$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46b8f82d-50a5-3615-a37d-9354bdbdf09c.roa File: 46b8f82d-50a5-3615-a37d-9354bdbdf09c.roa (raw, json) Hash identifier: UWfukZyn4tLd6txTLsGhh42Zwq7+N5ggEiHiONIqTwA= Subject key identifier: A8:D5:30:53:03:54:FB:E9:30:5A:C3:8D:E0:CD:7F:8B:B5:4C:05:AE Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B328C3D08EE864D0780F59A00 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46b8f82d-50a5-3615-a37d-9354bdbdf09c.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 17984 IP address blocks: 63.222.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3d:08:ee:86:4d:07:80:f5:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=43b98d34-091f-4ff6-9566-3315a7734787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:41:ca:11:d3:c5:5d:1d:7a:a3:24:7d:65:1a: a0:d0:b7:52:5f:80:fc:a2:3f:83:13:be:b0:38:6e: e0:78:88:74:a9:b4:bf:cc:5e:bf:29:ec:49:30:68: cc:50:59:87:2c:a3:4b:e5:5a:99:40:38:1c:ea:1d: 6c:e0:20:de:29:33:4e:ba:34:bc:4b:68:cb:00:d6: a7:50:8f:57:d7:77:b2:59:6b:c5:20:71:c0:c0:ff: a5:34:33:b4:8d:ab:89:c9:0c:7c:1b:ce:73:ff:c0: be:33:e8:8f:f8:f4:78:bf:dd:25:27:6a:7d:a9:99: f0:6a:d3:be:ba:9e:04:3f:76:38:1f:8c:61:b2:9d: 53:70:d9:b0:ed:ab:a8:84:5a:2d:68:de:d9:65:1d: 2a:38:58:52:21:64:7b:2c:20:c1:47:6a:13:00:39: f0:32:1d:fd:78:b2:50:a3:ee:3f:d9:85:94:d2:78: be:30:eb:47:d9:ff:45:fd:99:72:d6:2e:e1:43:eb: 08:b4:9e:16:c7:a4:8c:36:de:2e:49:df:be:c3:e2: 49:7f:ba:2d:fa:17:d7:20:c8:f0:87:3d:09:b1:6f: ad:30:09:b6:fa:cd:f0:fe:0c:72:fc:0c:79:00:fa: 21:79:98:91:d6:53:3d:b4:66:a1:9e:62:a1:a6:45: d9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D5:30:53:03:54:FB:E9:30:5A:C3:8D:E0:CD:7F:8B:B5:4C:05:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/46b8f82d-50a5-3615-a37d-9354bdbdf09c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.222.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:73:86:d9:96:12:c8:9a:d7:a2:b8:63:79:04:b8:3d:7e:55: 57:ed:f3:a1:35:dc:ad:53:73:a3:83:43:9c:91:2d:c6:0a:7d: aa:ea:bc:49:9a:41:cd:cc:13:47:f2:52:5a:6b:db:9b:e2:89: 42:dd:82:df:0a:89:4a:b7:02:27:f9:23:2d:e7:27:71:be:85: 02:56:27:28:06:8d:4e:35:86:c2:02:87:fc:fe:51:fd:b7:0f: a4:80:fc:9d:42:1a:a8:02:90:2a:ac:21:c2:84:bb:86:81:ae: 3c:ec:78:2f:f1:52:a4:c3:4d:8a:25:01:75:24:90:7b:4a:1a: e5:3e:33:57:af:24:21:50:ee:fa:1f:03:00:92:b1:56:fb:59: 93:b0:53:b5:c5:39:33:1e:0b:98:60:2b:ad:bd:f1:57:f9:19: a5:12:97:30:8b:0f:5e:21:a4:6c:65:b3:a3:95:4a:99:78:fc: c4:3c:31:98:3e:50:c8:ad:2f:f3:cb:0b:d6:ec:27:3c:df:ce: 46:7c:34:c3:a0:7d:50:10:7a:ba:77:1b:f7:39:1c:67:f5:35: 14:00:8a:73:15:c0:c7:62:5d:91:bd:70:3a:0c:f6:2d:a4:ef: 67:0b:c6:61:e3:92:3d:35:e8:db:4a:78:75:39:9c:3e:11:60: 92:2a:55:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjD0I7oZNB4D1mgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NDNiOThkMzQtMDkxZi00ZmY2LTk1NjYtMzMxNWE3NzM0Nzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEHKEdPFXR16oyR9ZRqg0LdSX4D8oj+DE76w OG7geIh0qbS/zF6/KexJMGjMUFmHLKNL5VqZQDgc6h1s4CDeKTNOujS8S2jLANan UI9X13eyWWvFIHHAwP+lNDO0jauJyQx8G85z/8C+M+iP+PR4v90lJ2p9qZnwatO+ up4EP3Y4H4xhsp1TcNmw7auohFotaN7ZZR0qOFhSIWR7LCDBR2oTADnwMh39eLJQ o+4/2YWU0ni+MOtH2f9F/Zly1i7hQ+sItJ4Wx6SMNt4uSd++w+JJf7ot+hfXIMjw hz0JsW+tMAm2+s3w/gxy/Ax5APoheZiR1lM9tGahnmKhpkXZTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjVMFMDVPvpMFrDjeDNf4u1TAWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNDZiOGY4MmQtNTBhNS0z NjE1LWEzN2QtOTM1NGJkYmRmMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDP96YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdzhtmWEsia16K4Y3kEuD1+VVft86E13K1Tc6ODQ5yRLcYKfarqvEma Qc3ME0fyUlpr25viiULdgt8KiUq3Aif5Iy3nJ3G+hQJWJygGjU41hsICh/z+Uf23 D6SA/J1CGqgCkCqsIcKEu4aBrjzseC/xUqTDTYolAXUkkHtKGuU+M1evJCFQ7vof AwCSsVb7WZOwU7XFOTMeC5hgK6298Vf5GaUSlzCLD14hpGxls6OVSpl4/MQ8MZg+ UMitL/PLC9bsJzzfzkZ8NMOgfVAQerp3G/c5HGf1NRQAinMVwMdiXZG9cDoM9i2k 72cLxmHjkj016NtKeHU5nD4RYJIqVd8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:20:29 2025 by rpki-client