:1d: 4c:ef:fe:42:fb:0a:e7:0c:76:3c:bd:fa:d8:21:9a:97:37:c7: c1:1c:ed:37:e1:f4:6c:13:f0:01:a3:d6:69:46:c6:a0:a1:fd: 7d:81:91:fa:9b:b9:b5:37:92:2d:4c:39:0b:2e:20:8f:18:bb: b8:76:5d:b8:69:36:6d:1d:df:1c:4a:c7:c8:bc:89:42:00:2e: c4:e3:29:5b:e4:d8:62:2b:bc:06:b7:57:36:7e:5a:23:86:92: d0:71:ff:a3:90:90:4a:14:c4:85:e1:21:2c:55:6c:11:01:0b: df:b3:a6:05:ab:21:cb:02:3d:c6:42:86:a5:5e:74:bf:b0:a4: 8f:f1:b9:f3:33:8a:a8:67:8b:15:5c:47:c7:10:8b:64:7a:7a: 6a:ef:a3:db:6f:6b:e4:fd:34:a1:7c:63:9e:67:ad:8e:46:ad: b9:e1:21:de:d1:09:8a:9b:3f:67:15:ed:a7:a6:7f:a8:1f:50: ab:ae:bf:92:0f:45:33:2c:30:fa:4e:0d:1c:b5:7e:8a:56:0a: 12:0f:a1:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnLfCuIigucDY5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk Nzg5NTMwMDgtZjhjYS00M2I2LWFlNzktZmYwNjczZTMzY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV+8P2ydRSUT2DabyhpqJ2rhi+yQz4ztjKre Z8dxA50gS09ak3yD5NkrQvnM30t+XtrjXscizQByrDPlfdyP9qCqTpOZoL4j2FPi xseAvNhX23ax00SOhoV288JfeSdC4DU+mUkT/8Zf7L7vZUD3tLIVnlzxHB0tEUVj 0qhooesk4R8l7XokDMseBQQPW4ZMyO06bMcDwRlLDkxvJMT3NCnQWIYQ/i3mTk54 9VEE0ZI1oF+/zDmIIUSQWhC8IVPpyMQpEHlzjRXsEtCFnryC+an+HaBFbSxtk+BL A0lpS+EtdBMDPpAwIY+F5NBSIagtN0uEUgKa4gXFMNkc91awKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtSvwdqa7wVSjP1PXVfGYsgYXcrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYzIxZGYyMGQtZDBkZS0z NDUwLThkZGItMGQ1ZDQzMTViMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4gKWhJg7Da0ZWl5y9D2P692dVdGhfVS3HPyMegu1wzy4QZrWWpHvE4 xZgi6JvB7WfpAHu5HUzv/kL7CucMdjy9+tghmpc3x8Ec7Tfh9GwT8AGj1mlGxqCh /X2BkfqbubU3ki1MOQsuII8Yu7h2XbhpNm0d3xxKx8i8iUIALsTjKVvk2GIrvAa3 VzZ+WiOGktBx/6OQkEoUxIXhISxVbBEBC9+zpgWrIcsCPcZChqVedL+wpI/xufMz iqhnixVcR8cQi2R6emrvo9tva+T9NKF8Y55nrY5GrbnhId7RCYqbP2cV7aemf6gf UKuuv5IPRTMsMPpODRy1fopWChIPoUg= -----END CERTIFICATE-----Generated at Mon Oct 20 22:47:02 2025 by rpki-client