$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c65ac0d5-9c92-3074-83b3-4cac4dfee885.roa File: c65ac0d5-9c92-3074-83b3-4cac4dfee885.roa (raw, json) Hash identifier: DvojGWkpbyLwY7MHr4N369TmWwfQBAdrj1BlpZKwEv4= Subject key identifier: BD:AF:7F:00:E8:53:CB:FC:01:03:26:BE:66:AF:6F:74:A5:64:AC:95 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584B84E769C4914D3D975975E540 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c65ac0d5-9c92-3074-83b3-4cac4dfee885.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 174 IP address blocks: 63.171.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:69:c4:91:4d:3d:97:59:75:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=8d3608e3-6a12-4270-829c-e007502a7089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:a0:ff:2d:76:b1:74:9e:e1:3c:84:b1:36: 4c:c2:77:cc:25:3b:ee:d7:2c:bf:5f:09:1f:18:8f: 65:c6:01:11:cf:d6:bb:cb:39:17:95:5f:e5:7f:9f: ec:9a:38:92:57:27:b5:79:b2:fc:c4:28:74:b2:f0: 86:a1:00:dc:02:01:0d:83:14:cb:b4:41:e0:14:54: 38:90:91:f8:d2:aa:8b:58:24:f9:69:90:c1:82:2f: 1b:bd:1f:6a:c6:b9:8c:26:31:fc:39:93:f4:56:6e: a3:2a:63:da:0e:4f:8f:12:06:b7:21:c5:85:9d:28: 34:fe:b9:17:8a:f0:cf:e4:1f:c7:4a:4d:26:9b:39: 0d:1b:2e:6d:93:38:ea:57:e7:d7:df:36:c6:10:85: ee:ea:1c:fe:99:ae:3e:eb:6f:59:5a:60:ff:2a:33: 97:7e:eb:3c:f2:40:1f:0e:f0:20:a6:57:9f:2b:2f: 11:21:be:f8:6a:54:3d:9d:76:e8:77:8f:30:cb:1a: a3:bc:8a:df:8e:64:e6:d8:12:67:ed:b3:da:26:25: 8f:67:1a:7d:09:6a:6b:0b:ac:6c:49:a7:e7:d0:4c: 14:ba:e8:ec:59:74:6a:31:9a:33:3c:e0:fb:7f:a9: 70:ea:28:93:20:c0:3f:eb:88:a3:08:1a:cc:76:37: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AF:7F:00:E8:53:CB:FC:01:03:26:BE:66:AF:6F:74:A5:64:AC:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/c65ac0d5-9c92-3074-83b3-4cac4dfee885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.171.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b5:23:67:18:d4:5d:69:0d:0d:a7:27:2f:55:f8:f5:47:d0: 67:b6:4d:fa:60:29:80:3a:d9:e5:f3:d5:ff:81:77:00:5e:1a: 38:cb:33:3e:25:ee:c1:06:8a:03:93:f4:26:84:97:36:4d:db: c0:0f:b3:b8:3a:44:14:1e:a8:2a:51:84:35:0c:1e:88:b8:a8: cf:ba:34:ac:41:50:5d:0b:4a:88:3f:59:93:da:bb:d6:a0:8b: 45:85:8e:80:6d:f3:b9:de:3a:e9:41:5d:65:c1:26:9a:cb:d6: 5c:ca:1d:77:c7:09:64:a5:8c:0a:36:5b:a3:9b:d9:6e:78:26: 23:7b:10:98:d9:73:f7:c9:44:72:c0:16:1f:84:c1:df:57:c5: 01:49:b6:b8:f8:d4:7c:06:54:33:c4:df:d3:ff:36:da:8b:5c: 12:04:e9:53:47:88:56:d0:62:f5:8c:c1:c2:6b:22:df:a7:48: 0d:ea:35:24:32:dc:2d:4d:58:d1:6b:da:ca:78:1d:26:a5:94: 06:e2:81:74:22:bf:a5:e2:15:60:50:90:d8:c1:e3:46:6c:56: 29:a9:ee:80:b3:1f:6c:d7:a3:5a:59:f1:3e:69:b0:84:ca:27: dd:69:bb:59:f8:6c:4d:21:40:e4:88:ba:bb:50:8e:37:0c:4b: 25:52:de:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52nEkU09l1l15UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OGQzNjA4ZTMtNmExMi00MjcwLTgyOWMtZTAwNzUwMmE3MDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnWg/y12sXSe4TyEsTZMwnfMJTvu1yy/Xwkf GI9lxgERz9a7yzkXlV/lf5/smjiSVye1ebL8xCh0svCGoQDcAgENgxTLtEHgFFQ4 kJH40qqLWCT5aZDBgi8bvR9qxrmMJjH8OZP0Vm6jKmPaDk+PEga3IcWFnSg0/rkX ivDP5B/HSk0mmzkNGy5tkzjqV+fX3zbGEIXu6hz+ma4+629ZWmD/KjOXfus88kAf DvAgplefKy8RIb74alQ9nXbod48wyxqjvIrfjmTm2BJn7bPaJiWPZxp9CWprC6xs Safn0EwUuujsWXRqMZozPOD7f6lw6iiTIMA/64ijCBrMdjf70wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2vfwDoU8v8AQMmvmavb3SlZKyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvYzY1YWMwZDUtOWM5Mi0z MDc0LTgzYjMtNGNhYzRkZmVlODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6tCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC1I2cY1F1pDQ2nJy9V+PVH0Ge2TfpgKYA62eXz1f+BdwBeGjjLMz4l 7sEGigOT9CaElzZN28APs7g6RBQeqCpRhDUMHoi4qM+6NKxBUF0LSog/WZPau9ag i0WFjoBt87neOulBXWXBJprL1lzKHXfHCWSljAo2W6Ob2W54JiN7EJjZc/fJRHLA Fh+Ewd9XxQFJtrj41HwGVDPE39P/NtqLXBIE6VNHiFbQYvWMwcJrIt+nSA3qNSQy 3C1NWNFr2sp4HSallAbigXQiv6XiFWBQkNjB40ZsVimp7oCzH2zXo1pZ8T5psITK J91pu1n4bE0hQOSIurtQjjcMSyVS3rA= -----END CERTIFICATE-----Generated at Sun Oct 19 23:25:08 2025 by rpki-client