$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa File: 5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa (raw, json) Hash identifier: 0sWaWRHwTPo7Mh3d+TSpUmXj9JRbmX0uxLpLXO0Nssc= Subject key identifier: B9:3A:D6:2A:B6:58:1D:53:55:48:A2:E7:19:5E:CD:A2:F6:E5:3D:9A Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e Certificate serial: 010D0C9F4328584B1806E25E510611BDB5E64DC0 Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 62952 IP address blocks: 162.251.168.0/24 maxlen: 24 162.251.169.0/24 maxlen: 24 162.251.170.0/24 maxlen: 24 162.251.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e2:5e:51:06:11:bd:b5:e6:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=d1423ddd-84ee-40ff-85bb-7544e06617f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:73:af:cb:ef:21:d3:b0:c8:da:09:78:f0:64: ce:aa:34:19:2b:61:bf:e6:19:5c:16:97:3b:50:f9: 65:8f:ee:d7:e6:9b:6f:88:5e:82:4b:49:8b:61:ed: fd:be:10:b9:31:ec:cb:18:33:62:35:8b:eb:fe:0a: 45:58:f0:89:e6:c6:7e:99:2a:7e:b6:5a:78:37:4a: ba:28:18:45:b5:e3:ed:c6:cf:3d:3c:f6:ef:57:13: 6b:7d:85:f9:12:ff:c0:19:a2:fa:74:1d:17:cd:cb: 9f:87:41:97:4f:c7:b2:3a:76:8b:35:a1:22:12:f6: 8c:04:cd:c2:84:b2:f3:46:6c:06:54:e2:54:ec:18: dc:97:a9:6d:9b:59:4e:93:8d:75:71:4b:4b:ee:80: d7:0f:b7:4b:8f:f3:93:8c:7e:08:7d:4c:54:ac:74: 85:9c:6a:1e:6d:8d:09:12:75:e9:48:7e:c0:22:a3: 6e:4d:4e:dd:bc:f5:64:21:0a:94:00:ae:16:c3:48: 65:fa:6a:54:20:70:16:bf:69:dc:f0:5f:ec:03:6a: 52:64:6f:66:81:13:3c:99:58:22:76:6e:7c:83:86: 33:d1:a4:71:f3:d2:33:e5:61:f7:32:5c:67:80:b9: 56:bf:9f:ff:a5:c6:57:4a:b5:94:98:6b:65:78:a6: 31:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3A:D6:2A:B6:58:1D:53:55:48:A2:E7:19:5E:CD:A2:F6:E5:3D:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/5ae342a0-d05b-3afe-a3ba-c3dba3275f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl X509v3 Authority Key Identifier: keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer sbgp-ipAddrBlock: critical IPv4: 162.251.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:55:c6:ab:dc:0b:1a:a6:51:3b:ab:b4:00:8a:95:ea:2b:c7: 0f:e3:db:27:4a:37:0d:d1:61:c9:ef:28:12:27:15:aa:0b:72: 7c:00:bb:d5:0b:de:76:2f:cb:fb:74:ed:9f:c4:b2:f4:da:ed: b2:12:19:3a:b9:f4:89:8f:3e:c9:11:5f:5b:1e:a0:27:df:ad: 48:89:07:86:36:72:57:f2:b1:e1:91:92:d4:44:99:cd:b5:b5: e9:26:86:c8:a5:dd:24:62:02:f7:1f:05:99:22:64:3e:74:b0: 29:4e:98:be:9d:68:23:fb:be:33:60:07:77:b1:20:9a:0e:35: 76:f3:fe:7d:b6:77:b0:51:71:9a:0a:52:62:bb:f0:88:9a:2e: 10:16:42:53:0a:a6:76:bc:c3:95:34:bc:bf:d8:eb:8d:f1:4b: bc:71:2e:9b:f1:83:7c:83:44:59:7a:01:6f:93:aa:b9:a9:3a: 8c:28:ab:11:c5:00:2b:fb:f5:1e:20:8b:dd:70:df:11:3a:be: ad:ec:29:a1:2e:ea:11:57:0b:0a:fc:42:26:27:40:52:9c:1f: 51:df:40:2e:58:78:46:5d:06:de:db:ab:a3:fe:92:c4:3d:52: 52:7e:51:64:2f:ef:a5:54:a9:4d:59:4d:bd:88:43:9a:49:7c: 18:c9:dd:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuJeUQYRvbXmTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBhZjMxOWUtMGM3NC00MGUyLWI5M2MtZGFhNTFjNDU3 OTFlMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZDE0MjNkZGQtODRlZS00MGZmLTg1YmItNzU0NGUwNjYxN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnOvy+8h07DI2gl48GTOqjQZK2G/5hlcFpc7 UPllj+7X5ptviF6CS0mLYe39vhC5MezLGDNiNYvr/gpFWPCJ5sZ+mSp+tlp4N0q6 KBhFtePtxs89PPbvVxNrfYX5Ev/AGaL6dB0Xzcufh0GXT8eyOnaLNaEiEvaMBM3C hLLzRmwGVOJU7Bjcl6ltm1lOk411cUtL7oDXD7dLj/OTjH4IfUxUrHSFnGoebY0J EnXpSH7AIqNuTU7dvPVkIQqUAK4Ww0hl+mpUIHAWv2nc8F/sA2pSZG9mgRM8mVgi dm58g4Yz0aRx89Iz5WH3MlxngLlWv5//pcZXSrWUmGtleKYx8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk61iq2WB1TVUii5xlezaL25T2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MGFm MzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1MWM0NTc5MWUvNWFlMzQyYTAtZDA1Yi0z YWZlLWEzYmEtYzNkYmEzMjc1ZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjBhZjMxOWUtMGM3NC00MGUyLWI5 M2MtZGFhNTFjNDU3OTFlLzYwYWYzMTllLTBjNzQtNDBlMi1iOTNjLWRhYTUxYzQ1 NzkxZS5jcmwwHwYDVR0jBBgwFoAUEXr3dymdZJzOnFZKgWxC2clfs0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82MGFmMzE5ZS0wYzc0LTQwZTItYjkzYy1kYWE1 MWM0NTc5MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZVxqvcCxqmUTurtACKleorxw/j2ydKNw3RYcnvKBInFaoLcnwAu9UL 3nYvy/t07Z/EsvTa7bISGTq59ImPPskRX1seoCffrUiJB4Y2clfyseGRktREmc21 tekmhsil3SRiAvcfBZkiZD50sClOmL6daCP7vjNgB3exIJoONXbz/n22d7BRcZoK UmK78IiaLhAWQlMKpna8w5U0vL/Y643xS7xxLpvxg3yDRFl6AW+TqrmpOowoqxHF ACv79R4gi91w3xE6vq3sKaEu6hFXCwr8QiYnQFKcH1HfQC5YeEZdBt7bq6P+ksQ9 UlJ+UWQv76VUqU1ZTb2IQ5pJfBjJ3fM= -----END CERTIFICATE-----Generated at Thu Sep 18 15:27:09 2025 by rpki-client