$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa File: df938649-fe0c-3f68-86dd-87b8933d0a23.roa (raw, json) Hash identifier: xiLFXdZzsbSXtToDjAm+cKSbMy3iiY4bqgJmtSgK8EE= Subject key identifier: 8B:8F:C4:20:46:5B:96:B9:EB:0E:DA:B7:DA:71:4F:FE:6F:43:66:67 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584B4E770F1EF9FA380618A8E600 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 36352 IP address blocks: 64.20.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0f:1e:f9:fa:38:06:18:a8:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=f0e4d653-ac81-4af6-ab79-f456e872f0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:18:0d:a3:3e:5a:0d:27:c8:5b:04:e7:c2: 91:0e:34:e3:cf:74:5a:3e:eb:a8:c5:25:23:3e:58: 93:63:5b:55:ca:14:8b:60:9d:27:d7:78:8f:5e:8e: b3:cf:e9:8c:88:fc:f5:37:b7:59:32:b1:a6:74:97: 8b:c9:c1:f9:6e:94:6c:61:9e:96:8d:cb:fc:dd:13: 5f:a4:94:fe:a8:9d:98:fd:eb:60:02:22:3e:89:cb: bd:bd:f9:ef:b2:b8:e6:1c:7f:71:f3:85:4a:e0:f7: df:dd:e9:0e:09:9e:60:d5:95:1f:5f:5c:26:3b:e0: b1:eb:05:67:a6:26:b2:51:b5:16:78:4a:b0:f3:2f: 5b:41:bf:1f:9a:87:cc:c6:8e:28:be:38:d5:60:19: de:4f:61:e7:6f:16:93:f8:c7:98:a7:27:b5:10:b9: d2:3a:f8:b5:ee:2b:99:70:43:77:99:7a:cd:ca:9c: 0c:52:94:ec:53:55:41:24:f4:6c:1c:2d:84:26:b9: 94:3b:4b:db:ab:63:2c:61:45:00:a2:6c:8a:74:d1: 1d:7f:50:a8:09:3e:d6:db:2f:fe:68:24:96:6d:1c: 63:02:b3:dc:0e:a5:fc:29:5c:3b:d7:67:c8:9e:ba: 1f:5f:7c:9a:cc:28:46:be:da:5c:75:fc:2e:d9:6b: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8F:C4:20:46:5B:96:B9:EB:0E:DA:B7:DA:71:4F:FE:6F:43:66:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/df938649-fe0c-3f68-86dd-87b8933d0a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e3:c3:2f:cc:ba:20:90:88:e1:18:1a:6a:20:47:95:e1:ba: e6:85:e8:1e:93:9e:35:d0:0b:40:a5:d2:71:c4:61:e7:a5:66: e7:d5:6c:7a:18:3d:98:08:46:b3:90:37:70:e1:21:58:88:95: ab:36:27:3f:48:2f:fd:03:09:44:74:eb:53:e6:1a:80:38:36: 10:d8:2e:02:20:92:07:79:be:cb:55:fd:aa:1a:24:32:40:4c: b2:60:c7:29:e5:64:d6:24:b2:f0:ef:2a:cc:1b:48:1f:1e:fa: ac:0a:11:91:d6:b1:d7:af:07:ca:24:4d:46:cb:fe:6b:c2:76: 06:96:f7:83:63:73:04:70:42:a8:59:39:69:8a:d0:40:33:3f: 15:70:2c:80:8c:02:81:c6:ae:0f:4f:78:25:f0:a5:d3:8a:0c: e9:a4:70:46:69:a4:93:ab:82:40:1f:d2:51:a0:72:de:13:bd: fc:d4:19:8c:a1:e8:61:eb:34:7a:c3:ee:e8:47:fe:95:28:66: 6e:ed:31:cf:c6:cb:ff:f0:65:c5:b2:9c:5d:75:48:1b:19:f1: 78:a8:78:49:ed:45:ff:ae:1c:74:5a:f4:75:48:01:13:b0:e0: bf:c8:c9:c0:35:6f:e1:f5:67:c6:71:56:50:bf:89:2c:92:26: 86:88:7b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdw8e+fo4Bhio5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjBlNGQ2NTMtYWM4MS00YWY2LWFiNzktZjQ1NmU4NzJmMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKsYDaM+Wg0nyFsE58KRDjTjz3RaPuuoxSUj PliTY1tVyhSLYJ0n13iPXo6zz+mMiPz1N7dZMrGmdJeLycH5bpRsYZ6Wjcv83RNf pJT+qJ2Y/etgAiI+icu9vfnvsrjmHH9x84VK4Pff3ekOCZ5g1ZUfX1wmO+Cx6wVn piayUbUWeEqw8y9bQb8fmofMxo4ovjjVYBneT2HnbxaT+MeYpye1ELnSOvi17iuZ cEN3mXrNypwMUpTsU1VBJPRsHC2EJrmUO0vbq2MsYUUAomyKdNEdf1CoCT7W2y/+ aCSWbRxjArPcDqX8KVw712fInrofX3yazChGvtpcdfwu2WsvOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuPxCBGW5a56w7at9pxT/5vQ2ZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZGY5Mzg2NDktZmUwYy0z ZjY4LTg2ZGQtODdiODkzM2QwYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBTRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADjwy/MuiCQiOEYGmogR5XhuuaF6B6TnjXQC0Cl0nHEYeelZufVbHoY PZgIRrOQN3DhIViIlas2Jz9IL/0DCUR061PmGoA4NhDYLgIgkgd5vstV/aoaJDJA TLJgxynlZNYksvDvKswbSB8e+qwKEZHWsdevB8okTUbL/mvCdgaW94NjcwRwQqhZ OWmK0EAzPxVwLICMAoHGrg9PeCXwpdOKDOmkcEZppJOrgkAf0lGgct4TvfzUGYyh 6GHrNHrD7uhH/pUoZm7tMc/Gy//wZcWynF11SBsZ8XioeEntRf+uHHRa9HVIAROw 4L/IycA1b+H1Z8ZxVlC/iSySJoaIe/s= -----END CERTIFICATE-----Generated at Mon Oct 20 02:26:06 2025 by rpki-client