$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/38210fb7-c765-3c3e-9391-b97eeeb28281.roa File: 38210fb7-c765-3c3e-9391-b97eeeb28281.roa (raw, json) Hash identifier: DLjzNhNUXbods9IM22oT1Piabk6BO46UREXTpKVKWF4= Subject key identifier: 9B:7C:C0:E4:77:6B:54:30:EC:E6:E2:94:F1:C2:18:43:C5:D3:49:DB Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584BC53AF89D035A44E8023A9C00 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/38210fb7-c765-3c3e-9391-b97eeeb28281.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 399139 IP address blocks: 63.161.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:f8:9d:03:5a:44:e8:02:3a:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=c7a02b8f-ea2a-408d-9ddd-cec70eca9991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:a7:e7:ea:0a:b0:33:20:23:a2:7b:c6:fe: d1:dc:77:42:85:c2:73:7b:fc:22:1a:d6:09:05:1b: 7a:8b:a6:44:04:ec:46:86:dd:15:aa:1a:77:18:e6: 75:81:e8:be:55:5c:fe:27:bb:09:15:c2:16:b0:52: 84:66:00:55:2c:bc:48:df:63:30:37:d3:4f:16:09: 42:15:63:5a:52:45:ff:d0:f2:ed:4d:f0:df:48:4c: bf:4f:7e:d8:5f:42:e5:1c:b6:42:78:7e:91:b3:b8: 69:6e:50:42:85:0f:19:f5:b9:03:69:c4:4f:49:55: 46:84:f8:11:ba:69:00:f9:c7:73:9b:67:c1:75:4b: 2f:73:78:2e:b2:36:d4:1f:b5:a9:96:6c:71:e8:db: 06:31:5c:a1:02:0e:a0:09:39:14:a7:9c:59:82:1b: d6:89:fa:0a:c9:29:d0:a9:21:b4:36:16:80:1d:c1: 2a:5d:ac:46:84:38:18:11:58:b3:13:7f:ad:30:ea: b9:e0:92:2d:94:62:63:90:c9:ef:90:5a:39:f1:f4: c4:03:37:78:a5:68:f1:ce:bc:40:9b:b9:4e:ad:69: 11:e6:3c:31:49:9a:0b:c9:3d:49:21:9d:be:48:cc: b8:7f:3c:70:fc:b9:a4:8e:f4:8f:2d:a9:92:47:a7: 65:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7C:C0:E4:77:6B:54:30:EC:E6:E2:94:F1:C2:18:43:C5:D3:49:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/38210fb7-c765-3c3e-9391-b97eeeb28281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.161.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1f:57:3f:ad:a9:93:21:1c:a4:58:8c:9f:ca:b6:a5:42:f0: f6:f7:2e:b2:95:c8:ac:74:5b:f0:45:0d:db:10:87:65:93:f1: da:b0:d8:cd:d2:1b:a7:55:53:f6:05:fd:c3:12:f6:8a:ed:64: 91:b4:9f:ed:0a:8f:78:1b:f2:3c:eb:ea:aa:5b:49:78:0f:45: 2d:ec:72:92:34:b4:5b:2f:c7:3d:33:af:ac:33:d0:af:9a:46: 85:7d:5d:01:32:67:d0:fd:80:e9:3b:84:72:37:59:fd:7d:75: ee:03:1c:51:32:85:81:b0:73:e1:66:61:5f:d3:a2:5d:e8:5e: 8e:fe:58:2e:3c:c0:62:8b:9f:e5:76:03:6d:81:f5:6a:8f:9c: 0b:17:e0:ee:1b:b1:ea:1c:00:aa:39:e3:a8:1f:8c:6c:5f:da: f4:63:c8:d4:5d:39:9b:c2:27:83:2e:82:3e:37:5a:45:3c:0d: 6e:e2:f2:29:44:d2:15:8c:38:a4:89:a1:81:26:21:ff:7d:39: f8:b8:a0:db:e8:ce:ca:33:af:45:0d:5f:a6:aa:21:01:8a:4f: 82:79:74:e1:28:22:5b:db:4f:4f:c2:5f:58:58:ac:c0:d0:aa: 9c:ae:dc:44:ce:66:ef:bb:56:87:95:87:5b:b0:e1:0f:5e:a4: 5a:0c:7d:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOvidA1pE6AI6nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YzdhMDJiOGYtZWEyYS00MDhkLTlkZGQtY2VjNzBlY2E5OTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRan5+oKsDMgI6J7xv7R3HdChcJze/wiGtYJ BRt6i6ZEBOxGht0Vqhp3GOZ1gei+VVz+J7sJFcIWsFKEZgBVLLxI32MwN9NPFglC FWNaUkX/0PLtTfDfSEy/T37YX0LlHLZCeH6Rs7hpblBChQ8Z9bkDacRPSVVGhPgR umkA+cdzm2fBdUsvc3gusjbUH7Wplmxx6NsGMVyhAg6gCTkUp5xZghvWifoKySnQ qSG0NhaAHcEqXaxGhDgYEVizE3+tMOq54JItlGJjkMnvkFo58fTEAzd4pWjxzrxA m7lOrWkR5jwxSZoLyT1JIZ2+SMy4fzxw/LmkjvSPLamSR6dlKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJt8wOR3a1Qw7ObilPHCGEPF00nbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvMzgyMTBmYjctYzc2NS0z YzNlLTkzOTEtYjk3ZWVlYjI4MjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP6FoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgfVz+tqZMhHKRYjJ/KtqVC8Pb3LrKVyKx0W/BFDdsQh2WT8dqw2M3S G6dVU/YF/cMS9ortZJG0n+0Kj3gb8jzr6qpbSXgPRS3scpI0tFsvxz0zr6wz0K+a RoV9XQEyZ9D9gOk7hHI3Wf19de4DHFEyhYGwc+FmYV/Tol3oXo7+WC48wGKLn+V2 A22B9WqPnAsX4O4bseocAKo546gfjGxf2vRjyNRdOZvCJ4Mugj43WkU8DW7i8ilE 0hWMOKSJoYEmIf99Ofi4oNvozsozr0UNX6aqIQGKT4J5dOEoIlvbT0/CX1hYrMDQ qpyu3ETOZu+7VoeVh1uw4Q9epFoMfV0= -----END CERTIFICATE-----Generated at Sat Nov 15 20:08:38 2025 by rpki-client