$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/154d7d54-a074-3eac-a5f4-43680f8a7d4e.roa File: 154d7d54-a074-3eac-a5f4-43680f8a7d4e.roa (raw, json) Hash identifier: 2ZtcwN2Uhypey+cfCeFACX49HTP3A5C961SnThgeey0= Subject key identifier: 68:5F:4E:EE:00:66:44:2A:90:A1:2C:C7:11:9A:FA:15:AE:9B:68:43 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F4328584B8EACC351C0B5449708104EC0 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/154d7d54-a074-3eac-a5f4-43680f8a7d4e.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 6639 IP address blocks: 63.136.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c3:51:c0:b5:44:97:08:10:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=9d12fc14-58b0-448a-9317-b479cf9d90a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:b1:08:d5:19:3f:68:53:67:70:7a:0e:b4: 2b:9d:32:2f:2e:13:1e:ae:d9:f8:74:99:de:e0:91: 02:4a:18:c2:94:6b:a5:01:60:85:28:7c:34:9b:f1: e3:47:55:cf:ae:5a:ff:cb:9e:19:87:c7:26:79:dd: e9:17:ff:52:4a:50:2c:b9:5b:91:f4:09:8e:9b:52: 63:33:e6:15:62:67:90:a0:0b:6b:2a:b9:51:6a:80: 7d:53:d1:5d:e4:4d:ab:d9:8c:17:2d:80:1b:cc:f6: 33:ad:83:2d:16:16:61:63:a6:c8:b1:ab:59:d5:a6: 8f:78:1c:33:cd:6c:96:cd:db:ca:2d:03:f2:40:15: fc:5f:4d:c3:21:75:c3:01:67:c1:9f:2d:03:26:bf: b4:ae:b5:4d:ac:50:98:5e:68:00:54:84:06:ed:c3: 93:a6:f4:c6:c6:0f:73:ed:5d:c4:95:f7:13:70:33: 37:70:7e:5d:cd:7d:55:e2:c5:cf:1d:42:bb:53:e5: f7:04:55:e0:25:76:21:1e:0a:d7:b9:8d:09:52:d8: ee:0b:9a:66:fb:e3:fa:2c:ed:34:23:2d:4d:28:53: 11:cf:bc:dd:82:28:12:21:12:ca:d2:0e:10:4a:ca: 47:af:f5:e4:7f:6b:c7:ea:32:5e:63:43:f0:db:f2: 1e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5F:4E:EE:00:66:44:2A:90:A1:2C:C7:11:9A:FA:15:AE:9B:68:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/154d7d54-a074-3eac-a5f4-43680f8a7d4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 63.136.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:01:d0:57:9b:53:21:62:ac:e1:2d:0a:60:71:59:45:72:4e: 68:cd:a6:11:3a:c3:34:a2:24:1e:8d:24:38:a8:e5:2f:37:f2: e8:84:97:f8:dc:87:9c:16:ad:0c:41:50:72:f5:f7:6e:2e:eb: 26:00:6f:71:ac:e5:a3:da:3a:40:84:6d:73:2d:7a:84:7c:0c: 2a:b8:42:07:19:ad:8f:d3:10:e0:a4:66:32:82:96:d7:f8:df: 00:15:a7:2b:58:fe:93:0d:a5:63:9a:c1:89:89:67:a8:56:68: 51:d1:f8:e5:cc:d0:0c:80:9a:9a:8c:91:64:f7:49:93:d8:e4: dd:c0:d8:c2:0f:b4:24:c8:1c:f8:37:45:11:b4:41:5b:26:f8: 4c:f9:1b:7a:81:bc:7a:fa:d1:37:29:98:21:25:23:8f:ac:55: c3:83:9b:f5:e8:58:d9:a0:75:af:fb:9f:a0:90:28:67:33:8e: e7:e8:bb:8a:06:2d:be:8e:ea:38:be:2a:f9:af:f9:82:14:88: d3:a0:97:4d:35:ee:bf:92:a0:d8:07:c5:0e:f7:6f:57:51:4c: ce:ea:e9:77:76:6b:f3:e4:56:a6:34:1a:5b:51:f6:bb:62:f8: 2d:46:23:8c:69:b3:c9:d3:c9:c7:47:9f:cc:c5:e4:30:be:92: 35:cb:20:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMNRwLVElwgQTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OWQxMmZjMTQtNThiMC00NDhhLTkzMTctYjQ3OWNmOWQ5MGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvixCNUZP2hTZ3B6DrQrnTIvLhMertn4dJne 4JECShjClGulAWCFKHw0m/HjR1XPrlr/y54Zh8cmed3pF/9SSlAsuVuR9AmOm1Jj M+YVYmeQoAtrKrlRaoB9U9Fd5E2r2YwXLYAbzPYzrYMtFhZhY6bIsatZ1aaPeBwz zWyWzdvKLQPyQBX8X03DIXXDAWfBny0DJr+0rrVNrFCYXmgAVIQG7cOTpvTGxg9z 7V3ElfcTcDM3cH5dzX1V4sXPHUK7U+X3BFXgJXYhHgrXuY0JUtjuC5pm++P6LO00 Iy1NKFMRz7zdgigSIRLK0g4QSspHr/Xkf2vH6jJeY0Pw2/IeewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhfTu4AZkQqkKEsxxGa+hWum2hDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvMTU0ZDdkNTQtYTA3NC0z ZWFjLWE1ZjQtNDM2ODBmOGE3ZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDP4hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcB0FebUyFirOEtCmBxWUVyTmjNphE6wzSiJB6NJDio5S838uiEl/jc h5wWrQxBUHL1924u6yYAb3Gs5aPaOkCEbXMteoR8DCq4QgcZrY/TEOCkZjKCltf4 3wAVpytY/pMNpWOawYmJZ6hWaFHR+OXM0AyAmpqMkWT3SZPY5N3A2MIPtCTIHPg3 RRG0QVsm+Ez5G3qBvHr60TcpmCElI4+sVcODm/XoWNmgda/7n6CQKGczjufou4oG Lb6O6ji+Kvmv+YIUiNOgl0017r+SoNgHxQ73b1dRTM7q6Xd2a/PkVqY0GltR9rti +C1GI4xps8nTycdHn8zF5DC+kjXLILM= -----END CERTIFICATE-----Generated at Mon Oct 20 21:19:20 2025 by rpki-client