$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/dda0c169-db63-3fc9-b3c3-8d75b6f7b493.roa File: dda0c169-db63-3fc9-b3c3-8d75b6f7b493.roa (raw, json) Hash identifier: V65iObL729ebZhA30C8PumgFn46hqx/nE/6O8loObCs= Subject key identifier: 16:8C:83:59:FB:AF:01:0D:B7:73:7D:72:32:A5:93:CC:C5:90:6C:09 Certificate issuer: /CN=31009a8b-537b-4076-8ee6-38c45e51e37a Certificate serial: 010D0C9F4328584B99D7A6B2D20B980E9D10A480 Authority key identifier: C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/dda0c169-db63-3fc9-b3c3-8d75b6f7b493.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 63.133.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a6:b2:d2:0b:98:0e:9d:10:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31009a8b-537b-4076-8ee6-38c45e51e37a Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=e83c8ea0-3d2b-494e-ba08-2e170c125e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8e:09:a8:ac:61:1d:af:12:52:34:c2:38:c4: 93:08:87:2c:85:bf:65:ec:b2:df:d8:0d:9c:4d:88: 08:c6:74:79:27:45:c4:2d:87:4d:db:87:5d:35:e8: de:2a:41:0b:0a:3e:e3:ca:78:bb:00:ac:b0:04:1d: d3:e0:87:03:c0:40:73:7c:a2:81:2e:d6:36:00:03: 13:f6:87:f8:77:80:ee:0d:21:1b:c8:c1:50:f0:87: 76:c1:cf:e2:99:d2:06:18:1c:09:d2:e4:ad:14:c9: 48:d0:96:94:27:7c:45:6a:a4:21:ac:ec:b0:44:41: 86:4c:d9:c6:06:09:2c:cf:cb:0d:11:eb:bb:d4:e6: 31:e9:90:a6:d9:f5:1f:8b:df:bb:bb:45:d3:77:2f: 62:56:3a:da:4b:a2:88:a3:e6:43:16:86:44:0d:d8: 83:9d:94:e6:42:f0:43:6b:3b:e0:96:7f:c4:9c:85: fc:16:98:7b:e7:04:63:4a:55:20:d1:95:91:a6:54: 46:09:b5:91:ac:7e:be:69:94:5c:80:5c:6c:3b:8e: dd:06:a1:c6:8e:d2:70:5f:2f:26:3b:5b:06:ef:4b: 47:f6:b9:ba:28:d5:85:48:7e:f6:67:95:d2:59:88: 53:8b:1b:50:c5:4d:aa:0c:e1:37:75:3c:16:18:68: eb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8C:83:59:FB:AF:01:0D:B7:73:7D:72:32:A5:93:CC:C5:90:6C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/dda0c169-db63-3fc9-b3c3-8d75b6f7b493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl X509v3 Authority Key Identifier: keyid:C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer sbgp-ipAddrBlock: critical IPv4: 63.133.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9d:e7:bf:9d:c7:35:22:66:37:34:b8:91:6e:94:80:79:43: 18:6b:bb:b1:98:74:d3:2a:1e:3e:b6:f0:bd:45:92:3e:8e:6f: 01:d0:ca:50:c7:5d:18:54:22:c2:52:94:97:1e:f0:c0:a4:3a: 51:f5:ee:8e:8d:86:ed:29:12:9e:61:86:66:19:5f:cf:5a:1f: 7e:cd:a0:a6:3e:6d:a0:5a:16:7f:c9:5b:76:00:34:f7:da:31: 60:9e:9d:4c:9f:aa:76:2c:ec:d9:19:d3:df:f6:c8:50:98:55: 59:0f:08:f8:c0:79:5b:d4:df:85:ac:77:5b:ae:08:d3:a7:1a: 98:2a:b2:b9:35:06:bf:a8:ff:cf:29:e9:f9:fb:31:0d:f4:b6: 93:b4:19:66:8a:eb:0c:a2:3f:9a:24:b4:eb:10:b8:63:33:8e: d4:40:21:3c:2f:db:2b:10:a3:cc:8f:a3:81:c2:06:06:6b:5b: 1a:80:a1:f5:dc:4d:69:66:55:2d:83:dc:a7:42:ad:02:11:a6: 19:51:f7:89:84:35:85:0a:46:c7:7d:7d:e0:d9:df:f4:ab:88: 87:13:54:1d:cc:30:05:53:bb:da:46:3f:1d:84:55:aa:97:ba: bf:87:93:27:c3:e4:62:9c:11:c5:c0:f7:09:1a:89:3b:33:09: ea:6b:63:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16ay0guYDp0QpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwMDlhOGItNTM3Yi00MDc2LThlZTYtMzhjNDVlNTFl MzdhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZTgzYzhlYTAtM2QyYi00OTRlLWJhMDgtMmUxNzBjMTI1ZTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi44JqKxhHa8SUjTCOMSTCIcshb9l7LLf2A2c TYgIxnR5J0XELYdN24ddNejeKkELCj7jyni7AKywBB3T4IcDwEBzfKKBLtY2AAMT 9of4d4DuDSEbyMFQ8Id2wc/imdIGGBwJ0uStFMlI0JaUJ3xFaqQhrOywREGGTNnG Bgksz8sNEeu71OYx6ZCm2fUfi9+7u0XTdy9iVjraS6KIo+ZDFoZEDdiDnZTmQvBD azvgln/EnIX8Fph75wRjSlUg0ZWRplRGCbWRrH6+aZRcgFxsO47dBqHGjtJwXy8m O1sG70tH9rm6KNWFSH72Z5XSWYhTixtQxU2qDOE3dTwWGGjrMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaMg1n7rwENt3N9cjKlk8zFkGwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTAw OWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0NWU1MWUzN2EvZGRhMGMxNjktZGI2My0z ZmM5LWIzYzMtOGQ3NWI2ZjdiNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzEwMDlhOGItNTM3Yi00MDc2LThl ZTYtMzhjNDVlNTFlMzdhLzMxMDA5YThiLTUzN2ItNDA3Ni04ZWU2LTM4YzQ1ZTUx ZTM3YS5jcmwwHwYDVR0jBBgwFoAUyL9Yo+jg9ye2+B/ryjAfoLdEkTEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMTAwOWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0 NWU1MWUzN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGd57+dxzUiZjc0uJFulIB5Qxhru7GYdNMqHj628L1Fkj6ObwHQylDH XRhUIsJSlJce8MCkOlH17o6Nhu0pEp5hhmYZX89aH37NoKY+baBaFn/JW3YANPfa MWCenUyfqnYs7NkZ09/2yFCYVVkPCPjAeVvU34Wsd1uuCNOnGpgqsrk1Br+o/88p 6fn7MQ30tpO0GWaK6wyiP5oktOsQuGMzjtRAITwv2ysQo8yPo4HCBgZrWxqAofXc TWlmVS2D3KdCrQIRphlR94mENYUKRsd9feDZ3/SriIcTVB3MMAVTu9pGPx2EVaqX ur+HkyfD5GKcEcXA9wkaiTszCeprY7o= -----END CERTIFICATE-----Generated at Wed Nov 5 09:30:35 2025 by rpki-client