$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff45b1fc-7070-315b-af69-e349af3a0636.roa File: ff45b1fc-7070-315b-af69-e349af3a0636.roa (raw, json) Hash identifier: ahtGXO0GsRqPo+Nzgjk/4nkgJptG3+M2n7Sma8SNL+0= Subject key identifier: 6A:EE:A5:D0:12:C6:D4:CA:E4:57:FF:78:AC:37:26:BD:D4:31:35:24 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B52A756F6567E0D0CC10C4C20 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff45b1fc-7070-315b-af69-e349af3a0636.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 19886 IP address blocks: 171.162.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:56:f6:56:7e:0d:0c:c1:0c:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=42c9a866-fd40-4283-989e-5f587bcaa718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:87:5d:46:fa:f1:d7:f8:ad:f2:94:29:ee: 46:3f:a2:f6:10:48:62:25:34:4f:a7:b2:00:83:ae: 60:b3:6a:5d:30:ec:47:1d:05:00:a1:bd:fb:74:99: 24:62:7e:98:10:d1:fc:1c:6f:c1:63:96:e7:eb:54: 4f:17:f4:56:50:97:f5:96:2b:b2:8a:63:b5:7a:7d: 7d:5e:c0:ff:6c:1f:c6:55:51:f6:9c:5a:c4:32:0d: 44:85:05:bd:7c:af:41:7a:cb:22:f5:b8:e6:d6:5d: 86:01:ef:8e:8d:a4:de:de:43:7e:b2:a3:e2:c2:43: 41:7e:ca:7a:1f:3b:75:38:93:da:a1:5a:57:40:15: ae:30:03:09:bf:77:bb:d9:44:b7:64:96:37:8e:82: 36:49:52:fd:4d:20:f6:a5:74:84:28:54:e7:be:85: 35:ad:eb:bf:53:06:77:84:9c:99:e1:4d:ef:40:0f: 76:e1:cf:ce:c4:4a:e9:9b:c8:38:a7:d7:52:6e:83: f8:3c:aa:87:01:9c:1a:02:5b:25:f0:34:74:1b:90: 6f:b9:87:12:33:ef:0c:68:a2:d2:97:d4:3a:8d:61: 51:25:8e:59:d6:2a:76:5a:3d:fd:0e:2b:42:a0:2a: 71:b6:fb:1d:a9:1a:85:19:5d:20:79:a3:11:c6:fa: 4f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EE:A5:D0:12:C6:D4:CA:E4:57:FF:78:AC:37:26:BD:D4:31:35:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ff45b1fc-7070-315b-af69-e349af3a0636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1a:c5:7d:0f:a1:47:4e:b5:e4:45:cf:4d:84:87:56:f8:3d: a0:7f:b2:5c:a4:25:71:17:e8:ce:5a:52:51:ce:e4:74:a4:3d: 7e:c3:ee:c2:2a:1a:74:1d:62:2a:3b:ae:35:bb:d1:c1:ac:0d: 3a:2f:83:ae:d0:a6:08:b8:0f:f8:d3:65:a7:e8:8c:4c:4e:61: 89:2b:53:8a:08:d2:fb:be:17:4a:f1:5e:db:14:13:48:ee:fc: d2:62:f5:a4:68:f5:53:7b:ed:77:91:22:fe:59:63:b1:ff:da: f8:da:ca:28:2d:2a:e6:9f:0b:2b:b7:95:08:9a:79:40:52:90: 78:2d:81:70:2b:d2:42:d9:54:0e:62:f2:fd:6d:98:dc:b6:d8: 50:df:69:25:23:2a:5d:aa:0e:25:e5:9c:cb:31:d5:f2:42:59: b0:5e:b7:6e:b6:b5:a0:66:22:94:c9:5e:de:5f:4a:fe:dd:a6: 89:ee:72:25:72:8a:4a:e3:7e:02:17:6d:58:bb:1d:96:57:ce: 44:12:0a:15:e3:3b:4f:bd:7a:6e:ac:79:99:30:49:e1:5f:f9: bd:5e:41:c4:eb:c9:08:28:82:4f:b9:b5:14:c4:5d:e5:a2:74: 11:84:d5:78:34:4f:48:ff:5c:47:90:7a:6f:af:03:f9:22:2d: 1c:b2:bd:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1b2Vn4NDMEMTCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NDJjOWE4NjYtZmQ0MC00MjgzLTk4OWUtNWY1ODdiY2FhNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwSHXUb68df4rfKUKe5GP6L2EEhiJTRPp7IA g65gs2pdMOxHHQUAob37dJkkYn6YENH8HG/BY5bn61RPF/RWUJf1liuyimO1en19 XsD/bB/GVVH2nFrEMg1EhQW9fK9Bessi9bjm1l2GAe+OjaTe3kN+sqPiwkNBfsp6 Hzt1OJPaoVpXQBWuMAMJv3e72US3ZJY3joI2SVL9TSD2pXSEKFTnvoU1reu/UwZ3 hJyZ4U3vQA924c/OxErpm8g4p9dSboP4PKqHAZwaAlsl8DR0G5BvuYcSM+8MaKLS l9Q6jWFRJY5Z1ip2Wj39DitCoCpxtvsdqRqFGV0geaMRxvpP3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrupdASxtTK5Ff/eKw3Jr3UMTUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvZmY0NWIxZmMtNzA3MC0z MTViLWFmNjktZTM0OWFmM2EwNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6LjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoaxX0PoUdOteRFz02Eh1b4PaB/slykJXEX6M5aUlHO5HSkPX7D7sIq GnQdYio7rjW70cGsDTovg67Qpgi4D/jTZafojExOYYkrU4oI0vu+F0rxXtsUE0ju /NJi9aRo9VN77XeRIv5ZY7H/2vjayigtKuafCyu3lQiaeUBSkHgtgXAr0kLZVA5i 8v1tmNy22FDfaSUjKl2qDiXlnMsx1fJCWbBet262taBmIpTJXt5fSv7dponuciVy ikrjfgIXbVi7HZZXzkQSChXjO0+9em6seZkwSeFf+b1eQcTryQgogk+5tRTEXeWi dBGE1Xg0T0j/XEeQem+vA/kiLRyyvZw= -----END CERTIFICATE-----Generated at Mon Oct 20 16:23:03 2025 by rpki-client