$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5d80da20-7a96-3f74-bf24-b020ca452dd7.roa File: 5d80da20-7a96-3f74-bf24-b020ca452dd7.roa (raw, json) Hash identifier: vCQco/Ne4btRVPwL2k32fDY19JFo8JtotRewJ6trsBs= Subject key identifier: F6:15:B4:F9:25:66:66:A9:90:4B:D9:86:44:4B:9B:01:56:EA:7D:8A Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B328C3D393196CAFD4FA17D00 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5d80da20-7a96-3f74-bf24-b020ca452dd7.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 17984 IP address blocks: 63.222.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3d:39:31:96:ca:fd:4f:a1:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=6e59f8a1-b356-4a96-ade1-baddcbc70675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:4e:10:c1:29:57:51:cb:78:f8:93:36:e5: 8f:d9:e2:b1:e0:da:3d:a9:82:46:d2:65:29:7f:7e: cb:ae:d5:5d:88:79:c9:7c:6a:24:07:43:c4:c3:00: 41:39:a7:cc:00:f6:ea:73:0f:31:8d:27:94:02:d0: da:05:b1:bd:b0:78:27:b8:8b:56:25:5f:46:21:e6: f0:6d:9b:74:d2:fb:1c:c0:a1:a8:a3:23:aa:17:ac: 07:f9:4b:17:19:ef:3f:41:68:7b:36:cb:0f:9a:21: 34:8b:03:68:9f:36:9b:7e:b1:a0:23:8b:a9:3e:3d: f0:85:b4:50:15:e2:4e:62:3a:73:36:93:3d:db:3d: 00:1d:bf:e7:6a:8d:31:63:10:8d:8f:f6:da:a6:48: 83:1d:ac:83:b4:f7:a1:ee:4b:dc:f0:88:56:f9:06: 53:bb:85:7d:7b:01:4f:92:72:03:0b:1e:f0:e4:80: c9:6f:b0:13:2a:9b:05:07:40:30:cd:93:6c:cd:5a: 14:82:9a:05:55:d2:4f:b3:62:4f:d0:c8:89:39:a7: 52:50:0e:c5:91:9b:d3:65:30:6e:3d:ef:15:4b:4c: 0b:9f:74:d2:84:3d:90:2b:62:3e:ff:33:44:91:92: d3:85:76:8b:b2:46:e1:2f:cc:46:36:1e:80:9e:1b: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:15:B4:F9:25:66:66:A9:90:4B:D9:86:44:4B:9B:01:56:EA:7D:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5d80da20-7a96-3f74-bf24-b020ca452dd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.222.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:bf:3c:22:8d:72:70:18:8e:33:a8:6d:12:fb:33:4b:34:1f: 08:a8:6a:2a:41:df:e5:c1:58:10:a6:ea:dd:69:0d:d0:4c:80: 31:44:57:38:bf:05:42:64:16:91:79:a1:30:6f:d0:82:73:51: 5f:36:ee:7f:4d:c9:55:82:79:0d:78:39:59:5c:28:10:43:d3: 81:f2:12:0d:2f:bc:09:78:44:ee:9c:a8:b1:d1:9e:c4:29:ab: 48:fa:81:69:9f:ba:3e:32:23:19:14:dc:54:4f:b9:27:a1:c6: 51:bd:fb:78:a0:34:2d:65:b1:d8:fe:86:18:ff:54:07:07:b0: 71:a3:d9:6d:86:44:85:7a:05:a3:3f:c4:a2:dd:60:35:ab:31: a8:89:b8:d8:a3:fc:d5:49:79:57:76:43:16:68:7d:63:5b:4e: c8:29:17:6a:60:d5:09:9a:7d:91:3c:b2:20:14:a6:30:ae:02: 2e:c0:05:0e:8d:95:48:6c:50:a6:58:8e:7b:7f:fc:a5:32:2b: 39:7e:79:c6:19:c8:c9:4d:af:08:f7:6e:bf:64:2f:34:4f:be: 32:76:71:64:9c:a5:cd:5d:92:1d:75:cd:ab:73:4f:ab:95:72: ba:32:e6:54:54:a9:51:92:0c:f2:dd:dc:68:9b:c3:09:ad:ce: 8a:0f:3d:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjD05MZbK/U+hfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NmU1OWY4YTEtYjM1Ni00YTk2LWFkZTEtYmFkZGNiYzcwNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArblOEMEpV1HLePiTNuWP2eKx4No9qYJG0mUp f37LrtVdiHnJfGokB0PEwwBBOafMAPbqcw8xjSeUAtDaBbG9sHgnuItWJV9GIebw bZt00vscwKGooyOqF6wH+UsXGe8/QWh7NssPmiE0iwNonzabfrGgI4upPj3whbRQ FeJOYjpzNpM92z0AHb/nao0xYxCNj/bapkiDHayDtPeh7kvc8IhW+QZTu4V9ewFP knIDCx7w5IDJb7ATKpsFB0AwzZNszVoUgpoFVdJPs2JP0MiJOadSUA7FkZvTZTBu Pe8VS0wLn3TShD2QK2I+/zNEkZLThXaLskbhL8xGNh6AnhtMQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYVtPklZmapkEvZhkRLmwFW6n2KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNWQ4MGRhMjAtN2E5Ni0z Zjc0LWJmMjQtYjAyMGNhNDUyZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDP96wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi/PCKNcnAYjjOobRL7M0s0HwioaipB3+XBWBCm6t1pDdBMgDFEVzi/ BUJkFpF5oTBv0IJzUV827n9NyVWCeQ14OVlcKBBD04HyEg0vvAl4RO6cqLHRnsQp q0j6gWmfuj4yIxkU3FRPuSehxlG9+3igNC1lsdj+hhj/VAcHsHGj2W2GRIV6BaM/ xKLdYDWrMaiJuNij/NVJeVd2QxZofWNbTsgpF2pg1QmafZE8siAUpjCuAi7ABQ6N lUhsUKZYjnt//KUyKzl+ecYZyMlNrwj3br9kLzRPvjJ2cWScpc1dkh11zatzT6uV croy5lRUqVGSDPLd3GibwwmtzooPPSQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:22:17 2025 by rpki-client