$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa File: b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa (raw, json) Hash identifier: 1eznJyvOeiEQkUqXb2d/7t/fryBEgLetGgApHcksAHU= Subject key identifier: 37:50:9B:79:13:94:19:A4:82:EB:69:C8:8F:F2:8D:54:5E:A8:69:E3 Certificate issuer: /CN=9bd0a861-f835-4585-9517-e1dba949c123 Certificate serial: 010D0C9F4328584BA9326010AEE8F63D05755C80 Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 3214 IP address blocks: 74.118.192.0/22 maxlen: 24 104.193.8.0/22 maxlen: 24 104.245.96.0/21 maxlen: 24 104.255.64.0/21 maxlen: 24 142.0.32.0/20 maxlen: 24 162.213.24.0/21 maxlen: 24 162.248.72.0/21 maxlen: 24 204.124.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:60:10:ae:e8:f6:3d:05:75:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=fadf8eb8-c1b7-4d9a-9ff1-24d5f1c1f5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:58:da:30:c6:26:55:23:2f:97:e5:87:bd:64: 32:2a:37:ff:f8:3b:c1:4f:8b:13:b3:18:15:41:f7: 71:ab:36:40:8f:5f:59:e1:08:f5:af:07:c0:f0:8b: 3f:d3:ed:41:0e:e0:dd:98:39:18:bc:d1:68:87:c9: 7a:a3:ff:33:42:9c:ab:22:45:9f:3e:b0:56:1d:dd: 08:42:24:74:a5:0f:11:bb:24:b9:78:a5:d3:cb:77: 68:8c:06:b5:b6:d1:da:ca:21:11:93:22:7e:af:5d: d7:42:b5:83:8b:06:a2:a9:cb:9f:6a:c8:c0:f9:41: 46:d1:28:1e:c7:66:99:9d:7b:a9:5c:e6:69:43:0d: 81:dd:6c:55:1e:e9:d3:28:34:88:9e:9f:d2:93:17: 7f:a9:02:9c:a9:81:b7:2f:fe:ed:83:dd:db:2d:1c: b6:75:bd:27:4b:4a:b1:e5:bb:9e:ed:aa:cb:6b:95: 43:e9:8c:4a:bf:3e:60:78:90:ff:a9:7b:0a:00:c3: 7d:b7:99:24:61:b7:0c:8b:0a:95:c2:5f:9a:2d:da: 38:69:3d:15:05:8c:fe:0b:84:e8:9c:29:8b:a5:cc: 46:e5:94:36:fb:68:1e:32:29:54:9d:66:40:87:61: b2:58:eb:40:17:02:b2:7e:d3:ec:02:d0:29:58:da: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:50:9B:79:13:94:19:A4:82:EB:69:C8:8F:F2:8D:54:5E:A8:69:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/b63f0ff7-15b0-3e74-af0a-9a007f546dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl X509v3 Authority Key Identifier: keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer sbgp-ipAddrBlock: critical IPv4: 74.118.192.0/22 104.193.8.0/22 104.245.96.0/21 104.255.64.0/21 142.0.32.0/20 162.213.24.0/21 162.248.72.0/21 204.124.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d6:ad:1a:cf:9e:a9:f6:75:49:a5:d3:8a:03:f1:3e:3b:d1: 29:b0:85:8f:ea:d6:db:87:99:fd:7a:1a:51:de:5e:b1:88:0a: 7c:f2:10:de:92:88:5d:50:d9:b6:e0:9b:f5:f6:77:6b:f5:94: d3:84:c5:ce:f9:80:a3:f5:fb:01:6c:63:fd:a5:e3:e2:88:86: 93:46:49:b1:09:77:d0:00:19:0e:30:c2:da:b7:6d:4b:10:12: 78:e7:bc:04:4f:16:b6:b3:4d:33:60:5a:ba:82:2c:02:16:d6: c3:00:f9:f6:b8:d5:8b:fb:7f:70:29:24:0f:8e:6c:26:29:74: c6:db:12:74:b3:d1:7c:b2:24:6e:af:a1:c9:bb:fd:09:01:64: 26:fe:c6:88:d2:77:78:e5:22:a9:e4:d2:e0:4c:36:2a:5b:24: 2e:23:48:cf:d2:cd:37:26:30:86:b7:df:49:c3:56:80:89:74: 7e:12:2a:85:7d:93:f9:43:fc:b5:ef:01:7e:00:4a:9f:34:fa: ae:1f:76:05:cb:bb:95:4d:bc:fc:87:25:96:ed:28:6a:0f:ff: fd:29:94:22:1b:f5:75:5e:97:8c:d9:58:33:95:46:d9:e7:d5: b7:cf:98:ce:61:10:ca:1c:a9:57:06:27:b9:a5:e3:48:4f:d5: a2:b0:58:88 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEupMmAQruj2PQV1XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJkMGE4NjEtZjgzNS00NTg1LTk1MTctZTFkYmE5NDlj MTIzMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZmFkZjhlYjgtYzFiNy00ZDlhLTlmZjEtMjRkNWYxYzFmNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFjaMMYmVSMvl+WHvWQyKjf/+DvBT4sTsxgV QfdxqzZAj19Z4Qj1rwfA8Is/0+1BDuDdmDkYvNFoh8l6o/8zQpyrIkWfPrBWHd0I QiR0pQ8RuyS5eKXTy3dojAa1ttHayiERkyJ+r13XQrWDiwaiqcufasjA+UFG0Sge x2aZnXupXOZpQw2B3WxVHunTKDSInp/Skxd/qQKcqYG3L/7tg93bLRy2db0nS0qx 5bue7arLa5VD6YxKvz5geJD/qXsKAMN9t5kkYbcMiwqVwl+aLdo4aT0VBYz+C4To nCmLpcxG5ZQ2+2geMilUnWZAh2GyWOtAFwKyftPsAtApWNp2QQIDAQABo4IDfzCC A3swHQYDVR0OBBYEFDdQm3kTlBmkgutpyI/yjVReqGnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQw YTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRiYTk0OWMxMjMvYjYzZjBmZjctMTViMC0z ZTc0LWFmMGEtOWEwMDdmNTQ2ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWJkMGE4NjEtZjgzNS00NTg1LTk1 MTctZTFkYmE5NDljMTIzLzliZDBhODYxLWY4MzUtNDU4NS05NTE3LWUxZGJhOTQ5 YzEyMy5jcmwwHwYDVR0jBBgwFoAU5LcXAHA6BDXEY3u/qUeRKvFBvBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YmQwYTg2MS1mODM1LTQ1ODUtOTUxNy1lMWRi YTk0OWMxMjMuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCSnbAAwQC aMEIAwQDaPVgAwQDaP9AAwQEjgAgAwQDotUYAwQDovhIAwQCzHy0MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHzWrRrPnqn2dUml04oD8T470SmwhY/q1tuHmf16GlHeXrGICnzyEN6SiF1Q2bbg m/X2d2v1lNOExc75gKP1+wFsY/2l4+KIhpNGSbEJd9AAGQ4wwtq3bUsQEnjnvARP FrazTTNgWrqCLAIW1sMA+fa41Yv7f3ApJA+ObCYpdMbbEnSz0XyyJG6vocm7/QkB ZCb+xojSd3jlIqnk0uBMNipbJC4jSM/SzTcmMIa330nDVoCJdH4SKoV9k/lD/LXv AX4ASp80+q4fdgXLu5VNvPyHJZbtKGoP//0plCIb9XVel4zZWDOVRtnn1bfPmM5h EMocqVcGJ7ml40hP1aKwWIg= -----END CERTIFICATE-----Generated at Wed Nov 5 02:52:10 2025 by rpki-client