$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa File: 1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa (raw, json) Hash identifier: MwXXzQhIOGGM3oEbExjpAhY4DvSlhxVu5z0i5xXisQI= Subject key identifier: 6E:20:B8:37:CD:6D:E3:B6:D4:3D:94:7C:72:8A:81:25:B0:B7:BF:04 Certificate issuer: /CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Certificate serial: 010D0C9F4328584B3AEC3B0EC8B61DF106027B00 Authority key identifier: 3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 6407 IP address blocks: 108.63.0.0/21 maxlen: 24 108.63.8.0/22 maxlen: 24 108.63.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:3b:0e:c8:b6:1d:f1:06:02:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4940f4-61c2-4251-acdb-36be83cdc744 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=4da9bd22-d511-4236-b2d1-6deb1b14a25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:bd:40:73:a7:95:6c:af:5b:d8:00:76:29: 2b:86:8d:d0:55:fd:35:ec:43:17:8a:9a:6e:42:13: fa:2d:e2:f0:b2:22:b5:0d:38:96:de:f7:2e:97:aa: b5:01:b8:04:81:eb:37:ae:ac:01:d0:58:8f:b7:6b: 0f:04:82:3b:39:a4:5e:2a:70:e2:e1:b2:07:30:0d: 80:a2:14:e4:bd:3f:c4:1e:98:42:e3:19:9f:54:cb: 7e:f5:f9:1d:3d:fe:8c:3d:ea:6d:33:e1:92:92:16: 58:91:20:a0:c2:06:7c:a9:a4:a1:42:46:0b:dc:b5: d4:46:ec:f5:c3:38:f4:e9:b8:87:6c:70:e6:0f:09: 6b:2f:6e:f3:32:d9:f0:8b:6b:15:7f:85:d4:18:df: aa:86:0d:86:14:c2:db:9a:e8:1e:78:03:07:63:b4: c9:f3:5e:dc:08:82:81:2d:52:02:d7:80:36:30:5d: 85:ee:d1:ac:07:f1:df:c1:46:15:d2:09:3a:65:5f: 3a:31:ca:c8:a3:44:f3:e8:57:d6:de:31:40:c9:48: 04:d2:e6:a5:d1:be:eb:bd:e3:b5:a9:69:5d:1e:65: 9c:d4:c3:81:8b:7d:37:ca:14:36:a7:ce:1b:8a:4c: 66:62:3c:c1:01:16:a9:60:06:6b:2a:9f:00:31:97: cc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:20:B8:37:CD:6D:E3:B6:D4:3D:94:7C:72:8A:81:25:B0:B7:BF:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/1b514e1b-42b6-30f9-bbaa-1a960a2af6e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.crl X509v3 Authority Key Identifier: keyid:3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer sbgp-ipAddrBlock: critical IPv4: 108.63.0.0-108.63.13.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:00:93:be:fb:7a:f7:f2:f2:91:da:ff:6d:9f:5c:26:77:bc: 5f:38:60:e3:83:02:94:13:6f:7b:9f:be:42:8c:9c:14:b4:b3: bf:1a:6e:5a:5c:c4:5d:fc:ec:b4:70:58:04:9d:61:e0:ca:9b: a5:04:56:9a:63:b7:ec:42:91:84:87:15:a8:95:75:35:b7:d7: 6c:d7:72:27:40:84:c9:7b:de:e6:3a:81:0b:a5:46:5c:9f:3d: 64:b1:dc:18:b7:ea:07:55:64:2a:3b:d0:77:ba:74:98:d4:f9: 24:66:39:0f:a1:49:56:b9:a9:0d:7a:f1:4c:3b:e5:fe:a1:47: 14:1a:53:eb:97:eb:7d:6b:a4:d9:8a:15:fd:51:c9:db:d9:03: 08:27:1c:c6:0a:70:2e:56:16:fc:a9:ad:e6:97:50:65:cb:6a: 08:7d:d9:69:c8:6b:2e:81:94:47:72:e5:5d:44:6f:67:5e:36: 02:1a:d2:0d:70:30:e0:76:a1:7e:c2:0b:0e:f8:e5:54:ba:d9: 09:cd:85:e8:07:9b:b8:e8:3c:62:e4:52:1d:77:c5:87:35:b3: d9:65:4b:ae:06:a4:43:6d:11:77:37:55:57:f6:f3:fa:ef:36: 5c:ca:b5:f9:6d:a8:98:ab:cd:f6:3a:0f:7c:10:3a:54:94:67: a5:00:d5:93 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEs67DsOyLYd8QYCewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2Rj NzQ0MB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk NGRhOWJkMjItZDUxMS00MjM2LWIyZDEtNmRlYjFiMTRhMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvS9QHOnlWyvW9gAdikrho3QVf017EMXippu QhP6LeLwsiK1DTiW3vcul6q1AbgEges3rqwB0FiPt2sPBII7OaReKnDi4bIHMA2A ohTkvT/EHphC4xmfVMt+9fkdPf6MPeptM+GSkhZYkSCgwgZ8qaShQkYL3LXURuz1 wzj06biHbHDmDwlrL27zMtnwi2sVf4XUGN+qhg2GFMLbmugeeAMHY7TJ817cCIKB LVIC14A2MF2F7tGsB/HfwUYV0gk6ZV86McrIo0Tz6FfW3jFAyUgE0ual0b7rveO1 qWldHmWc1MOBi303yhQ2p84bikxmYjzBARapYAZrKp8AMZfMZQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFG4guDfNbeO21D2UfHKKgSWwt78EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5 NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvMWI1MTRlMWItNDJiNi0z MGY5LWJiYWEtMWE5NjBhMmFmNmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGQ0OTQwZjQtNjFjMi00MjUxLWFj ZGItMzZiZTgzY2RjNzQ0LzRkNDk0MGY0LTYxYzItNDI1MS1hY2RiLTM2YmU4M2Nk Yzc0NC5jcmwwHwYDVR0jBBgwFoAUPdev1k6DmBY4LIH9klbSh2ozmcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJl ODNjZGM3NDQuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwBsPwME AWw/DDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBZAJO++3r38vKR2v9tn1wmd7xfOGDjgwKUE297n75CjJwU tLO/Gm5aXMRd/Oy0cFgEnWHgypulBFaaY7fsQpGEhxWolXU1t9ds13InQITJe97m OoELpUZcnz1ksdwYt+oHVWQqO9B3unSY1PkkZjkPoUlWuakNevFMO+X+oUcUGlPr l+t9a6TZihX9Ucnb2QMIJxzGCnAuVhb8qa3ml1Bly2oIfdlpyGsugZRHcuVdRG9n XjYCGtINcDDgdqF+wgsO+OVUutkJzYXoB5u46Dxi5FIdd8WHNbPZZUuuBqRDbRF3 N1VX9vP67zZcyrX5baiYq832Og98EDpUlGelANWT -----END CERTIFICATE-----Generated at Fri Oct 10 17:30:09 2025 by rpki-client