$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/acd7eb49-87a6-309d-84cf-ea0601142d79.roa File: acd7eb49-87a6-309d-84cf-ea0601142d79.roa (raw, json) Hash identifier: iwNF3o+QqKOSKrmTH7DvBvp7xNn/RvRfcPiUM5YVvyM= Subject key identifier: DF:D6:B0:F4:3E:55:21:0E:3E:E6:E7:68:EB:3C:D6:D3:81:8C:F3:A9 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B52A750DE317EE115A2EA2980 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/acd7eb49-87a6-309d-84cf-ea0601142d79.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 19886 IP address blocks: 171.162.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:50:de:31:7e:e1:15:a2:ea:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=f9de6c5a-b3fb-46b5-9ec5-3559e5982795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:09:e3:99:bd:76:f1:41:39:98:a5:4a:61: 97:a3:4b:c1:25:b6:6b:70:e8:8e:b9:70:81:79:4f: f9:41:84:12:db:70:b5:4e:23:2e:e8:92:dc:6f:ba: 2c:bc:86:2e:78:05:8b:08:97:43:7a:b7:30:1f:98: 80:da:6d:64:58:8d:19:77:f3:11:7d:9b:92:11:b4: b5:5f:af:37:a5:95:d1:90:f8:43:e0:db:dd:25:4d: a9:56:55:d4:3a:5a:85:02:8c:4f:26:fb:99:e4:64: 6d:6a:90:1b:bd:f3:dc:a6:4a:bb:5e:be:12:73:6d: 76:37:f2:b6:d3:f0:6b:24:db:48:e2:35:ec:5f:23: 33:f7:2c:30:b0:42:09:68:ac:f9:ea:99:ee:73:e1: 9f:04:95:65:33:ae:28:9f:34:2a:8f:38:03:7c:fc: 55:b6:10:c7:77:96:fd:f4:6b:73:2e:f9:31:2a:29: ca:e0:b8:e8:8d:87:f1:7f:50:11:d8:b4:cf:63:b9: 94:f9:72:05:84:53:76:c5:a9:04:ce:66:68:9e:a1: b9:ab:4a:cb:e2:93:e5:f0:7b:f5:a2:91:7b:8e:8f: 29:5a:39:8b:0f:bd:f8:bd:a7:b7:f0:9c:26:2f:25: 72:3d:56:b0:5b:63:07:dd:a9:d2:f7:22:07:87:d0: 3f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D6:B0:F4:3E:55:21:0E:3E:E6:E7:68:EB:3C:D6:D3:81:8C:F3:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/acd7eb49-87a6-309d-84cf-ea0601142d79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:be:80:6d:34:9f:13:d2:4a:d7:fb:fe:16:57:3f:83:a6:1a: d8:0b:f5:57:cd:09:08:a7:6d:04:06:12:46:07:e5:d7:4c:69: 46:93:d7:16:26:43:96:25:80:6a:0f:87:21:d3:d9:3f:82:73: ea:31:3a:0d:ad:c0:15:a0:22:5e:73:aa:fa:ca:32:9f:f9:62: 3b:0d:1b:d8:96:a9:fd:4f:f4:fd:a7:96:91:53:87:6b:48:48: c3:86:06:ec:cd:56:ce:23:b8:da:0c:e3:b8:2f:7b:38:1f:b6: c1:75:b0:9d:98:a8:95:e0:bc:3a:e2:5a:60:36:49:7d:f3:c9: ce:88:72:95:f4:19:95:2b:d1:13:f4:5d:bc:a2:d7:dc:80:58: fa:06:12:48:a0:56:42:b5:33:13:6f:a9:8c:f6:b3:68:24:a1: bb:7a:b0:6c:ac:f1:cb:0d:4a:c3:13:d9:36:1f:00:f9:50:4d: 81:8e:bf:8f:8b:e5:32:8e:91:32:6c:15:6b:35:60:f5:79:ea: 9d:c0:a1:b2:92:86:dd:b4:04:e7:b8:13:fd:b0:0a:ff:47:ec: a9:69:a6:1f:c5:9c:58:f0:9e:7b:bc:1a:67:28:7f:5a:64:d5: 9c:59:43:41:14:8c:de:a9:99:02:42:f9:fd:94:46:b7:72:9c: c6:af:e8:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1DeMX7hFaLqKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZjlkZTZjNWEtYjNmYi00NmI1LTllYzUtMzU1OWU1OTgyNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmUJ45m9dvFBOZilSmGXo0vBJbZrcOiOuXCB eU/5QYQS23C1TiMu6JLcb7osvIYueAWLCJdDercwH5iA2m1kWI0Zd/MRfZuSEbS1 X683pZXRkPhD4NvdJU2pVlXUOlqFAoxPJvuZ5GRtapAbvfPcpkq7Xr4Sc212N/K2 0/BrJNtI4jXsXyMz9ywwsEIJaKz56pnuc+GfBJVlM64onzQqjzgDfPxVthDHd5b9 9GtzLvkxKinK4LjojYfxf1AR2LTPY7mU+XIFhFN2xakEzmZonqG5q0rL4pPl8Hv1 opF7jo8pWjmLD734vae38JwmLyVyPVawW2MH3anS9yIHh9A/TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/WsPQ+VSEOPubnaOs81tOBjPOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYWNkN2ViNDktODdhNi0z MDlkLTg0Y2YtZWEwNjAxMTQyZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6J7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm+gG00nxPSStf7/hZXP4OmGtgL9VfNCQinbQQGEkYH5ddMaUaT1xYm Q5YlgGoPhyHT2T+Cc+oxOg2twBWgIl5zqvrKMp/5YjsNG9iWqf1P9P2nlpFTh2tI SMOGBuzNVs4juNoM47gvezgftsF1sJ2YqJXgvDriWmA2SX3zyc6IcpX0GZUr0RP0 Xbyi19yAWPoGEkigVkK1MxNvqYz2s2gkobt6sGys8csNSsMT2TYfAPlQTYGOv4+L 5TKOkTJsFWs1YPV56p3AobKSht20BOe4E/2wCv9H7Klpph/FnFjwnnu8Gmcof1pk 1ZxZQ0EUjN6pmQJC+f2URrdynMav6CU= -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:08 2025 by rpki-client