$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ba7c317a-02be-3815-93f4-dcdcf8a400d1.roa File: ba7c317a-02be-3815-93f4-dcdcf8a400d1.roa (raw, json) Hash identifier: dbVrM3Y/cTXuAmzNp1hkHRujrTMD6T16WXNQoFD7JLU= Subject key identifier: 5A:91:64:15:C9:6D:5F:19:B5:DA:1A:F8:1B:CF:58:03:8A:C6:53:8D Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584B43FBBD22A8920C7375846D80 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ba7c317a-02be-3815-93f4-dcdcf8a400d1.roa Signing time: Sun 21 Sep 2025 06:54:05 +0000 ROA not before: Sun 21 Sep 2025 06:54:05 +0000 ROA not after: Sat 20 Dec 2025 07:54:05 +0000 asID: 10794 IP address blocks: 171.162.88.0/24 maxlen: 24 171.162.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:fb:bd:22:a8:92:0c:73:75:84:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Sep 21 06:54:05 2025 GMT Not After : Dec 20 07:54:05 2025 GMT Subject: CN=9e976148-0d93-4ee7-87ae-a24a790859b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c1:8a:cd:47:93:90:47:f6:87:90:b9:f1:f2: 14:45:bb:0b:b5:78:f1:b4:f1:3d:d9:18:c1:a7:21: a4:2e:87:2f:ae:72:87:b1:c0:b4:e2:df:96:95:90: 3b:20:c9:87:12:fd:bb:3c:d9:7f:61:86:40:d7:8d: f0:47:95:2d:6d:1d:3a:e4:ca:1a:d5:76:09:4a:14: 78:cb:5b:98:32:cf:b3:8d:7d:1c:f3:92:62:a1:b9: 59:71:f0:0d:6e:cc:f3:1f:d8:70:9e:f9:7c:65:28: 3a:7f:48:fc:4c:e6:14:c9:3c:15:fb:1b:43:cd:eb: cc:26:66:6b:1e:dc:7d:c5:1f:82:b6:6a:df:a0:16: 03:33:50:de:ab:4e:44:50:fc:1a:6f:f8:07:34:f0: 86:8a:c6:d0:64:79:2b:75:3b:8a:c7:b2:e5:55:3a: 8e:33:20:38:9e:8d:84:6a:1e:70:6e:e8:26:3b:00: 5f:c6:3c:6c:0f:14:25:e3:78:cf:da:ab:83:6f:7a: 72:53:47:8f:6f:f9:ff:6f:32:bf:bd:b7:5f:9f:12: a3:22:79:20:c6:d6:cd:68:0b:11:a1:23:36:29:a5: c7:45:70:60:cc:37:db:d8:bb:bc:1a:95:a5:7b:37: e2:09:af:fc:cb:6b:65:f0:63:50:67:bd:38:69:6d: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:91:64:15:C9:6D:5F:19:B5:DA:1A:F8:1B:CF:58:03:8A:C6:53:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/ba7c317a-02be-3815-93f4-dcdcf8a400d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7e:c6:38:da:3a:e0:85:8d:e6:d4:8c:c9:6c:5d:e5:44:9e: 3e:57:15:4c:ff:1f:96:02:fc:b8:a7:35:96:f9:f0:13:26:51: c6:e6:6b:36:87:d6:c4:84:79:fd:f6:6b:ae:f3:62:87:d9:96: 5e:fa:08:6f:82:db:3c:13:f0:fa:cc:7c:c0:00:35:d6:b5:e0: 7a:1e:3a:33:55:9e:43:09:61:43:ad:de:04:49:e5:2b:a6:1d: 05:f2:a5:5d:12:02:1f:a1:4f:c0:95:1c:03:65:c9:3c:e2:e4: 2d:10:34:e4:1d:24:f9:4b:c8:96:51:31:f6:c7:cc:d7:ed:5c: d0:1c:f0:c3:29:91:52:1e:4b:c4:c7:eb:65:ae:32:ec:15:9a: 8b:5d:df:49:b2:8d:0d:04:44:11:80:89:69:0d:d2:74:56:8e: 32:ee:9c:33:20:fa:2a:93:4d:d5:fa:f2:4d:91:b2:71:08:1f: c4:53:29:88:59:57:c0:fa:4a:95:a7:2a:9d:08:00:ca:25:8f: d4:c8:c9:27:c4:0c:a0:f5:e5:1d:c1:17:55:67:4c:ce:97:94: 4b:72:37:3e:f4:9d:76:0b:51:4f:b7:c1:01:b2:3a:6b:af:55: c6:69:fa:29:0a:54:08:64:3c:20:29:e8:9c:ef:de:4a:c4:05: f8:e2:e5:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtD+70iqJIMc3WEbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDkyMTA2NTQwNVoXDTI1MTIyMDA3NTQwNVowLzEtMCsGA1UEAxMk OWU5NzYxNDgtMGQ5My00ZWU3LTg3YWUtYTI0YTc5MDg1OWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8GKzUeTkEf2h5C58fIURbsLtXjxtPE92RjB pyGkLocvrnKHscC04t+WlZA7IMmHEv27PNl/YYZA143wR5UtbR065Moa1XYJShR4 y1uYMs+zjX0c85JioblZcfANbszzH9hwnvl8ZSg6f0j8TOYUyTwV+xtDzevMJmZr Htx9xR+CtmrfoBYDM1Deq05EUPwab/gHNPCGisbQZHkrdTuKx7LlVTqOMyA4no2E ah5wbugmOwBfxjxsDxQl43jP2quDb3pyU0ePb/n/bzK/vbdfnxKjInkgxtbNaAsR oSM2KaXHRXBgzDfb2Lu8GpWlezfiCa/8y2tl8GNQZ704aW13SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqRZBXJbV8Ztdoa+BvPWAOKxlONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvYmE3YzMxN2EtMDJiZS0z ODE1LTkzZjQtZGNkY2Y4YTQwMGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBq6JYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl+xjjaOuCFjebUjMlsXeVEnj5XFUz/H5YC/LinNZb58BMmUcbmazaH 1sSEef32a67zYofZll76CG+C2zwT8PrMfMAANda14HoeOjNVnkMJYUOt3gRJ5Sum HQXypV0SAh+hT8CVHANlyTzi5C0QNOQdJPlLyJZRMfbHzNftXNAc8MMpkVIeS8TH 62WuMuwVmotd30myjQ0ERBGAiWkN0nRWjjLunDMg+iqTTdX68k2RsnEIH8RTKYhZ V8D6SpWnKp0IAMolj9TIySfEDKD15R3BF1VnTM6XlEtyNz70nXYLUU+3wQGyOmuv VcZp+ikKVAhkPCAp6Jzv3krEBfji5WA= -----END CERTIFICATE-----Generated at Wed Nov 5 16:26:20 2025 by rpki-client