$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9c084484-15a4-3b83-8c82-29fbcb22e69c.roa File: 9c084484-15a4-3b83-8c82-29fbcb22e69c.roa (raw, json) Hash identifier: /y/O2HbJ3dmK20Fa9E9QbCeprplB4Mz1aF55r0tdb4w= Subject key identifier: 98:C4:29:61:13:D1:1D:A1:7C:1B:7D:0F:BD:BD:ED:05:5A:18:BF:AA Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584B715CA76972A1C4AD84DB3A00 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9c084484-15a4-3b83-8c82-29fbcb22e69c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 1239 IP address blocks: 63.161.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a7:69:72:a1:c4:ad:84:db:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=1fb0b64e-abe5-40d8-bcad-8a6fb3d463f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:60:80:05:cb:1f:6c:c9:6d:69:39:a0:cf: 93:59:48:98:47:8c:71:40:9f:29:a8:83:4f:0d:25: 9c:ed:91:3c:41:1a:95:e3:c4:21:d7:20:71:df:e8: 9d:2a:6f:cb:a6:d2:71:cd:33:87:bb:b5:a0:9a:9d: 66:64:7e:47:f1:f6:3b:88:a5:86:aa:f9:18:41:da: 97:94:4a:7f:d4:f8:0b:44:88:1a:44:64:39:af:ae: 20:30:21:07:4f:11:68:7d:e7:31:38:28:1a:c2:c7: e0:7f:e1:06:66:2b:87:cc:0e:17:b1:8a:40:e5:89: 54:28:16:02:03:73:b8:2f:27:ca:7d:5c:33:d5:ac: be:08:58:90:55:b8:4d:ef:8a:5f:16:fd:94:65:17: f2:da:88:10:c0:4a:6a:aa:13:39:34:0c:24:c2:2d: 50:37:66:81:00:4c:38:b2:d0:09:2f:3a:76:b0:0d: 6c:93:dc:e8:f7:a6:69:7b:fe:82:bb:06:8a:04:aa: f5:38:53:56:5c:4c:cd:92:46:57:f6:ef:85:5d:bb: 28:ac:9c:9d:09:21:94:97:2b:40:a2:9d:93:63:96: b6:c6:0e:24:64:a0:bc:58:a0:f9:e4:4d:81:b3:3b: 37:1c:94:b5:0b:97:4b:8c:10:9b:af:10:91:3a:55: ec:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C4:29:61:13:D1:1D:A1:7C:1B:7D:0F:BD:BD:ED:05:5A:18:BF:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9c084484-15a4-3b83-8c82-29fbcb22e69c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.161.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:29:dd:3b:62:ca:a4:bd:37:2e:04:16:7d:ae:7a:8a:1d:7b: 64:be:62:4e:3d:d1:56:38:b5:49:78:96:85:99:44:e2:ca:58: 55:dd:59:2c:90:1c:4b:ce:4b:2e:0c:0a:0e:d3:cb:17:11:95: e8:d6:a2:f0:b2:90:34:81:1c:51:21:0c:d2:ad:ad:ae:a7:a7: c2:a2:07:45:79:0b:26:35:de:ef:26:86:9d:57:db:26:2f:20: 04:08:6c:7b:54:61:fd:f6:b8:b9:07:55:ca:04:4c:a4:b8:6c: ca:b9:01:76:a0:ea:b0:88:fe:23:b4:53:b2:b9:56:fa:d1:9e: 4d:8b:4f:79:61:49:2f:3b:82:f9:11:75:55:ae:ae:62:58:4f: d3:20:15:b4:df:57:1f:8b:cb:f4:e1:8d:88:94:58:cf:22:39: 06:55:9a:2e:bd:02:ae:b7:34:95:e8:85:b1:b9:59:78:66:da: d7:21:de:f7:ae:fe:c1:a9:eb:21:e3:79:cd:59:18:20:a6:66: 64:ff:e4:93:4e:e3:a8:a7:ad:87:26:df:a6:3a:b5:70:9e:4c: d6:80:ff:9b:3d:df:1d:65:70:14:be:cf:2a:ac:d3:a4:52:5d: da:13:1f:57:b7:54:5e:12:5a:63:a0:f9:39:9f:c8:2f:39:14: b3:c2:b1:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKdpcqHErYTbOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MWZiMGI2NGUtYWJlNS00MGQ4LWJjYWQtOGE2ZmIzZDQ2M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqVggAXLH2zJbWk5oM+TWUiYR4xxQJ8pqINP DSWc7ZE8QRqV48Qh1yBx3+idKm/LptJxzTOHu7Wgmp1mZH5H8fY7iKWGqvkYQdqX lEp/1PgLRIgaRGQ5r64gMCEHTxFofecxOCgawsfgf+EGZiuHzA4XsYpA5YlUKBYC A3O4LyfKfVwz1ay+CFiQVbhN74pfFv2UZRfy2ogQwEpqqhM5NAwkwi1QN2aBAEw4 stAJLzp2sA1sk9zo96Zpe/6CuwaKBKr1OFNWXEzNkkZX9u+FXbsorJydCSGUlytA op2TY5a2xg4kZKC8WKD55E2Bszs3HJS1C5dLjBCbrxCROlXsgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjEKWET0R2hfBt9D7297QVaGL+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvOWMwODQ0ODQtMTVhNC0z YjgzLThjODItMjlmYmNiMjJlNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6FoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgp3TtiyqS9Ny4EFn2ueoode2S+Yk490VY4tUl4loWZROLKWFXdWSyQ HEvOSy4MCg7TyxcRlejWovCykDSBHFEhDNKtra6np8KiB0V5CyY13u8mhp1X2yYv IAQIbHtUYf32uLkHVcoETKS4bMq5AXag6rCI/iO0U7K5VvrRnk2LT3lhSS87gvkR dVWurmJYT9MgFbTfVx+Ly/ThjYiUWM8iOQZVmi69Aq63NJXohbG5WXhm2tch3veu /sGp6yHjec1ZGCCmZmT/5JNO46inrYcm36Y6tXCeTNaA/5s93x1lcBS+zyqs06RS XdoTH1e3VF4SWmOg+TmfyC85FLPCsaE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:36 2025 by rpki-client