$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c296aecb-f798-3a12-84b4-358d8042815a.roa File: c296aecb-f798-3a12-84b4-358d8042815a.roa (raw, json) Hash identifier: xk4wp0YV+uekTG8eIkAzQGx6EFpJZhvWFkFKg7RBUiU= Subject key identifier: BC:4F:BC:A1:E0:0B:72:0D:FC:57:7C:E4:22:DD:C7:DC:7C:BE:B5:F4 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584AE89125281A971CEF4EE95100 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c296aecb-f798-3a12-84b4-358d8042815a.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 399139 IP address blocks: 63.161.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:25:28:1a:97:1c:ef:4e:e9:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=f34950c7-5e80-437e-95fc-e2387f461525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:69:1c:e1:d5:67:43:d5:fc:2b:c1:7e:f1:2b: 07:4e:82:e2:f9:7f:71:04:f9:55:8d:cf:26:ea:e9: 0a:68:ec:73:42:b2:fa:15:c7:89:7c:4a:7a:c3:bd: 28:4c:05:b2:37:15:38:74:be:7b:ee:84:b3:f6:da: c2:e6:c9:dd:e3:ac:44:08:61:27:07:e0:70:f2:32: 22:ea:cd:a7:4c:34:94:60:b5:8e:09:be:1e:ed:17: 1c:c7:ff:63:85:98:ce:d8:f2:a4:64:ae:c3:26:ec: ac:e4:0e:d5:70:d0:2a:00:48:5c:76:15:b1:b6:d7: ed:ed:fc:02:0f:6a:82:5a:b9:62:bb:08:32:4c:91: f0:07:66:38:36:63:d9:ec:28:45:1e:8d:5b:4a:1c: 04:b6:5a:32:19:33:ca:f8:75:d4:32:2c:13:83:70: 57:f7:e9:a1:8b:41:08:a1:a8:64:e6:c7:d6:1e:53: d8:74:87:6f:b8:2a:7b:0f:c8:64:94:32:de:71:e9: 76:98:6e:f7:23:66:25:cc:b9:17:3c:c3:34:73:33: d8:b1:7b:f1:bc:52:1a:dc:02:ba:ff:69:95:bb:dd: 64:51:36:9b:27:7b:0f:23:57:01:21:21:bb:0b:97: e2:c6:3e:fc:c1:04:c4:15:98:cc:5e:ae:d5:f0:0f: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4F:BC:A1:E0:0B:72:0D:FC:57:7C:E4:22:DD:C7:DC:7C:BE:B5:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c296aecb-f798-3a12-84b4-358d8042815a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.161.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4b:fd:16:8a:d7:2b:d4:1f:4e:f8:95:b2:7e:cd:02:22:51: ea:1a:aa:d4:28:ff:51:25:69:f8:77:95:c5:54:98:24:23:83: 77:3a:04:59:8f:0f:ef:83:7a:f1:e1:54:da:e6:42:6c:9c:47: 25:c1:fc:02:64:1e:28:d3:b6:1e:c8:9e:23:dc:07:da:ea:f8: 9e:72:1d:d1:0b:6b:9b:6b:71:f7:46:18:b0:80:77:0e:39:13: 76:31:4f:85:c5:bd:ae:0a:c2:ec:03:5b:00:ed:09:83:31:33: bd:78:84:d7:4f:67:fa:8f:69:52:45:89:2f:2b:d6:58:68:6b: 72:69:58:90:ca:07:2d:1e:ce:5a:8d:c1:18:9b:ed:4c:13:52: 90:8b:53:0a:03:91:82:29:0a:e9:d2:fc:04:65:43:26:e7:f9: fd:ef:10:5a:fa:4b:36:1a:71:8b:24:51:c9:ab:13:1e:10:5d: 23:b5:0e:83:87:2a:2b:8e:ba:9c:df:16:53:73:da:e1:e8:59: f7:eb:96:d7:02:3f:13:f0:51:c0:9d:90:d6:da:3e:e0:0c:13: 18:c8:ac:70:0e:3a:f7:95:23:18:10:1c:14:e7:c6:d1:4f:ce: e4:cc:ab:11:d1:e1:cf:7b:81:24:63:40:1a:70:bb:a9:d7:58: 27:22:d2:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSUoGpcc707pUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk ZjM0OTUwYzctNWU4MC00MzdlLTk1ZmMtZTIzODdmNDYxNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWkc4dVnQ9X8K8F+8SsHToLi+X9xBPlVjc8m 6ukKaOxzQrL6FceJfEp6w70oTAWyNxU4dL577oSz9trC5snd46xECGEnB+Bw8jIi 6s2nTDSUYLWOCb4e7Rccx/9jhZjO2PKkZK7DJuys5A7VcNAqAEhcdhWxttft7fwC D2qCWrliuwgyTJHwB2Y4NmPZ7ChFHo1bShwEtloyGTPK+HXUMiwTg3BX9+mhi0EI oahk5sfWHlPYdIdvuCp7D8hklDLecel2mG73I2YlzLkXPMM0czPYsXvxvFIa3AK6 /2mVu91kUTabJ3sPI1cBISG7C5fixj78wQTEFZjMXq7V8A+MzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxPvKHgC3IN/Fd85CLdx9x8vrX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvYzI5NmFlY2ItZjc5OC0z YTEyLTg0YjQtMzU4ZDgwNDI4MTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6FrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxL/RaK1yvUH074lbJ+zQIiUeoaqtQo/1Elafh3lcVUmCQjg3c6BFmP D++DevHhVNrmQmycRyXB/AJkHijTth7IniPcB9rq+J5yHdELa5trcfdGGLCAdw45 E3YxT4XFva4KwuwDWwDtCYMxM714hNdPZ/qPaVJFiS8r1lhoa3JpWJDKBy0ezlqN wRib7UwTUpCLUwoDkYIpCunS/ARlQybn+f3vEFr6SzYacYskUcmrEx4QXSO1DoOH KiuOupzfFlNz2uHoWffrltcCPxPwUcCdkNbaPuAMExjIrHAOOveVIxgQHBTnxtFP zuTMqxHR4c97gSRjQBpwu6nXWCci0gU= -----END CERTIFICATE-----Generated at Sun Oct 26 15:51:21 2025 by rpki-client