$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/dd37a563-a484-3e3c-a379-3494b69517c6.roa File: dd37a563-a484-3e3c-a379-3494b69517c6.roa (raw, json) Hash identifier: 7kg/4YtpV/+8DTvIZsBcq3hKyVSut2zm5m4J71dG28k= Subject key identifier: DA:B9:88:B9:03:4D:1B:11:66:85:29:FC:5F:10:4E:F7:99:0A:6A:2A Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584BBFA5A2345D8B18C51F7BA700 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/dd37a563-a484-3e3c-a379-3494b69517c6.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 174 IP address blocks: 63.161.104.0/24 maxlen: 24 63.161.105.0/24 maxlen: 24 2600:2:110::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a2:34:5d:8b:18:c5:1f:7b:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=636fa5fc-3935-4750-aaa4-124a1d7420d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c6:de:ea:80:79:11:6f:0f:3c:14:45:92:48: 53:59:5e:f0:c3:7c:e9:51:2a:08:6a:d4:40:19:01: 37:f5:43:48:2e:16:9c:e1:c2:89:e8:c8:63:8b:59: 5a:06:f1:1f:15:57:cc:59:e5:d3:d3:e6:d0:22:68: 79:c5:33:db:cf:4a:a4:f1:2b:59:33:a3:50:4f:7d: 8d:02:bf:3d:6a:96:a3:5a:30:7e:68:db:2f:77:88: d7:7d:b0:8d:be:50:cf:9f:1d:15:df:68:ea:9c:c0: 62:18:47:71:74:01:0d:82:b5:03:6b:29:0a:13:b0: cd:db:d1:5d:95:03:ca:05:23:71:2e:09:44:10:38: f3:65:02:b8:5f:6c:62:8f:8e:de:5a:61:47:2d:b7: cf:87:d7:8f:70:0c:7e:c4:0c:7d:45:7b:0d:17:43: dd:d4:93:50:44:7e:06:0f:88:a3:f8:be:7a:2a:79: 4b:17:70:ed:ee:3b:0b:c2:26:b6:56:42:e4:f1:2b: 13:cd:e0:23:6a:af:1e:10:b2:7d:1b:f9:6a:a0:19: 61:1e:d4:15:a5:79:66:bb:c2:4a:05:3f:75:d0:1c: e4:a7:11:5e:b7:18:67:2e:3d:ff:a7:35:3a:99:2d: 84:d7:d2:f0:60:0c:cd:68:46:8c:72:ad:c6:e3:64: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B9:88:B9:03:4D:1B:11:66:85:29:FC:5F:10:4E:F7:99:0A:6A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/dd37a563-a484-3e3c-a379-3494b69517c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.161.104.0/23 IPv6: 2600:2:110::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d1:8f:fa:88:c4:2f:1c:15:b3:23:ce:60:94:a3:6d:16:60: b8:a7:50:bd:e3:84:d9:2e:02:5d:dc:53:3b:18:7d:1a:eb:b3: 70:b8:58:a0:23:eb:4f:60:d7:9c:16:b4:a4:2c:14:89:6e:4f: 3b:b6:50:3b:08:6e:c9:dd:af:0e:a4:d7:43:de:8b:82:00:ac: 9b:bf:cd:44:04:dd:33:df:7b:f0:03:c0:20:8e:7e:62:6b:62: 1e:74:e3:b9:15:32:7c:bb:76:b7:bb:71:01:4c:dc:55:c6:b6: 29:ca:29:9c:9b:bd:c0:2c:e2:57:7a:a7:c2:9a:b6:c6:88:7c: b6:99:99:f6:e6:f7:02:64:1d:96:e6:3e:22:10:01:80:b0:53: 5b:35:af:a3:c0:a2:9e:45:8e:88:13:c4:f0:a1:a4:3f:53:56: 7b:3a:6b:e2:8b:df:d3:18:49:fa:8f:54:d7:ff:4e:66:ed:2a: 3d:44:19:ca:8e:ea:11:25:ee:e9:fd:e7:d0:e7:de:0a:e5:d5: f1:f8:bb:a6:2f:94:47:38:8e:6e:07:94:90:78:9d:f0:8f:fb: e7:ac:7f:b2:98:60:e7:98:da:dc:ac:49:ea:75:38:97:18:50: 22:23:ff:07:01:85:36:3a:52:f0:34:56:7f:59:65:64:14:17: 6a:3d:a4:3b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEu/paI0XYsYxR97pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NjM2ZmE1ZmMtMzkzNS00NzUwLWFhYTQtMTI0YTFkNzQyMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcbe6oB5EW8PPBRFkkhTWV7ww3zpUSoIatRA GQE39UNILhac4cKJ6Mhji1laBvEfFVfMWeXT0+bQImh5xTPbz0qk8StZM6NQT32N Ar89apajWjB+aNsvd4jXfbCNvlDPnx0V32jqnMBiGEdxdAENgrUDaykKE7DN29Fd lQPKBSNxLglEEDjzZQK4X2xij47eWmFHLbfPh9ePcAx+xAx9RXsNF0Pd1JNQRH4G D4ij+L56KnlLF3Dt7jsLwia2VkLk8SsTzeAjaq8eELJ9G/lqoBlhHtQVpXlmu8JK BT910BzkpxFetxhnLj3/pzU6mS2E19LwYAzNaEaMcq3G42Q4iQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNq5iLkDTRsRZoUp/F8QTveZCmoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvZGQzN2E1NjMtYTQ4NC0z ZTNjLWEzNzktMzQ5NGI2OTUxN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBP6FoMA8E AgACMAkDBwQmAAACARAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOtGP+ojELxwVsyPOYJSjbRZguKdQveOE 2S4CXdxTOxh9GuuzcLhYoCPrT2DXnBa0pCwUiW5PO7ZQOwhuyd2vDqTXQ96LggCs m7/NRATdM9978APAII5+YmtiHnTjuRUyfLt2t7txAUzcVca2KcopnJu9wCziV3qn wpq2xoh8tpmZ9ub3AmQdluY+IhABgLBTWzWvo8CinkWOiBPE8KGkP1NWezpr4ovf 0xhJ+o9U1/9OZu0qPUQZyo7qESXu6f3n0OfeCuXV8fi7pi+URziObgeUkHid8I/7 56x/sphg55ja3KxJ6nU4lxhQIiP/BwGFNjpS8DRWf1llZBQXaj2kOw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:50:56 2025 by rpki-client