$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0ac42e13-1fbf-33b1-924f-24f9e61ba070.roa File: 0ac42e13-1fbf-33b1-924f-24f9e61ba070.roa (raw, json) Hash identifier: 5h0w27oUF1lxY6EgW0Aeh2GlajGtorQL4oqmPgao4ig= Subject key identifier: BB:98:C8:7A:90:E7:24:72:F0:19:AA:BE:38:DC:47:0E:D1:20:F3:66 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584BB5C24EB65B5E6773F54DC140 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0ac42e13-1fbf-33b1-924f-24f9e61ba070.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 19886 IP address blocks: 171.162.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:4e:b6:5b:5e:67:73:f5:4d:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=4ced8931-9e71-4ce5-b8f5-b7b5fc585fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:62:90:da:e5:db:b9:2c:1c:3c:97:15:5e: 15:8a:9f:25:56:0d:6b:36:a9:12:21:f1:13:42:e4: 83:ef:a6:4d:de:02:21:03:85:3a:b4:ce:e3:2f:66: 83:32:05:6c:91:33:21:c0:71:c6:c8:51:d8:b2:1f: 6c:c1:36:5d:48:44:75:5e:63:b9:8d:16:e5:99:ab: 91:5a:ae:aa:63:ff:ba:b1:74:f1:2e:3e:9c:a3:09: 3e:43:2a:bc:03:fa:81:ab:2a:b0:4a:6f:cc:31:61: cb:8b:38:f0:6c:a5:19:0f:99:52:1c:4c:dc:07:ea: ca:ec:a3:a7:f7:04:47:2d:07:b9:e4:cc:fa:fc:d4: 0b:8b:81:b6:71:84:0c:3f:f9:d2:2e:4f:e5:8a:bc: b8:ca:33:68:85:43:a3:7b:78:97:c4:4b:1e:34:87: 17:b3:b9:00:82:0f:75:dc:a6:b6:78:95:ee:54:8b: 7e:86:a2:92:5b:1a:9b:49:6b:a5:4f:81:1a:e6:c1: 9b:30:aa:90:2f:7b:64:9b:f1:ed:0b:8d:29:85:87: 09:a3:a4:f6:02:22:c8:5f:70:a6:43:97:85:88:00: c2:2a:dd:26:f8:00:10:10:5f:e8:e2:4e:e6:eb:c2: ff:18:25:84:c0:6d:cb:8e:ac:99:01:10:61:a1:aa: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:98:C8:7A:90:E7:24:72:F0:19:AA:BE:38:DC:47:0E:D1:20:F3:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/0ac42e13-1fbf-33b1-924f-24f9e61ba070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2a:ff:ab:1e:25:5e:1d:c7:1b:27:b3:af:7e:1d:3f:44:5e: 42:46:46:3a:eb:98:90:62:8a:32:6c:b0:13:9d:06:af:11:96: a9:bc:78:80:f1:7c:78:db:55:d0:a3:19:b6:f6:de:0c:d9:7e: c1:11:17:f8:c7:2a:e7:7d:53:d5:77:5f:f9:18:07:b3:b9:a0: 5c:d1:20:8b:95:9f:2e:ed:e1:0d:9b:e2:5b:c5:5d:60:12:bf: 17:17:20:22:9e:a2:dd:ce:7e:4d:2d:72:c7:ac:0a:d8:e5:9b: 49:97:4f:ad:fe:3c:15:b3:28:39:10:61:a5:32:56:d9:8f:b2: 09:36:c3:61:a2:1b:ab:14:30:d6:ce:08:6e:13:75:4f:7f:a2: 9d:12:52:0d:37:e2:f1:e3:42:80:15:0e:15:7f:44:6e:e3:24: b3:32:50:84:3e:1d:bf:4d:1b:15:5a:5f:a0:6c:71:a8:55:a4: ff:a1:38:1a:6d:ea:43:6b:24:85:da:c3:34:2c:24:8f:c1:d8: 90:4b:96:21:eb:57:95:69:71:7b:1b:30:a3:2a:37:a1:13:1a: 62:43:0b:2d:da:cb:96:7e:80:13:f8:34:22:49:10:2d:b9:42: a2:75:f0:7b:83:bb:26:9a:aa:d1:a3:4f:30:5c:7d:dc:40:fc: a3:38:7a:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wk62W15nc/VNwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NGNlZDg5MzEtOWU3MS00Y2U1LWI4ZjUtYjdiNWZjNTg1ZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuJikNrl27ksHDyXFV4Vip8lVg1rNqkSIfET QuSD76ZN3gIhA4U6tM7jL2aDMgVskTMhwHHGyFHYsh9swTZdSER1XmO5jRblmauR Wq6qY/+6sXTxLj6cowk+Qyq8A/qBqyqwSm/MMWHLizjwbKUZD5lSHEzcB+rK7KOn 9wRHLQe55Mz6/NQLi4G2cYQMP/nSLk/liry4yjNohUOje3iXxEseNIcXs7kAgg91 3Ka2eJXuVIt+hqKSWxqbSWulT4Ea5sGbMKqQL3tkm/HtC40phYcJo6T2AiLIX3Cm Q5eFiADCKt0m+AAQEF/o4k7m68L/GCWEwG3LjqyZARBhoarJAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuYyHqQ5yRy8BmqvjjcRw7RIPNmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMGFjNDJlMTMtMWZiZi0z M2IxLTkyNGYtMjRmOWU2MWJhMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkq/6seJV4dxxsns69+HT9EXkJGRjrrmJBiijJssBOdBq8Rlqm8eIDx fHjbVdCjGbb23gzZfsERF/jHKud9U9V3X/kYB7O5oFzRIIuVny7t4Q2b4lvFXWAS vxcXICKeot3Ofk0tcsesCtjlm0mXT63+PBWzKDkQYaUyVtmPsgk2w2GiG6sUMNbO CG4TdU9/op0SUg034vHjQoAVDhV/RG7jJLMyUIQ+Hb9NGxVaX6BscahVpP+hOBpt 6kNrJIXawzQsJI/B2JBLliHrV5VpcXsbMKMqN6ETGmJDCy3ay5Z+gBP4NCJJEC25 QqJ18HuDuyaaqtGjTzBcfdxA/KM4es8= -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:19 2025 by rpki-client