$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/fc787895-da58-3d06-bd49-e9c99ef26005.roa File: fc787895-da58-3d06-bd49-e9c99ef26005.roa (raw, json) Hash identifier: KEtO5D4KZtvjkBaFsNbyFH5jkl4G6QiJEQhdHR6wEkw= Subject key identifier: 81:17:D7:F9:2F:88:14:A8:7C:36:43:15:63:1F:26:B7:F3:8A:E5:66 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584B25FC327F3FB856C73FBFF380 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/fc787895-da58-3d06-bd49-e9c99ef26005.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 1239 IP address blocks: 63.161.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:32:7f:3f:b8:56:c7:3f:bf:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=1ddcf7cd-ab3a-40ff-84b5-10a54c05c8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:e2:5a:0c:ba:fe:60:23:87:1c:8d:85:bc: 91:9a:8f:e3:a7:ec:0d:01:c2:76:bb:7c:0b:fa:64: 94:a0:15:d2:9c:40:e2:43:03:a4:c0:98:e1:a8:07: da:0a:01:86:0d:74:0e:39:37:29:d7:ed:56:86:71: 7d:4f:9c:e3:e1:47:e0:9d:2f:08:1f:6b:54:e3:07: 3f:78:01:19:13:21:22:ee:9f:16:81:10:2b:2a:e3: 8b:98:2a:2e:d6:76:41:4f:7b:44:fc:9d:b3:f6:39: 95:ea:3b:b1:c8:5b:c3:6e:8e:f5:02:16:a2:23:91: 7b:ac:d6:44:f2:3e:d0:e4:e6:24:41:80:cd:5e:d9: 9e:aa:3f:3a:b5:98:e3:39:9e:04:99:03:9c:13:8e: e0:52:f1:b4:7b:8d:5a:22:02:5c:0a:92:6d:0d:8f: d0:dc:96:85:a7:5a:02:d4:1c:0b:4a:5b:a5:c8:75: e2:da:76:e8:78:b2:41:06:61:ed:64:9a:0f:c1:39: 80:e4:a7:a4:b1:c2:e8:6e:61:13:8a:e5:83:ff:dc: 1d:8b:2b:1f:d2:64:a4:04:13:2a:ef:ac:3e:eb:d4: 3f:55:fd:53:62:22:44:6f:be:e2:89:f8:c2:25:f0: a7:0e:aa:69:82:d7:84:65:62:ea:da:10:b3:e1:5e: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:17:D7:F9:2F:88:14:A8:7C:36:43:15:63:1F:26:B7:F3:8A:E5:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/fc787895-da58-3d06-bd49-e9c99ef26005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.161.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ae:33:08:16:dd:45:31:56:97:16:b5:1d:7b:f8:6f:45:51: 35:5e:28:0b:0c:5b:9c:d9:5e:72:69:7e:80:25:3f:01:f3:14: 7b:b1:66:ea:cf:a9:85:6b:8b:56:bd:6b:60:2d:d1:41:ef:ac: 53:53:bc:98:df:45:09:08:de:71:5d:3a:09:d1:67:2e:c4:8b: 13:56:5e:e0:71:83:1c:09:55:39:2f:c8:27:9e:fc:90:81:58: 4f:63:a5:4a:14:51:4c:6c:b3:d6:b7:36:bd:9b:6c:72:8e:f6: 82:da:a5:b3:ba:d5:d2:a2:38:07:a2:75:8e:b5:56:ba:00:fa: 8f:43:3c:f3:5f:4c:fe:d7:91:a2:d2:56:8b:61:f7:ec:05:09: 2e:8e:4b:bd:9f:80:37:a9:d7:35:7f:25:a9:ec:47:45:ee:d3: fb:4d:ac:b0:39:ff:99:25:0f:c2:0c:e3:0e:45:f5:46:ae:70: 54:24:c3:24:a4:70:ce:59:23:c5:6b:62:4b:15:d7:9e:4a:17: 0b:2c:2f:24:ad:21:97:2e:f1:e0:ce:23:46:62:14:c4:e6:d7: 3a:50:28:62:18:4d:be:dc:7a:ff:b8:b7:e0:ca:50:f0:c7:8a: 3b:63:d2:77:a4:4a:7e:dc:61:4c:04:5b:f0:00:f5:9f:b9:28: ee:8d:37:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DJ/P7hWxz+/84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk MWRkY2Y3Y2QtYWIzYS00MGZmLTg0YjUtMTBhNTRjMDVjOGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYbiWgy6/mAjhxyNhbyRmo/jp+wNAcJ2u3wL +mSUoBXSnEDiQwOkwJjhqAfaCgGGDXQOOTcp1+1WhnF9T5zj4UfgnS8IH2tU4wc/ eAEZEyEi7p8WgRArKuOLmCou1nZBT3tE/J2z9jmV6juxyFvDbo71AhaiI5F7rNZE 8j7Q5OYkQYDNXtmeqj86tZjjOZ4EmQOcE47gUvG0e41aIgJcCpJtDY/Q3JaFp1oC 1BwLSlulyHXi2nboeLJBBmHtZJoPwTmA5KekscLobmETiuWD/9wdiysf0mSkBBMq 76w+69Q/Vf1TYiJEb77iifjCJfCnDqppgteEZWLq2hCz4V4SowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEX1/kviBSofDZDFWMfJrfziuVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvZmM3ODc4OTUtZGE1OC0z ZDA2LWJkNDktZTljOTllZjI2MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP6FMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGuMwgW3UUxVpcWtR17+G9FUTVeKAsMW5zZXnJpfoAlPwHzFHuxZurP qYVri1a9a2At0UHvrFNTvJjfRQkI3nFdOgnRZy7EixNWXuBxgxwJVTkvyCee/JCB WE9jpUoUUUxss9a3Nr2bbHKO9oLapbO61dKiOAeidY61VroA+o9DPPNfTP7XkaLS Voth9+wFCS6OS72fgDep1zV/JansR0Xu0/tNrLA5/5klD8IM4w5F9UaucFQkwySk cM5ZI8VrYksV155KFwssLyStIZcu8eDOI0ZiFMTm1zpQKGIYTb7cev+4t+DKUPDH ijtj0nekSn7cYUwEW/AA9Z+5KO6NN3M= -----END CERTIFICATE-----Generated at Tue Nov 4 16:58:08 2025 by rpki-client