$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/468164c4-c55e-396d-b247-47a0882ff874.roa File: 468164c4-c55e-396d-b247-47a0882ff874.roa (raw, json) Hash identifier: bg+re/2WiYBSZVttz45dFja6rghtmhzOAnRRN4r2dlE= Subject key identifier: CB:C1:13:BA:21:F0:F1:E8:F3:92:E6:2B:D5:8E:3C:15:3A:D6:98:15 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584A71EB4DFB88F46619286B9100 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/468164c4-c55e-396d-b247-47a0882ff874.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 19886 IP address blocks: 171.162.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:4d:fb:88:f4:66:19:28:6b:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=1f571f74-c00f-4020-8800-c6ec07c3a7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:71:c4:c0:90:b9:c1:66:c5:7c:27:31:c1: bf:31:e0:9e:8e:fb:a6:ae:c2:46:7c:8e:67:a7:d5: a2:76:1c:29:47:c4:53:37:4a:17:96:c2:44:c6:0f: 13:a0:d9:ab:3e:de:01:e0:d6:30:e2:b3:63:23:49: ed:6f:c9:4f:91:9b:cc:2c:17:73:cc:12:d5:53:0e: 01:5f:c4:e0:0c:2e:9a:9f:73:30:53:d6:e0:c4:e9: 8b:71:8a:44:b9:f8:08:58:9c:7b:3a:a4:28:f3:6b: bc:c5:11:fb:44:b0:44:78:38:4b:07:26:6d:e1:8b: 77:0c:86:30:c1:2f:b4:ef:b8:9f:6d:b9:b6:b4:2f: 57:fb:c0:ea:29:b4:ff:6e:ee:5b:5f:b8:48:d2:0b: b1:d8:03:dc:a4:8e:73:55:c6:15:8a:72:dd:df:26: cc:f6:63:bf:fe:3a:3c:6f:64:7b:e7:f2:9a:ca:be: 6a:e5:d7:d6:29:76:d1:1f:a4:cd:50:6a:37:7b:c4: d6:54:f1:0a:19:53:b8:e6:70:11:4b:7b:60:69:29: 80:7d:7c:d2:ca:6d:f6:7b:d9:95:b6:7b:ee:11:aa: f1:c1:0c:38:7b:cd:3c:55:27:f6:72:9d:3e:08:14: 34:d2:a7:93:06:8e:4a:e2:e5:a4:8e:5c:9c:bd:43: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C1:13:BA:21:F0:F1:E8:F3:92:E6:2B:D5:8E:3C:15:3A:D6:98:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/468164c4-c55e-396d-b247-47a0882ff874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:79:99:d2:12:e9:42:3f:aa:bd:9f:28:b1:de:cc:a2:aa:10: 2c:51:6e:4d:ef:3a:44:54:51:66:f9:a5:17:6d:2c:49:73:d8: 6b:a9:ed:1c:b3:90:9b:7c:3b:f8:a3:2b:0e:e4:ad:86:ee:c1: 48:e2:f3:5e:27:a2:86:60:fd:95:ae:cb:79:d3:5f:15:81:89: bf:94:02:0b:8f:fe:f5:33:bf:e9:78:11:69:11:a9:7b:49:66: bd:b0:40:8e:46:f2:bc:04:39:e6:0a:c2:6b:c9:71:3e:40:92: d3:b0:0a:af:95:be:2b:b0:a3:67:06:0a:ae:b9:02:46:0a:5c: 3a:27:19:0b:a9:55:5d:30:aa:1d:13:00:9c:80:5c:2b:f3:17: bb:28:4c:33:78:17:b4:45:0a:6c:11:af:56:e3:32:74:51:15: 38:39:6c:73:d1:26:21:38:6a:46:6a:ad:26:5c:ec:92:2d:e0: c3:0e:15:48:48:31:a8:af:6c:03:f9:df:73:9c:9b:da:45:c3: 1c:6a:dc:dc:03:01:84:e5:56:7c:5c:f3:80:49:bc:43:01:e0: a6:53:87:65:fe:0d:bc:ee:b2:26:20:bd:82:51:36:12:6d:1a: 2d:05:53:d3:89:69:31:ad:6b:7d:01:aa:8a:f8:e5:01:69:b9: 81:af:46:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6037iPRmGShrkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MWY1NzFmNzQtYzAwZi00MDIwLTg4MDAtYzZlYzA3YzNhN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rBxxMCQucFmxXwnMcG/MeCejvumrsJGfI5n p9WidhwpR8RTN0oXlsJExg8ToNmrPt4B4NYw4rNjI0ntb8lPkZvMLBdzzBLVUw4B X8TgDC6an3MwU9bgxOmLcYpEufgIWJx7OqQo82u8xRH7RLBEeDhLByZt4Yt3DIYw wS+077ifbbm2tC9X+8DqKbT/bu5bX7hI0gux2APcpI5zVcYVinLd3ybM9mO//jo8 b2R75/Kayr5q5dfWKXbRH6TNUGo3e8TWVPEKGVO45nARS3tgaSmAfXzSym32e9mV tnvuEarxwQw4e808VSf2cp0+CBQ00qeTBo5K4uWkjlycvUOvdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvBE7oh8PHo85LmK9WOPBU61pgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvNDY4MTY0YzQtYzU1ZS0z OTZkLWIyNDctNDdhMDg4MmZmODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6JyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF5mdIS6UI/qr2fKLHezKKqECxRbk3vOkRUUWb5pRdtLElz2Gup7Ryz kJt8O/ijKw7krYbuwUji814nooZg/ZWuy3nTXxWBib+UAguP/vUzv+l4EWkRqXtJ Zr2wQI5G8rwEOeYKwmvJcT5AktOwCq+Vviuwo2cGCq65AkYKXDonGQupVV0wqh0T AJyAXCvzF7soTDN4F7RFCmwRr1bjMnRRFTg5bHPRJiE4akZqrSZc7JIt4MMOFUhI MaivbAP533Ocm9pFwxxq3NwDAYTlVnxc84BJvEMB4KZTh2X+DbzusiYgvYJRNhJt Gi0FU9OJaTGta30Bqor45QFpuYGvRjM= -----END CERTIFICATE-----Generated at Wed Jul 9 14:50:48 2025 by rpki-client