$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa File: cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa (raw, json) Hash identifier: ggmNLi282k5iUMRhR9zGEwLvPYau2uNUlxb7KI86+go= Subject key identifier: 96:42:85:69:06:E4:7F:56:20:B6:20:D3:FF:FA:E8:1F:92:00:3F:DD Certificate issuer: /CN=31009a8b-537b-4076-8ee6-38c45e51e37a Certificate serial: 010D0C9F4328584EDC920C33BA41FFC5B4259F80 Authority key identifier: C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 14618 IP address blocks: 63.133.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:0c:33:ba:41:ff:c5:b4:25:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31009a8b-537b-4076-8ee6-38c45e51e37a Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=2608cec7-b788-402f-ac2a-533d438c8ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:60:96:ed:ae:de:b5:29:e2:ce:8f:55:55: ce:85:9a:b9:d8:c4:13:81:cd:f4:ae:0b:24:45:e7: 4b:5c:cd:d6:5b:3c:b0:52:b6:b3:cd:7c:0b:14:c3: 93:84:d8:19:0f:e0:b2:30:b6:0b:e9:49:24:25:ca: 28:a0:61:0a:b5:23:e5:78:17:5f:00:2c:52:fb:2e: c4:62:d7:31:ea:78:be:8f:0e:20:d2:57:f8:cb:1c: b8:cf:97:b3:c4:e1:9a:6c:ac:e5:33:62:0d:aa:86: a0:5b:da:7f:b9:48:ef:f6:a2:31:1f:54:0c:69:63: fa:1f:48:d0:e3:dd:a5:50:9a:f5:20:66:17:3f:96: 63:dd:da:5e:a0:c0:14:3e:b2:1b:2a:16:9f:ed:89: 60:b0:77:44:cd:5a:39:1d:2b:92:c9:7f:c8:fa:bf: cb:a8:0c:5e:74:8c:06:6b:ca:9c:27:be:fe:06:39: bc:d9:0a:4c:86:44:db:61:b2:5c:cf:dc:e4:e7:97: f1:82:41:13:de:b1:56:62:c2:79:2d:79:ef:81:ac: fb:4f:4f:80:b7:11:44:41:3d:fb:5b:e5:a4:bb:2f: 73:d5:99:0f:43:0c:61:a3:da:1c:e0:ac:c9:52:40: a8:95:90:0b:63:8c:81:76:44:f1:ad:1c:0d:8b:57: 91:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:42:85:69:06:E4:7F:56:20:B6:20:D3:FF:FA:E8:1F:92:00:3F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl X509v3 Authority Key Identifier: keyid:C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer sbgp-ipAddrBlock: critical IPv4: 63.133.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4f:45:71:3a:df:4c:f3:da:5a:94:c7:80:41:2d:14:53:c2: 99:86:d7:0b:20:50:c9:12:f3:b2:62:28:d9:27:c0:a0:db:4b: a1:ab:90:6e:ea:3e:2e:e1:f6:52:18:e4:13:31:45:e6:35:11: 8b:86:cd:a2:59:22:3d:9c:0f:20:20:83:cc:26:64:6d:b9:34: f0:95:bd:38:57:22:e4:7c:99:13:61:12:33:db:4e:76:df:2f: 5f:7c:4b:62:42:72:5a:0c:76:9a:ac:23:1e:de:d3:3f:7f:53: a8:01:c8:af:84:12:bf:31:c0:2e:ba:df:09:7f:31:c9:ca:6c: 24:be:f3:23:97:6c:32:2b:db:c8:e1:31:59:d7:74:4e:60:90: e5:b8:21:e9:6b:da:b8:35:0f:65:fe:98:c7:04:5b:63:b8:b5: f2:62:21:ed:a6:eb:65:8e:80:22:e4:7b:38:9b:0a:7d:47:75: e8:e9:df:16:14:98:9a:a6:1b:9a:f6:bc:a1:ca:0b:ba:38:ca: 61:95:d0:71:df:72:10:2b:9d:8c:b9:1b:cc:9f:45:2d:d1:6f: df:fb:7c:24:97:40:a3:83:db:8d:41:92:39:3d:70:40:0c:15: b2:f8:8d:46:ba:82:3f:af:00:23:e2:ad:21:aa:b4:91:83:ce: 84:e8:f9:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckgwzukH/xbQln4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwMDlhOGItNTM3Yi00MDc2LThlZTYtMzhjNDVlNTFl MzdhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk MjYwOGNlYzctYjc4OC00MDJmLWFjMmEtNTMzZDQzOGM4ZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSpglu2u3rUp4s6PVVXOhZq52MQTgc30rgsk RedLXM3WWzywUrazzXwLFMOThNgZD+CyMLYL6UkkJcoooGEKtSPleBdfACxS+y7E Ytcx6ni+jw4g0lf4yxy4z5ezxOGabKzlM2INqoagW9p/uUjv9qIxH1QMaWP6H0jQ 492lUJr1IGYXP5Zj3dpeoMAUPrIbKhaf7YlgsHdEzVo5HSuSyX/I+r/LqAxedIwG a8qcJ77+Bjm82QpMhkTbYbJcz9zk55fxgkET3rFWYsJ5LXnvgaz7T0+AtxFEQT37 W+Wkuy9z1ZkPQwxho9oc4KzJUkColZALY4yBdkTxrRwNi1eRJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZChWkG5H9WILYg0//66B+SAD/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTAw OWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0NWU1MWUzN2EvY2RjZjFlM2MtYjBmNC0z OGQyLTlhYTEtMmFlNjZhNDI1ZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzEwMDlhOGItNTM3Yi00MDc2LThl ZTYtMzhjNDVlNTFlMzdhLzMxMDA5YThiLTUzN2ItNDA3Ni04ZWU2LTM4YzQ1ZTUx ZTM3YS5jcmwwHwYDVR0jBBgwFoAUyL9Yo+jg9ye2+B/ryjAfoLdEkTEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMTAwOWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0 NWU1MWUzN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdPRXE630zz2lqUx4BBLRRTwpmG1wsgUMkS87JiKNknwKDbS6GrkG7q Pi7h9lIY5BMxReY1EYuGzaJZIj2cDyAgg8wmZG25NPCVvThXIuR8mRNhEjPbTnbf L198S2JCcloMdpqsIx7e0z9/U6gByK+EEr8xwC663wl/McnKbCS+8yOXbDIr28jh MVnXdE5gkOW4Ielr2rg1D2X+mMcEW2O4tfJiIe2m62WOgCLkezibCn1Hdejp3xYU mJqmG5r2vKHKC7o4ymGV0HHfchArnYy5G8yfRS3Rb9/7fCSXQKOD241Bkjk9cEAM FbL4jUa6gj+vACPirSGqtJGDzoTo+aY= -----END CERTIFICATE-----Generated at Thu Aug 20 21:56:43 2026 by rpki-client