$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e0886d41-341c-3c8c-8449-ced120a87ae1.roa File: e0886d41-341c-3c8c-8449-ced120a87ae1.roa (raw, json) Hash identifier: ELNhcyrKEqaKAYkomDxScc5lEiuK0OpC3cyhDgIXFWo= Subject key identifier: DC:89:77:FC:61:73:83:92:61:CC:12:C8:9A:21:B1:4D:D7:A2:F5:B8 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F4328584ADECBBB6E5BE8D60086B38680 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e0886d41-341c-3c8c-8449-ced120a87ae1.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 174 IP address blocks: 63.161.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:bb:6e:5b:e8:d6:00:86:b3:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=c8adb15d-08ed-4bb2-8857-7a7b4bd2e174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:35:2d:e6:33:30:6d:83:27:70:03:b9:02: 69:c0:32:c6:e3:d5:07:5a:64:ed:1b:85:bc:38:d7: 55:24:aa:9d:54:01:16:c6:95:d0:16:3c:04:bf:f2: e5:cf:1b:18:20:6d:e3:e2:72:18:d7:cb:53:80:15: 2e:1d:da:c5:72:ee:39:45:a7:7a:19:a3:0c:8d:1d: e0:40:3d:dc:53:60:bd:ed:68:3c:b5:6e:2a:ee:f5: 64:a3:bf:a6:2e:97:ae:3e:c2:e4:44:4e:b3:d1:b3: a5:6f:e4:a1:37:73:bb:a4:65:1e:7a:d8:d1:cc:1a: 60:14:ca:37:6b:9a:0e:ce:5e:01:63:68:56:a9:8c: 82:31:b7:a4:cd:e0:16:af:ad:27:b1:90:b2:53:f9: f2:6d:e2:72:9b:c0:28:34:c9:11:47:b5:0d:7a:3d: 3c:44:82:e7:fa:a4:ea:b2:34:93:fa:8c:c0:00:5f: 8a:27:0c:41:6f:e5:3b:0c:40:d7:b0:95:27:ca:95: 1c:a0:26:59:6d:a5:b8:77:57:63:52:43:13:d7:70: b9:4c:d4:ab:e7:47:46:44:b6:16:cb:df:20:ab:8c: cd:0a:dc:dd:a3:dd:48:a9:57:2f:37:4a:4b:b2:a7: 7a:bc:53:ba:79:ff:8c:76:40:82:41:93:e4:e8:34: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:89:77:FC:61:73:83:92:61:CC:12:C8:9A:21:B1:4D:D7:A2:F5:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e0886d41-341c-3c8c-8449-ced120a87ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.161.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:97:8b:a6:48:72:45:0e:ab:6c:cd:e2:26:6c:99:1f:eb:45: 15:c7:d0:96:f8:aa:f1:e6:14:7d:c2:00:c7:0e:0a:d5:1c:37: 6b:da:0b:7e:94:45:ad:32:db:71:29:e6:f0:84:12:57:4b:4e: 09:8a:b6:08:9b:84:4f:8b:80:fc:65:ce:79:f0:a0:61:19:2b: 1a:b7:18:d8:e2:2e:93:4c:7f:a6:69:7d:1a:3c:1f:8e:d9:56: 23:bf:3d:e5:b2:e1:b7:2a:ea:6a:ba:5b:e7:9d:4f:5f:01:29: 0a:d7:8f:a8:73:18:da:95:eb:3d:bd:04:5a:b0:29:50:13:15: e5:0c:56:38:e6:59:cf:40:11:fc:b7:51:ca:12:b5:fe:51:26: 03:f3:50:c2:80:b8:84:c8:ec:f0:45:d8:ed:35:7f:15:ea:13: 4f:09:67:ee:54:58:e4:6b:14:42:de:64:5f:00:2d:19:da:62: e5:6f:47:b8:de:35:49:e2:ba:b8:6e:e6:d8:42:eb:b6:f5:02: 97:7c:05:06:cc:b4:f3:34:27:e2:66:c6:cb:7c:51:ca:bd:6d: c0:09:75:09:70:f4:e5:68:8d:9b:25:a1:7c:b6:b6:ca:63:df: ef:46:32:36:bb:ff:b3:bb:74:0a:90:99:b7:fd:78:f3:b7:ae: 4d:49:64:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7tuW+jWAIazhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YzhhZGIxNWQtMDhlZC00YmIyLTg4NTctN2E3YjRiZDJlMTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSQ1LeYzMG2DJ3ADuQJpwDLG49UHWmTtG4W8 ONdVJKqdVAEWxpXQFjwEv/LlzxsYIG3j4nIY18tTgBUuHdrFcu45Rad6GaMMjR3g QD3cU2C97Wg8tW4q7vVko7+mLpeuPsLkRE6z0bOlb+ShN3O7pGUeetjRzBpgFMo3 a5oOzl4BY2hWqYyCMbekzeAWr60nsZCyU/nybeJym8AoNMkRR7UNej08RILn+qTq sjST+ozAAF+KJwxBb+U7DEDXsJUnypUcoCZZbaW4d1djUkMT13C5TNSr50dGRLYW y98gq4zNCtzdo91IqVcvN0pLsqd6vFO6ef+MdkCCQZPk6DS25QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyJd/xhc4OSYcwSyJohsU3XovW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvZTA4ODZkNDEtMzQxYy0z YzhjLTg0NDktY2VkMTIwYTg3YWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP6FMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuXi6ZIckUOq2zN4iZsmR/rRRXH0Jb4qvHmFH3CAMcOCtUcN2vaC36U Ra0y23Ep5vCEEldLTgmKtgibhE+LgPxlznnwoGEZKxq3GNjiLpNMf6ZpfRo8H47Z ViO/PeWy4bcq6mq6W+edT18BKQrXj6hzGNqV6z29BFqwKVATFeUMVjjmWc9AEfy3 UcoStf5RJgPzUMKAuITI7PBF2O01fxXqE08JZ+5UWORrFELeZF8ALRnaYuVvR7je NUniurhu5thC67b1Apd8BQbMtPM0J+Jmxst8Ucq9bcAJdQlw9OVojZsloXy2tspj 3+9GMja7/7O7dAqQmbf9ePO3rk1JZLE= -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:49 2025 by rpki-client