$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/1a75b251-c2b2-3d8e-b044-5025ac345804.roa File: 1a75b251-c2b2-3d8e-b044-5025ac345804.roa (raw, json) Hash identifier: STa77WKyh8jJ0XAJJk6xKdhRGIKQ6lSD2MSeyt2x2YE= Subject key identifier: 59:E0:2D:22:19:10:7B:0B:7E:18:95:55:D6:68:DE:27:45:65:69:3C Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584A7D70C57B45222D40FD5DCBC0 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/1a75b251-c2b2-3d8e-b044-5025ac345804.roa Signing time: Sat 24 May 2025 03:38:07 +0000 ROA not before: Sat 24 May 2025 03:38:07 +0000 ROA not after: Fri 22 Aug 2025 03:38:07 +0000 asID: 19886 IP address blocks: 171.162.208.0/23 maxlen: 23 171.162.208.0/24 maxlen: 24 171.162.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:70:c5:7b:45:22:2d:40:fd:5d:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: May 24 03:38:07 2025 GMT Not After : Aug 22 03:38:07 2025 GMT Subject: CN=32c4bfb9-7541-4021-b2eb-f6657ba6d881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:64:ef:76:f5:f9:ee:96:55:45:1d:6a:15:e5: 35:4d:c2:e1:33:87:26:91:37:30:74:76:9e:75:a0: 37:49:27:e0:15:81:5d:8f:02:e2:50:06:63:e5:7f: 77:de:63:d1:27:b3:fe:6c:28:1e:e2:f8:99:96:ac: 40:ce:b8:44:34:84:0b:8f:b4:58:52:62:95:75:90: 88:70:66:e1:9f:a1:70:cd:04:a7:2c:92:d3:26:21: bf:d2:36:f6:45:a0:33:35:56:d7:a1:44:39:4f:35: 8c:0d:d1:88:54:4c:bf:a8:0f:6d:3f:dc:f6:83:cf: d8:76:bc:64:c3:dc:d3:e5:7e:f3:91:5b:00:a9:74: c0:a4:81:6c:fc:6c:8a:42:19:de:37:51:cb:c1:da: ac:8a:23:b9:b2:2b:8a:67:e0:f6:de:dc:e7:9c:67: 50:9e:01:b2:45:35:f1:b1:ac:f0:55:f3:fe:4e:33: be:5c:d8:0c:c8:06:96:9c:27:78:c2:23:7c:79:6d: 6c:e3:9d:f1:ca:b0:7c:8a:32:b2:ee:4c:1a:e6:5a: a3:1a:f7:59:2a:93:2f:85:96:5b:ae:1c:bf:c2:b8: 15:5f:57:f2:70:13:51:2e:48:11:e3:6a:f6:6e:c3: 08:4d:0a:1c:7b:ae:82:51:65:08:0c:86:d9:ed:0b: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E0:2D:22:19:10:7B:0B:7E:18:95:55:D6:68:DE:27:45:65:69:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/1a75b251-c2b2-3d8e-b044-5025ac345804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:09:91:63:48:30:43:6c:22:25:ed:e0:b4:5a:a5:69:b3:60: 04:b6:d4:27:29:f3:95:e9:47:fe:1d:ad:3d:f0:bf:c1:e7:34: d2:31:94:f6:56:1a:37:b9:54:d4:47:3e:88:8b:dc:9c:96:5a: 73:ef:42:f9:ee:68:96:0d:c2:d2:47:57:b5:50:49:ab:50:6f: 87:b5:57:86:9a:31:95:52:1f:b3:6c:d0:32:66:90:e7:ab:bb: 8c:d6:69:38:41:65:91:25:89:3d:4e:30:25:71:f1:e9:6b:6d: 1b:3a:25:01:28:11:76:31:1e:d8:9d:e6:cd:e6:5f:3a:e3:6d: 57:19:b9:72:c2:87:de:97:c7:ae:b4:db:37:cf:08:de:b7:d7: 51:a2:24:47:10:54:81:c0:77:ac:4f:26:f6:a7:01:35:44:55: 5f:23:2a:b4:80:b6:3b:ce:c4:b8:73:68:49:e5:45:a6:fe:7b: 38:7b:67:06:8d:65:a0:d9:d9:86:f6:46:b6:84:e7:ec:9d:d9: e8:6b:6e:93:2a:e3:56:4e:7f:56:f0:8e:66:1e:2e:46:cf:c5: cc:9f:fe:10:71:2b:98:b3:8d:18:d2:5b:62:42:d6:e1:40:e0: 57:29:1c:4e:34:32:c6:67:58:14:d8:4f:c4:6b:5b:b3:e9:64: f9:ae:a7:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9cMV7RSItQP1dy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDUyNDAzMzgwN1oXDTI1MDgyMjAzMzgwN1owLzEtMCsGA1UEAxMk MzJjNGJmYjktNzU0MS00MDIxLWIyZWItZjY2NTdiYTZkODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWTvdvX57pZVRR1qFeU1TcLhM4cmkTcwdHae daA3SSfgFYFdjwLiUAZj5X933mPRJ7P+bCge4viZlqxAzrhENIQLj7RYUmKVdZCI cGbhn6FwzQSnLJLTJiG/0jb2RaAzNVbXoUQ5TzWMDdGIVEy/qA9tP9z2g8/Ydrxk w9zT5X7zkVsAqXTApIFs/GyKQhneN1HLwdqsiiO5siuKZ+D23tznnGdQngGyRTXx sazwVfP+TjO+XNgMyAaWnCd4wiN8eW1s453xyrB8ijKy7kwa5lqjGvdZKpMvhZZb rhy/wrgVX1fycBNRLkgR42r2bsMITQoce66CUWUIDIbZ7QuHUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFngLSIZEHsLfhiVVdZo3idFZWk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMWE3NWIyNTEtYzJiMi0z ZDhlLWIwNDQtNTAyNWFjMzQ1ODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq6LQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMJkWNIMENsIiXt4LRapWmzYAS21Ccp85XpR/4drT3wv8HnNNIxlPZW Gje5VNRHPoiL3JyWWnPvQvnuaJYNwtJHV7VQSatQb4e1V4aaMZVSH7Ns0DJmkOer u4zWaThBZZEliT1OMCVx8elrbRs6JQEoEXYxHtid5s3mXzrjbVcZuXLCh96Xx660 2zfPCN6311GiJEcQVIHAd6xPJvanATVEVV8jKrSAtjvOxLhzaEnlRab+ezh7ZwaN ZaDZ2Yb2RraE5+yd2ehrbpMq41ZOf1bwjmYeLkbPxcyf/hBxK5izjRjSW2JC1uFA 4FcpHE40MsZnWBTYT8RrW7PpZPmup2M= -----END CERTIFICATE-----Generated at Mon Aug 4 21:54:41 2025 by rpki-client