$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/21df40c6-0251-3b22-9b21-1dac751f6088.roa File: 21df40c6-0251-3b22-9b21-1dac751f6088.roa (raw, json) Hash identifier: V7omrgquFFISNvzkPbHtY2lQeFrXhMZs0hQ2MjYpSX4= Subject key identifier: 55:C8:4E:B0:73:9B:77:4D:DE:4F:C6:6D:DE:E4:DB:52:E2:41:12:68 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584AECC12E27879B1D05B7440410 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/21df40c6-0251-3b22-9b21-1dac751f6088.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 20454 IP address blocks: 63.161.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:2e:27:87:9b:1d:05:b7:44:04:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c824a396-9b56-4a3f-8130-f5cb0f5509d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:50:be:e3:64:d7:d1:e7:84:a4:f3:92:b3: 99:ec:09:8f:62:ee:23:2d:ee:6d:38:e5:52:eb:87: bc:ff:53:1d:1d:79:08:41:b8:19:03:5d:00:e8:48: b4:3d:bf:25:9b:82:48:ff:4c:c9:12:a5:aa:f8:aa: bf:35:bc:7b:e0:1c:f2:9f:f7:88:1c:1b:f4:94:66: e4:26:ca:74:77:8a:0f:59:36:e9:2b:52:68:22:af: 48:2d:6b:eb:b6:6a:ed:f4:67:5e:c3:a8:e0:8f:bc: d2:fa:ca:71:0e:2b:e5:43:cb:ce:10:9f:0a:69:e5: cc:55:7e:ab:d5:ca:bc:ec:df:a1:60:83:75:9f:47: 02:e9:bd:d9:8d:da:44:14:d8:f0:b4:ba:22:7d:f6: e9:b9:ab:08:a3:81:55:42:a7:70:45:a9:f5:62:55: 09:5e:be:27:68:f9:c0:ba:38:6c:92:59:cc:d6:02: d5:cd:98:48:7f:bc:e7:ba:ce:f0:82:fc:92:43:cc: 8f:f1:92:de:32:86:8b:03:48:b5:5a:b8:bb:39:60: 11:d4:50:6c:fd:fe:c0:72:bc:53:b0:6c:be:a9:66: 81:1e:f0:a9:59:42:04:39:89:30:77:24:47:68:86: be:6a:3d:45:5e:80:ca:bf:a8:e1:fc:8d:98:67:65: b4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C8:4E:B0:73:9B:77:4D:DE:4F:C6:6D:DE:E4:DB:52:E2:41:12:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/21df40c6-0251-3b22-9b21-1dac751f6088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.161.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:68:b6:2b:23:65:34:16:84:12:00:37:89:56:31:5e:1b:6d: 50:66:1e:36:6d:2e:70:3c:27:32:82:b5:81:1d:4d:3e:bd:8c: ec:6c:02:f4:f3:4c:3f:8e:ec:be:cf:97:90:fd:9e:6d:e2:09: 9b:7a:fb:7d:17:00:16:96:42:65:55:87:21:e7:70:24:11:7e: ab:25:5d:ae:50:da:6a:0e:e9:ab:89:44:cd:34:40:5c:5c:08: 35:c2:e3:d4:81:cc:1e:f3:5d:62:5c:b2:01:f3:ab:b8:54:5d: 34:dc:23:d2:ff:36:56:67:cb:be:64:d1:0d:a4:fe:fb:60:0c: 42:a2:c8:4c:a7:b2:79:10:4b:3d:fc:40:0e:d8:64:2a:f1:66: 97:80:e5:ea:9a:84:d9:e8:0d:8b:ef:f1:cf:1c:2b:dd:46:0d: 73:ad:99:19:91:3d:e7:bd:d6:81:86:da:86:e6:9e:68:0b:d0: 45:39:05:a1:4c:03:67:c1:ee:4b:3a:ab:e3:ae:cb:b9:fd:77: a9:5d:ea:ec:74:bf:08:bd:17:96:08:69:fd:9a:e6:6e:d3:8a: e7:6d:a2:d9:91:d7:0b:dd:22:5b:37:ac:26:26:e0:6e:ae:36: 0a:49:c7:4c:a1:5e:f9:dd:60:7b:4e:d9:b0:b6:01:ee:06:4d: 13:bf:53:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswS4nh5sdBbdEBBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzgyNGEzOTYtOWI1Ni00YTNmLTgxMzAtZjVjYjBmNTUwOWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsChQvuNk19HnhKTzkrOZ7AmPYu4jLe5tOOVS 64e8/1MdHXkIQbgZA10A6Ei0Pb8lm4JI/0zJEqWq+Kq/Nbx74Bzyn/eIHBv0lGbk Jsp0d4oPWTbpK1JoIq9ILWvrtmrt9Gdew6jgj7zS+spxDivlQ8vOEJ8KaeXMVX6r 1cq87N+hYIN1n0cC6b3ZjdpEFNjwtLoiffbpuasIo4FVQqdwRan1YlUJXr4naPnA ujhsklnM1gLVzZhIf7znus7wgvySQ8yP8ZLeMoaLA0i1Wri7OWAR1FBs/f7AcrxT sGy+qWaBHvCpWUIEOYkwdyRHaIa+aj1FXoDKv6jh/I2YZ2W0gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXITrBzm3dN3k/Gbd7k21LiQRJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvMjFkZjQwYzYtMDI1MS0z YjIyLTliMjEtMWRhYzc1MWY2MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6FqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxotisjZTQWhBIAN4lWMV4bbVBmHjZtLnA8JzKCtYEdTT69jOxsAvTz TD+O7L7Pl5D9nm3iCZt6+30XABaWQmVVhyHncCQRfqslXa5Q2moO6auJRM00QFxc CDXC49SBzB7zXWJcsgHzq7hUXTTcI9L/NlZny75k0Q2k/vtgDEKiyEynsnkQSz38 QA7YZCrxZpeA5eqahNnoDYvv8c8cK91GDXOtmRmRPee91oGG2obmnmgL0EU5BaFM A2fB7ks6q+Ouy7n9d6ld6ux0vwi9F5YIaf2a5m7TiudtotmR1wvdIls3rCYm4G6u NgpJx0yhXvndYHtO2bC2Ae4GTRO/U3Q= -----END CERTIFICATE-----Generated at Sat Aug 23 13:46:52 2025 by rpki-client