$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3a34883f-177e-3191-a33f-0a07fc991f5b.roa File: 3a34883f-177e-3191-a33f-0a07fc991f5b.roa (raw, json) Hash identifier: n8G1O153/hXTCJ6xaURJahZeopyi6pNjPxjWNegFlgA= Subject key identifier: 7C:F2:30:7A:B0:52:C1:93:CC:3F:48:C2:03:77:78:34:12:54:D8:86 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584A71EB52C5C7F4F749E3D83400 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3a34883f-177e-3191-a33f-0a07fc991f5b.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 19886 IP address blocks: 171.162.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:52:c5:c7:f4:f7:49:e3:d8:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=efd07d28-42c6-4a49-8f8d-f2ddeb1bf772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:ba:8c:bc:89:f5:ff:90:8d:5e:5a:92:06: 5b:7d:83:ec:08:f2:2a:e2:ec:70:57:72:a8:22:ad: ca:76:dc:02:27:b4:12:9a:29:85:7e:80:26:01:16: 95:89:15:88:ba:54:3d:c8:49:91:02:cf:b8:1d:cb: df:94:23:a7:40:55:62:6e:51:10:32:26:46:2a:2d: 9a:cd:94:92:16:7c:52:34:0d:84:53:0f:87:49:7b: 67:a1:7e:7a:c7:a4:b0:f8:d2:6f:26:47:b2:59:e1: e1:3d:8e:13:22:ea:f1:aa:5d:71:2a:6b:33:42:52: 80:e4:c0:cc:30:e7:ec:b0:92:cd:5e:fd:d9:e4:66: bd:e1:92:a8:c2:2e:44:82:a4:eb:1a:b2:be:0b:c0: f4:62:3a:96:d9:13:6c:5b:47:15:26:f5:1c:d7:3e: 69:e9:15:fc:5f:f4:c8:e1:72:fb:d3:9b:e2:ba:c1: 1e:92:87:8a:26:5e:63:50:22:15:50:a3:b0:a5:e1: ab:dd:95:25:6b:ae:be:fb:6c:23:02:ec:44:9e:43: 04:24:fa:b6:7b:97:d1:57:4f:b0:81:99:cd:3f:ce: d0:29:71:da:f4:3c:b4:06:a9:9a:1a:36:76:d4:59: 7c:83:5a:36:98:84:f3:2f:10:ce:82:68:19:6d:f4: 7b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F2:30:7A:B0:52:C1:93:CC:3F:48:C2:03:77:78:34:12:54:D8:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3a34883f-177e-3191-a33f-0a07fc991f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:47:c7:75:f2:d6:11:77:7c:90:eb:9b:8a:58:8c:1c:77:28: 65:1c:92:8b:1a:f0:79:9c:c8:7b:93:94:fa:55:87:fe:d2:08: 54:58:2e:bb:0a:d4:74:87:f8:92:75:69:7d:a9:e3:56:b5:99: a7:7c:c9:d3:a3:3d:ab:e7:52:d7:fc:83:71:9c:6f:60:13:e2: f6:6f:0e:57:0c:fb:6e:91:94:df:bf:45:39:68:dc:8d:80:ff: 95:c9:57:1e:0c:e3:d8:85:73:73:23:44:da:50:62:73:50:d2: a9:c8:d6:b2:ca:1e:b4:7d:3f:24:ba:f7:72:76:42:49:a3:83: e0:b6:e9:53:79:4c:25:a4:96:9c:8b:fa:2e:49:aa:ef:35:08: c1:e0:4c:63:fb:2b:6e:05:60:d9:c6:a3:ae:29:44:24:ef:9f: 85:fd:f0:06:5b:ee:8d:e7:f0:98:4e:e4:c9:df:8b:3a:78:b7: fb:b8:8f:c5:45:68:9a:8d:70:48:a5:5e:2c:64:65:bf:01:61: 40:31:5d:fb:55:ab:55:b8:dd:19:8f:2c:55:cf:43:a4:e3:d2: 49:69:76:80:42:18:04:6a:2f:b1:29:92:78:87:68:d8:ed:7a: 17:e8:e7:1c:9d:04:c6:17:cd:2d:5c:0f:cc:5c:95:4d:02:b5: af:f2:68:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx61LFx/T3SePYNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ZWZkMDdkMjgtNDJjNi00YTQ5LThmOGQtZjJkZGViMWJmNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0W6jLyJ9f+QjV5akgZbfYPsCPIq4uxwV3Ko Iq3KdtwCJ7QSmimFfoAmARaViRWIulQ9yEmRAs+4HcvflCOnQFViblEQMiZGKi2a zZSSFnxSNA2EUw+HSXtnoX56x6Sw+NJvJkeyWeHhPY4TIurxql1xKmszQlKA5MDM MOfssJLNXv3Z5Ga94ZKowi5EgqTrGrK+C8D0YjqW2RNsW0cVJvUc1z5p6RX8X/TI 4XL705viusEekoeKJl5jUCIVUKOwpeGr3ZUla66++2wjAuxEnkMEJPq2e5fRV0+w gZnNP87QKXHa9Dy0BqmaGjZ21Fl8g1o2mITzLxDOgmgZbfR7KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzyMHqwUsGTzD9IwgN3eDQSVNiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvM2EzNDg4M2YtMTc3ZS0z MTkxLWEzM2YtMGEwN2ZjOTkxZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6IUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRHx3Xy1hF3fJDrm4pYjBx3KGUckosa8HmcyHuTlPpVh/7SCFRYLrsK 1HSH+JJ1aX2p41a1mad8ydOjPavnUtf8g3Gcb2AT4vZvDlcM+26RlN+/RTlo3I2A /5XJVx4M49iFc3MjRNpQYnNQ0qnI1rLKHrR9PyS693J2Qkmjg+C26VN5TCWklpyL +i5Jqu81CMHgTGP7K24FYNnGo64pRCTvn4X98AZb7o3n8JhO5Mnfizp4t/u4j8VF aJqNcEilXixkZb8BYUAxXftVq1W43RmPLFXPQ6Tj0klpdoBCGARqL7EpkniHaNjt ehfo5xydBMYXzS1cD8xclU0Cta/yaLY= -----END CERTIFICATE-----Generated at Wed Jul 9 14:16:23 2025 by rpki-client