$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa File: cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa (raw, json) Hash identifier: cjSSTwBg1ZmxJP5TUkHHhFEAQ5+RmbwY8ZjHkH7i5/E= Subject key identifier: C5:89:82:31:ED:E4:05:BF:C2:78:8E:7C:1E:5E:2F:F1:DE:D5:26:1A Certificate issuer: /CN=31009a8b-537b-4076-8ee6-38c45e51e37a Certificate serial: 010D0C9F4328584B99D7A6C4B8BFAD2214101600 Authority key identifier: C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 63.133.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a6:c4:b8:bf:ad:22:14:10:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31009a8b-537b-4076-8ee6-38c45e51e37a Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=755f2be5-714a-408a-a44e-623906011a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b3:b9:bb:59:a3:80:ca:36:ce:7c:96:4a:00: 2b:f5:13:3a:5b:c0:af:04:80:97:b0:53:bc:a8:89: c4:0a:58:38:50:c0:00:dc:65:81:22:83:b0:93:a8: 99:e3:46:4a:71:72:d1:23:8b:f3:ad:8d:fe:8a:41: 74:42:c9:f1:1a:ef:bd:98:05:c2:aa:c5:4b:29:ce: 11:1d:7b:8b:c0:0c:4c:18:01:c6:43:75:fd:b7:c1: 35:48:38:ca:ef:cc:2c:71:fa:d0:b9:e0:d2:06:cc: 37:18:c4:e0:e7:1e:3c:e5:7d:8c:e8:fc:9e:60:8c: 65:e2:4d:57:d1:50:45:81:97:fd:39:73:b8:eb:59: 44:eb:d7:1c:a3:78:81:87:31:e5:ab:5c:18:6f:78: 74:d0:99:37:cb:ba:af:10:f1:f0:21:48:41:2b:ca: 38:cb:53:d6:4d:7b:ea:7a:dd:1e:66:49:2c:f2:54: fe:db:8f:51:0a:0e:98:43:16:1c:d4:ff:44:b5:fa: 38:22:85:41:77:93:e7:90:c6:3d:00:cc:96:5f:be: 14:57:f3:ec:56:53:21:a1:29:b3:71:53:d0:3d:a5: f1:e2:6f:80:05:0e:e0:9e:7b:dc:9c:89:d0:33:ae: 22:f5:22:7d:cf:ed:44:d5:98:53:68:3b:4a:2a:aa: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:89:82:31:ED:E4:05:BF:C2:78:8E:7C:1E:5E:2F:F1:DE:D5:26:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl X509v3 Authority Key Identifier: keyid:C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer sbgp-ipAddrBlock: critical IPv4: 63.133.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e5:d9:b9:36:ba:18:8f:46:86:07:46:8d:c4:40:44:c1:64: 0b:69:3a:89:02:de:af:5c:fb:85:b6:55:2d:f6:1c:7a:29:10: 50:90:90:d2:19:52:1f:a0:f1:1c:6b:b6:3c:f1:92:b2:34:89: 20:8a:0f:a0:40:de:77:03:02:1c:15:6c:7c:cf:98:4b:28:ae: 71:1c:69:d5:ce:74:f9:8c:ba:0e:8b:a1:e2:57:4f:6a:17:c2: ba:31:45:28:2d:5e:ba:3b:b6:53:f6:bc:d8:6b:ff:1b:15:ca: db:89:69:a1:99:32:9a:48:13:be:f8:a4:c6:d7:74:45:a4:73: cc:55:5c:c4:b0:e8:54:74:39:21:66:30:f1:44:95:6d:12:66: a6:55:d3:21:48:fe:4f:aa:d1:4e:73:59:75:6d:d4:13:86:fb: c7:d9:16:db:9d:53:94:17:52:7f:69:5b:e4:93:2a:16:d5:5e: 9e:fb:4a:43:21:77:e4:31:db:5a:d3:27:b9:5e:ba:82:14:16: 4c:97:fe:82:3b:e9:7a:fe:7c:f3:ea:a6:1f:dd:b7:ef:bb:74: 3c:06:fe:9e:10:bb:60:30:20:94:0a:ce:62:16:f1:9f:d2:9a: 30:18:67:2b:0a:53:f4:9c:f1:c2:d7:e6:83:3b:38:ff:35:e5: 4f:25:40:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16bEuL+tIhQQFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwMDlhOGItNTM3Yi00MDc2LThlZTYtMzhjNDVlNTFl MzdhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NzU1ZjJiZTUtNzE0YS00MDhhLWE0NGUtNjIzOTA2MDExYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbO5u1mjgMo2znyWSgAr9RM6W8CvBICXsFO8 qInEClg4UMAA3GWBIoOwk6iZ40ZKcXLRI4vzrY3+ikF0QsnxGu+9mAXCqsVLKc4R HXuLwAxMGAHGQ3X9t8E1SDjK78wscfrQueDSBsw3GMTg5x485X2M6PyeYIxl4k1X 0VBFgZf9OXO461lE69cco3iBhzHlq1wYb3h00Jk3y7qvEPHwIUhBK8o4y1PWTXvq et0eZkks8lT+249RCg6YQxYc1P9Etfo4IoVBd5PnkMY9AMyWX74UV/PsVlMhoSmz cVPQPaXx4m+ABQ7gnnvcnInQM64i9SJ9z+1E1ZhTaDtKKqr9YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWJgjHt5AW/wniOfB5eL/He1SYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTAw OWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0NWU1MWUzN2EvY2RjZjFlM2MtYjBmNC0z OGQyLTlhYTEtMmFlNjZhNDI1ZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzEwMDlhOGItNTM3Yi00MDc2LThl ZTYtMzhjNDVlNTFlMzdhLzMxMDA5YThiLTUzN2ItNDA3Ni04ZWU2LTM4YzQ1ZTUx ZTM3YS5jcmwwHwYDVR0jBBgwFoAUyL9Yo+jg9ye2+B/ryjAfoLdEkTEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMTAwOWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0 NWU1MWUzN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfl2bk2uhiPRoYHRo3EQETBZAtpOokC3q9c+4W2VS32HHopEFCQkNIZ Uh+g8RxrtjzxkrI0iSCKD6BA3ncDAhwVbHzPmEsornEcadXOdPmMug6LoeJXT2oX wroxRSgtXro7tlP2vNhr/xsVytuJaaGZMppIE774pMbXdEWkc8xVXMSw6FR0OSFm MPFElW0SZqZV0yFI/k+q0U5zWXVt1BOG+8fZFtudU5QXUn9pW+STKhbVXp77SkMh d+Qx21rTJ7leuoIUFkyX/oI76Xr+fPPqph/dt++7dDwG/p4Qu2AwIJQKzmIW8Z/S mjAYZysKU/Sc8cLX5oM7OP815U8lQB0= -----END CERTIFICATE-----Generated at Wed Nov 5 21:31:08 2025 by rpki-client