$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/134e0c9e-8d70-34cd-8437-81300f87d508.roa File: 134e0c9e-8d70-34cd-8437-81300f87d508.roa (raw, json) Hash identifier: SQ4VWA8LGY902gnFcl3MTJVF3MyJg7wiQ/HEcwqu1Ts= Subject key identifier: EA:90:37:53:0D:21:91:59:0D:32:78:81:82:A3:30:0A:8A:9A:11:10 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584AAC8B7C36A512B185F3992E00 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/134e0c9e-8d70-34cd-8437-81300f87d508.roa Signing time: Tue 29 Jul 2025 01:00:48 +0000 ROA not before: Tue 29 Jul 2025 01:00:48 +0000 ROA not after: Mon 27 Oct 2025 01:00:48 +0000 asID: 36549 IP address blocks: 63.167.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:8b:7c:36:a5:12:b1:85:f3:99:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Jul 29 01:00:48 2025 GMT Not After : Oct 27 01:00:48 2025 GMT Subject: CN=7d8fd71d-0d7a-4aae-bb46-01396243c621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:da:47:2b:1c:df:99:d9:ae:db:91:0c:9e:40: 66:62:18:c2:bf:73:43:75:06:e6:ac:f2:b2:86:32: a5:a4:0c:4b:dd:d4:48:86:8b:e4:78:d5:da:f4:30: c5:48:e3:be:c6:37:92:f0:ae:54:7e:31:24:85:83: ae:9c:63:67:f8:88:1a:ca:f0:af:74:27:d3:a3:bc: b3:5c:f9:3b:f1:dc:23:4b:3b:ea:91:1e:a1:eb:7e: 28:32:c3:3f:ec:d4:70:4e:d7:15:34:b3:10:5a:d2: 0a:52:c9:51:7d:23:2d:d8:43:3c:97:ef:73:54:f9: 03:5b:f8:63:be:fc:03:8f:85:1f:d1:c0:56:de:72: 2c:0a:0c:45:3f:e4:92:73:53:28:8f:e9:b2:b3:a3: 31:48:b9:52:01:8c:00:ca:e8:92:19:e8:5d:73:96: 2c:6f:95:ee:1f:6b:3a:8b:2f:65:fc:8a:6a:12:d5: d6:3a:af:1b:8e:68:df:63:79:02:22:af:c1:01:69: e7:b2:9e:33:32:ca:e4:73:82:b7:b5:0c:d4:7b:54: 93:2e:75:84:28:08:3a:af:e0:a1:59:0b:2b:07:3b: 9d:7c:e3:19:b7:77:c8:58:b6:34:26:93:eb:e3:c7: ef:55:01:ff:d8:61:9d:83:da:bc:53:83:b1:9b:6b: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:90:37:53:0D:21:91:59:0D:32:78:81:82:A3:30:0A:8A:9A:11:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/134e0c9e-8d70-34cd-8437-81300f87d508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.167.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:eb:46:24:81:a1:23:f1:d1:65:45:dd:fe:93:bc:5e:9b:29: 90:2d:e2:bf:db:88:22:dc:4c:e3:19:dc:4a:9d:29:b3:2b:46: c4:39:a1:13:41:fe:27:74:98:ed:6d:ed:ef:c2:68:10:48:64: 46:90:25:fb:89:cb:6f:6a:8d:e7:19:7d:02:6b:86:8a:37:6a: d3:dc:35:27:1c:68:0b:94:17:b6:5d:77:ea:ee:8c:9d:a0:e2: 01:16:bb:31:d0:57:a1:85:f6:fb:9c:fc:b2:a2:67:84:4d:bc: 74:03:e7:62:73:28:9e:51:36:b9:d0:4e:4b:1f:5f:a2:7b:4f: 09:f1:25:22:78:da:ee:64:da:49:11:62:d0:70:17:af:bb:7a: 84:27:55:d5:fd:53:11:44:bf:43:ae:cd:26:07:5e:98:dd:b3: c8:7d:81:dc:d9:73:fd:17:d2:d7:99:3e:c0:42:8e:63:f6:99: 19:97:a7:87:c3:29:12:df:27:37:36:05:5e:a3:6e:73:8c:bd: ea:3f:e9:99:54:ce:f2:c7:5e:86:87:80:cf:fa:bd:dc:78:d3: d6:bf:38:42:27:11:50:d2:0d:76:48:fc:47:e8:62:bd:18:31: 05:95:5c:21:77:3a:3a:00:54:9b:e4:d2:de:7e:6f:2d:5c:b7: eb:97:21:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqsi3w2pRKxhfOZLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDcyOTAxMDA0OFoXDTI1MTAyNzAxMDA0OFowLzEtMCsGA1UEAxMk N2Q4ZmQ3MWQtMGQ3YS00YWFlLWJiNDYtMDEzOTYyNDNjNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNpHKxzfmdmu25EMnkBmYhjCv3NDdQbmrPKy hjKlpAxL3dRIhovkeNXa9DDFSOO+xjeS8K5UfjEkhYOunGNn+IgayvCvdCfTo7yz XPk78dwjSzvqkR6h634oMsM/7NRwTtcVNLMQWtIKUslRfSMt2EM8l+9zVPkDW/hj vvwDj4Uf0cBW3nIsCgxFP+SSc1Moj+mys6MxSLlSAYwAyuiSGehdc5Ysb5XuH2s6 iy9l/IpqEtXWOq8bjmjfY3kCIq/BAWnnsp4zMsrkc4K3tQzUe1STLnWEKAg6r+Ch WQsrBzudfOMZt3fIWLY0JpPr48fvVQH/2GGdg9q8U4Oxm2tWtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqQN1MNIZFZDTJ4gYKjMAqKmhEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvMTM0ZTBjOWUtOGQ3MC0z NGNkLTg0MzctODEzMDBmODdkNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP6fQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbrRiSBoSPx0WVF3f6TvF6bKZAt4r/biCLcTOMZ3EqdKbMrRsQ5oRNB /id0mO1t7e/CaBBIZEaQJfuJy29qjecZfQJrhoo3atPcNSccaAuUF7Zdd+rujJ2g 4gEWuzHQV6GF9vuc/LKiZ4RNvHQD52JzKJ5RNrnQTksfX6J7TwnxJSJ42u5k2kkR YtBwF6+7eoQnVdX9UxFEv0OuzSYHXpjds8h9gdzZc/0X0teZPsBCjmP2mRmXp4fD KRLfJzc2BV6jbnOMveo/6ZlUzvLHXoaHgM/6vdx409a/OEInEVDSDXZI/EfoYr0Y MQWVXCF3OjoAVJvk0t5+by1ct+uXIfs= -----END CERTIFICATE-----Generated at Wed Aug 6 13:09:06 2025 by rpki-client