$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/df855ef3-63e8-3fd3-a993-50c907f2703e.roa File: df855ef3-63e8-3fd3-a993-50c907f2703e.roa (raw, json) Hash identifier: +lmCtOj90u1on21XWLV8SSmUC66P+Jey9NYuCpGel1g= Subject key identifier: AC:4E:7B:41:77:28:BF:D5:58:05:80:CD:A4:FF:9F:A2:AA:72:05:E8 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584B94422217B217F1B40685A740 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/df855ef3-63e8-3fd3-a993-50c907f2703e.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 174 IP address blocks: 63.174.134.0/23 maxlen: 24 63.174.140.0/23 maxlen: 24 63.174.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:22:17:b2:17:f1:b4:06:85:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=9b2c09e0-d4c7-4148-a35a-157757723b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:86:ca:ad:23:db:e9:ae:df:98:0a:51:ef:c1: 90:78:c6:d8:21:1d:e3:3f:14:e2:fe:4d:79:ca:8e: f4:a5:19:c9:24:3b:d1:1c:d9:c6:b2:54:ff:3f:85: f8:5a:5c:c6:b3:81:dd:90:b8:3a:dc:83:d0:b2:c7: 0d:55:09:96:1d:9d:26:87:05:6d:63:c6:6d:f2:f4: dd:6c:0f:8a:f2:b3:c4:69:c5:f9:8c:92:53:e2:a0: 1b:b7:c5:72:ef:7f:42:00:91:8e:e9:7a:28:00:c3: 6b:54:b8:85:2c:2c:f8:f1:08:bf:d4:c5:d1:70:73: dc:01:a0:51:a6:7a:ab:a5:56:1e:78:ac:5b:9f:19: a7:7d:ae:54:5f:c8:fa:ce:86:37:8f:ad:07:a4:3a: 84:f2:54:08:e8:1b:4c:33:7e:34:b0:54:49:a4:db: 57:c9:8c:7c:a7:b5:0e:8e:6e:d4:20:f9:8a:57:0c: fd:00:ce:ac:cf:a9:f6:d9:ae:32:ea:8e:90:b0:18: 3d:67:de:e5:d4:73:ee:94:ea:f8:c9:8d:65:cc:c8: 63:32:a9:63:0b:03:22:f5:cd:97:5c:73:bb:c9:e5: 40:bd:a4:22:51:c4:6a:21:c5:28:39:a7:22:8f:de: 17:8e:8e:0b:f5:3d:48:20:6e:48:03:cd:3a:5b:19: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4E:7B:41:77:28:BF:D5:58:05:80:CD:A4:FF:9F:A2:AA:72:05:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/df855ef3-63e8-3fd3-a993-50c907f2703e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.174.134.0/23 63.174.140.0-63.174.142.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:6a:71:06:d3:76:8c:7d:3f:63:92:30:a3:3e:65:0e:b2:3d: cd:ba:a3:54:7e:03:25:e9:8a:8b:05:76:8c:50:b2:bf:f9:b5: a3:4b:62:a4:24:68:f2:6d:f9:ec:c8:b4:72:a0:38:04:75:8b: a4:8b:11:23:f6:6b:e6:7d:e9:79:79:69:5d:c5:ce:84:69:ee: 7b:bc:d4:59:09:06:28:d1:3a:22:06:55:1e:84:dc:37:66:63: f2:60:c8:fa:f3:2a:eb:2b:cf:53:70:dc:5d:9a:13:0b:2c:b2: b9:36:a1:54:ec:e5:3e:db:de:29:a6:3d:cd:7f:2f:83:fe:64: 72:ce:0a:a9:c5:f3:e0:b6:fd:d9:dd:20:c8:5a:5b:38:31:35: a7:dd:a0:bc:6c:51:bd:4c:ab:5b:6d:8a:8f:f1:5e:84:01:d4: 50:8a:1c:73:bd:07:c2:c6:76:63:82:6d:0f:90:24:a7:27:c3: 2f:3c:24:d9:e3:1e:3f:70:42:bb:7e:8e:8d:02:e9:6a:f7:71: 96:6c:9f:6e:d0:a2:37:92:bf:33:54:67:f9:b4:59:9b:84:16: 80:bd:63:88:04:0b:db:89:f8:62:13:c7:50:aa:d7:dc:c6:51: 85:54:20:8a:f6:7f:a1:b3:16:65:42:d1:54:82:9a:4c:df:63: 27:ca:ad:b2 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEuUQiIXshfxtAaFp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk OWIyYzA5ZTAtZDRjNy00MTQ4LWEzNWEtMTU3NzU3NzIzYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYbKrSPb6a7fmApR78GQeMbYIR3jPxTi/k15 yo70pRnJJDvRHNnGslT/P4X4WlzGs4HdkLg63IPQsscNVQmWHZ0mhwVtY8Zt8vTd bA+K8rPEacX5jJJT4qAbt8Vy739CAJGO6XooAMNrVLiFLCz48Qi/1MXRcHPcAaBR pnqrpVYeeKxbnxmnfa5UX8j6zoY3j60HpDqE8lQI6BtMM340sFRJpNtXyYx8p7UO jm7UIPmKVwz9AM6sz6n22a4y6o6QsBg9Z97l1HPulOr4yY1lzMhjMqljCwMi9c2X XHO7yeVAvaQiUcRqIcUoOacij94Xjo4L9T1IIG5IA806Wxl0aQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFKxOe0F3KL/VWAWAzaT/n6KqcgXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvZGY4NTVlZjMtNjNlOC0z ZmQzLWE5OTMtNTBjOTA3ZjI3MDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBP66GMAwD BAI/rowDBAA/ro4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAlmpxBtN2jH0/Y5Iwoz5lDrI9zbqjVH4DJemK iwV2jFCyv/m1o0tipCRo8m357Mi0cqA4BHWLpIsRI/Zr5n3peXlpXcXOhGnue7zU WQkGKNE6IgZVHoTcN2Zj8mDI+vMq6yvPU3DcXZoTCyyyuTahVOzlPtveKaY9zX8v g/5kcs4KqcXz4Lb92d0gyFpbODE1p92gvGxRvUyrW22Kj/FehAHUUIocc70HwsZ2 Y4JtD5AkpyfDLzwk2eMeP3BCu36OjQLpavdxlmyfbtCiN5K/M1Rn+bRZm4QWgL1j iAQL24n4YhPHUKrX3MZRhVQgivZ/obMWZULRVIKaTN9jJ8qtsg== -----END CERTIFICATE-----Generated at Wed Nov 5 01:51:05 2025 by rpki-client