$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/0a304ecb-2ccf-3f21-870f-038dc352281a.roa File: 0a304ecb-2ccf-3f21-870f-038dc352281a.roa (raw, json) Hash identifier: cQc8CbJhsp5CWfPSQtmtDLzxzmMB2nLZkWwAQLgL8WY= Subject key identifier: 3D:07:4B:E1:DA:21:D4:BE:0B:6C:4D:7E:E6:6E:FF:B4:D9:AD:E0:11 Certificate issuer: /CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Certificate serial: 010D0C9F4328584B7F5261468E6600F7BADA9C80 Authority key identifier: 6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/0a304ecb-2ccf-3f21-870f-038dc352281a.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 40343 IP address blocks: 201.159.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:61:46:8e:66:00:f7:ba:da:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=270881e4-9ccb-4dbc-bb36-77cacd4b54d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7d:2e:32:45:f4:6b:db:51:40:ca:18:ef:9d: d5:9b:83:8b:f7:a9:10:76:8d:b2:bb:03:26:8c:7c: dd:b1:47:61:3b:43:a4:83:3a:02:5b:91:69:6e:e3: d5:71:46:ac:6a:2f:1d:09:ea:67:80:55:47:42:9f: 71:e9:f8:35:4f:3a:a6:53:7d:40:1d:e9:55:10:9a: cf:18:ff:ad:9f:ce:03:76:6f:c4:2a:fa:af:9a:97: 73:19:94:28:93:da:45:90:6f:52:90:ff:a6:70:b7: 2b:b2:10:2c:32:7e:76:7e:aa:1d:40:f4:78:36:4a: 2f:e1:5c:7d:af:f4:98:75:d4:51:8a:56:82:25:21: 6f:3f:33:b8:3c:eb:0a:36:1e:25:a2:bb:0f:bf:e5: 21:a3:4b:e3:66:45:e3:b2:26:90:44:4a:13:c6:18: 16:2a:fe:e1:9c:44:3c:fa:17:72:38:7d:e3:9a:bc: d0:6d:11:8a:17:38:88:d1:4b:2b:35:cc:d5:d3:d4: 48:be:3b:85:39:23:05:4f:05:e5:81:84:f8:c9:38: d8:85:a7:0e:78:5b:e1:75:4b:37:9c:81:2f:06:fd: fc:0d:9c:f1:f0:42:4a:3c:a3:33:b9:cc:78:2d:d4: 91:c9:71:bf:1e:64:02:9a:e3:94:84:bf:f4:6f:be: 83:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:07:4B:E1:DA:21:D4:BE:0B:6C:4D:7E:E6:6E:FF:B4:D9:AD:E0:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/0a304ecb-2ccf-3f21-870f-038dc352281a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl X509v3 Authority Key Identifier: keyid:6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer sbgp-ipAddrBlock: critical IPv4: 201.159.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c4:6b:e1:4f:98:1b:3f:4e:5e:70:21:16:91:a8:e3:f6:5b: 8e:33:ab:f8:04:b3:1c:9c:38:23:d8:aa:21:40:49:3d:b6:1d: da:86:ee:1d:d0:63:f9:37:c2:16:c1:52:6c:d2:71:1b:42:e4: 2a:aa:f1:2d:84:03:d9:46:f4:2e:bd:33:64:29:2d:51:0b:8a: 22:c4:d5:51:33:07:e2:69:ac:f0:fa:41:0b:c9:72:28:a5:32: c6:cb:39:50:5d:12:56:c1:88:6f:0f:81:f0:11:ca:76:7a:a1: 01:4c:09:7f:8d:b2:b9:58:5b:e1:29:65:b0:9f:c6:68:b3:d5: 72:84:37:fd:32:73:c2:e5:3e:e0:7d:46:fb:99:fc:dd:a0:cc: ee:69:8e:ac:ce:87:a7:89:bb:c7:f4:d7:ce:23:b4:9b:b4:0b: 9e:d8:98:08:bb:07:f0:4d:1f:d0:9e:b0:38:bb:2d:bd:28:76: d7:4e:33:b5:f4:eb:6f:80:12:53:6f:18:1b:3f:8c:7e:22:78: 44:2a:14:24:4c:8b:5f:61:f1:00:b6:21:cf:92:a3:70:39:4b: 4d:9b:1a:1b:17:14:11:c2:13:7f:50:96:ab:8d:1a:62:78:e1: 1d:1d:20:3d:07:58:1e:dc:7c:cf:7a:d8:86:09:a5:e8:7e:14: 41:c4:4b:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmFGjmYA97ranIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY1NGViNjMtMWJiYi00N2NjLThmYzMtZjQ1YTliMmE2 OWE3MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MjcwODgxZTQtOWNjYi00ZGJjLWJiMzYtNzdjYWNkNGI1NGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX0uMkX0a9tRQMoY753Vm4OL96kQdo2yuwMm jHzdsUdhO0OkgzoCW5FpbuPVcUasai8dCepngFVHQp9x6fg1TzqmU31AHelVEJrP GP+tn84Ddm/EKvqvmpdzGZQok9pFkG9SkP+mcLcrshAsMn52fqodQPR4Nkov4Vx9 r/SYddRRilaCJSFvPzO4POsKNh4lorsPv+Uho0vjZkXjsiaQREoTxhgWKv7hnEQ8 +hdyOH3jmrzQbRGKFziI0UsrNczV09RIvjuFOSMFTwXlgYT4yTjYhacOeFvhdUs3 nIEvBv38DZzx8EJKPKMzucx4LdSRyXG/HmQCmuOUhL/0b76DVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0HS+HaIdS+C2xNfuZu/7TZreARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0 ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVhOWIyYTY5YTcvMGEzMDRlY2ItMmNjZi0z ZjIxLTg3MGYtMDM4ZGMzNTIyODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjY1NGViNjMtMWJiYi00N2NjLThm YzMtZjQ1YTliMmE2OWE3L2I2NTRlYjYzLTFiYmItNDdjYy04ZmMzLWY0NWE5YjJh NjlhNy5jcmwwHwYDVR0jBBgwFoAUbFnfTx45b4mX0TjBDYuBvFS868MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVh OWIyYTY5YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyZ9HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/Ea+FPmBs/Tl5wIRaRqOP2W44zq/gEsxycOCPYqiFAST22HdqG7h3Q Y/k3whbBUmzScRtC5Cqq8S2EA9lG9C69M2QpLVELiiLE1VEzB+JprPD6QQvJciil MsbLOVBdElbBiG8PgfARynZ6oQFMCX+NsrlYW+EpZbCfxmiz1XKEN/0yc8LlPuB9 RvuZ/N2gzO5pjqzOh6eJu8f0184jtJu0C57YmAi7B/BNH9CesDi7Lb0odtdOM7X0 62+AElNvGBs/jH4ieEQqFCRMi19h8QC2Ic+So3A5S02bGhsXFBHCE39QlquNGmJ4 4R0dID0HWB7cfM962IYJpeh+FEHESy4= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:25 2025 by rpki-client