$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/34b601af-0371-3c34-8026-bac59fa418af.roa File: 34b601af-0371-3c34-8026-bac59fa418af.roa (raw, json) Hash identifier: XFFMJCSMv38UzkPlTdqC390pvp7ZLMdbqpoe54YpbYs= Subject key identifier: 3C:67:1C:F5:09:E4:AF:80:35:42:21:0A:15:38:D5:0B:00:28:43:58 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584BB5C250B6ACC4886BC5B27780 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/34b601af-0371-3c34-8026-bac59fa418af.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 19886 IP address blocks: 171.162.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:50:b6:ac:c4:88:6b:c5:b2:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=fc498962-cfa8-4666-b45b-9331f1f2c98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:07:e1:12:7e:91:2b:70:70:db:f7:fd:dc:6d: b1:a6:c4:10:b2:6a:32:9e:d6:17:36:b6:6a:6f:1b: 3f:a5:7a:70:ab:19:9e:ec:3f:67:5b:df:a5:cd:94: 2e:29:b1:b7:e1:cc:e9:0d:e3:b1:7f:aa:d3:30:2f: b6:e8:b2:67:51:87:bd:d9:39:9d:20:5f:88:38:27: 57:94:e9:8e:3f:45:5f:e7:77:97:22:01:e1:b6:a3: 80:c1:84:35:d5:78:a4:0b:bb:f5:df:f8:39:18:4b: b4:9c:1d:6c:32:ef:51:8a:8f:9a:a4:cf:2d:9c:8a: f4:ca:41:ae:e3:dd:d2:c1:34:b8:0f:e8:f8:c7:26: 16:66:6b:5e:13:3a:ba:c9:46:f0:ea:7d:6f:37:8d: e5:c6:91:c4:f4:f8:f0:f3:75:31:60:fe:a8:d9:1a: da:f1:fa:c5:4c:27:af:f5:12:51:31:d3:a3:5c:69: 11:13:e7:3c:c1:45:4b:34:94:fa:91:c5:2b:ea:53: 02:aa:98:88:51:15:9f:bc:ad:18:43:ad:8e:db:6b: ad:a0:65:61:80:76:41:b5:10:30:f8:11:75:d5:40: 0e:74:8c:dc:3e:f0:98:24:95:e5:94:e8:7e:a8:8c: dc:4f:75:10:95:26:6a:48:e8:3c:d8:d2:5d:a7:f6: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:67:1C:F5:09:E4:AF:80:35:42:21:0A:15:38:D5:0B:00:28:43:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/34b601af-0371-3c34-8026-bac59fa418af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:35:34:3d:48:16:3c:83:7b:44:91:b7:81:37:80:90:8f:90: c1:5a:4a:a0:b0:41:b8:64:ff:aa:3b:f8:28:e9:7e:e4:46:a7: f2:d7:e1:6a:f1:32:c4:4c:99:27:87:ad:8a:b6:1c:30:f1:89: d2:92:e5:2f:38:d8:f0:a7:4f:4d:fd:60:72:8b:f1:d8:fe:ef: f0:ab:f4:a3:66:5c:fa:5d:0b:c2:0e:09:e3:8c:0e:96:b7:d0: 2b:ab:a3:96:2c:95:23:3c:bf:ab:61:f9:74:b4:ea:9c:9b:42: e9:3e:53:44:81:63:cd:63:39:36:06:92:53:bf:73:63:78:75: d5:1f:87:86:12:d1:27:1f:8f:58:70:ad:0c:24:64:46:bd:32: 6b:a4:8a:22:02:d0:8b:13:39:de:ec:8d:e9:6b:98:c7:86:c3: d1:c8:70:c1:dd:8c:16:11:e5:65:3f:b4:df:c2:d9:9d:ef:55: 20:a2:28:e8:a1:ff:43:5c:98:84:ac:76:53:1d:da:22:dd:a0: 0e:f6:30:86:b2:f7:81:2b:39:27:d1:1b:94:fa:66:4f:4d:85: 93:b0:d7:89:5c:25:a8:81:a6:89:c9:d8:98:a2:82:98:39:ba: e1:50:0e:a3:b1:65:7f:52:45:18:7f:47:e3:d3:78:7a:46:a3: c9:27:88:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wlC2rMSIa8Wyd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZmM0OTg5NjItY2ZhOC00NjY2LWI0NWItOTMzMWYxZjJjOThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AfhEn6RK3Bw2/f93G2xpsQQsmoyntYXNrZq bxs/pXpwqxme7D9nW9+lzZQuKbG34czpDeOxf6rTMC+26LJnUYe92TmdIF+IOCdX lOmOP0Vf53eXIgHhtqOAwYQ11XikC7v13/g5GEu0nB1sMu9Rio+apM8tnIr0ykGu 493SwTS4D+j4xyYWZmteEzq6yUbw6n1vN43lxpHE9Pjw83UxYP6o2Rra8frFTCev 9RJRMdOjXGkRE+c8wUVLNJT6kcUr6lMCqpiIURWfvK0YQ62O22utoGVhgHZBtRAw +BF11UAOdIzcPvCYJJXllOh+qIzcT3UQlSZqSOg82NJdp/Y7oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxnHPUJ5K+ANUIhChU41QsAKENYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvMzRiNjAxYWYtMDM3MS0z YzM0LTgwMjYtYmFjNTlmYTQxOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6JtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKo1ND1IFjyDe0SRt4E3gJCPkMFaSqCwQbhk/6o7+CjpfuRGp/LX4Wrx MsRMmSeHrYq2HDDxidKS5S842PCnT039YHKL8dj+7/Cr9KNmXPpdC8IOCeOMDpa3 0Curo5YslSM8v6th+XS06pybQuk+U0SBY81jOTYGklO/c2N4ddUfh4YS0Scfj1hw rQwkZEa9MmukiiIC0IsTOd7sjelrmMeGw9HIcMHdjBYR5WU/tN/C2Z3vVSCiKOih /0NcmISsdlMd2iLdoA72MIay94ErOSfRG5T6Zk9NhZOw14lcJaiBponJ2Jiigpg5 uuFQDqOxZX9SRRh/R+PTeHpGo8kniFc= -----END CERTIFICATE-----Generated at Thu Nov 6 06:05:41 2025 by rpki-client