$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b529626a-ae17-3606-accd-537becff7957.roa File: b529626a-ae17-3606-accd-537becff7957.roa (raw, json) Hash identifier: jgzYXFl2LKhUny1b9DppgCp7motO+91X8YBtn2Hx/Kw= Subject key identifier: B4:27:2A:2C:58:64:85:EC:15:B7:F2:C2:F0:39:AE:1A:EA:EA:14:54 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B33F1A4C12F775890ECC0A300 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b529626a-ae17-3606-accd-537becff7957.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 59217 IP address blocks: 63.222.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a4:c1:2f:77:58:90:ec:c0:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=ed41e2bc-d92d-4942-8446-6c16a070de3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b6:e5:d3:27:e6:9e:28:b8:63:55:98:a6:d6: 71:cc:e4:96:4d:82:67:9f:bb:32:08:31:e2:23:c1: 94:1c:7d:b0:39:d9:5f:be:c0:75:f6:6d:be:7f:1a: a4:e9:e3:59:77:60:13:09:2f:1d:4a:8e:b3:e8:2c: 69:f7:fc:e9:57:72:fd:1b:5b:c0:75:48:91:de:9c: 6d:52:a3:65:fb:39:c3:54:8b:0e:1f:b6:bb:95:4c: f9:84:c4:9d:e7:45:e0:db:1b:fe:83:cf:ae:e8:c4: 65:4d:39:0b:23:d8:2e:56:a0:7d:14:cd:97:b2:a8: 60:fd:a4:38:76:95:29:02:ec:62:ff:f9:97:a6:aa: 1c:e8:81:d0:5c:39:55:55:fd:42:60:53:47:07:e1: 02:21:21:11:53:b3:ad:5f:41:ef:ec:2f:2a:e8:9a: a5:8a:ef:ff:36:bd:e0:6d:1f:a4:fa:bc:9d:ab:48: a9:a0:69:f7:c5:7c:53:ae:6e:25:6c:7f:42:7f:0c: fd:62:bf:ee:0d:b0:40:1f:4b:3e:4c:55:9e:39:27: 86:0c:c8:8f:cf:db:68:73:39:f7:20:5e:19:4f:af: 89:f3:0a:97:ed:79:68:6f:0e:c7:86:93:bf:ea:8d: d1:12:40:08:48:5b:51:8b:99:85:61:99:c4:56:fb: a4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:27:2A:2C:58:64:85:EC:15:B7:F2:C2:F0:39:AE:1A:EA:EA:14:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b529626a-ae17-3606-accd-537becff7957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.222.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e5:59:67:bf:ad:8a:6a:53:36:e7:c6:74:32:fe:5b:a5:4c: 97:ed:5f:7c:86:d5:6d:fd:41:f3:fd:04:de:f6:49:bb:18:e7: 6c:82:f3:ab:a8:c4:65:39:3c:62:e7:5e:d9:3a:47:99:89:71: 64:21:7a:63:4a:5f:17:8c:40:64:d6:6b:2e:89:c2:ce:23:1f: fc:5d:81:11:fe:87:f1:29:d7:ed:fd:26:d5:79:cc:2e:66:aa: ed:2b:90:84:76:5f:83:fb:df:97:37:92:f4:db:cb:59:0b:09: 0a:76:95:80:e8:27:ef:a1:25:93:bd:11:26:8f:c2:79:65:ad: 41:1c:b2:7b:0f:1a:46:0c:71:01:6c:ed:21:1f:f3:c6:c9:85: fa:72:dc:3c:7a:66:52:1f:62:9d:01:45:2c:46:d6:e5:b7:be: bd:5a:50:85:16:b5:4b:25:1e:e6:4e:ac:54:40:c6:64:f4:4e: a5:65:ba:c4:99:75:25:43:9f:46:dc:c3:31:33:9e:69:f1:7a: 19:0b:bf:9e:b3:ec:b4:20:45:b7:fd:7d:a1:7c:bb:76:3f:64: 8b:98:3a:fd:9e:8b:a2:14:8e:55:3f:07:ba:47:ab:ed:9e:c6: ec:fa:38:d6:8d:10:ea:ae:07:0a:d3:ba:e8:a7:46:77:9e:35: f7:ea:a0:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aTBL3dYkOzAowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk ZWQ0MWUyYmMtZDkyZC00OTQyLTg0NDYtNmMxNmEwNzBkZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47bl0yfmnii4Y1WYptZxzOSWTYJnn7syCDHi I8GUHH2wOdlfvsB19m2+fxqk6eNZd2ATCS8dSo6z6Cxp9/zpV3L9G1vAdUiR3pxt UqNl+znDVIsOH7a7lUz5hMSd50Xg2xv+g8+u6MRlTTkLI9guVqB9FM2Xsqhg/aQ4 dpUpAuxi//mXpqoc6IHQXDlVVf1CYFNHB+ECISERU7OtX0Hv7C8q6Jqliu//Nr3g bR+k+rydq0ipoGn3xXxTrm4lbH9Cfwz9Yr/uDbBAH0s+TFWeOSeGDMiPz9toczn3 IF4ZT6+J8wqX7Xlobw7HhpO/6o3REkAISFtRi5mFYZnEVvukgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQnKixYZIXsFbfywvA5rhrq6hRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvYjUyOTYyNmEtYWUxNy0z NjA2LWFjY2QtNTM3YmVjZmY3OTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP95/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7lWWe/rYpqUzbnxnQy/lulTJftX3yG1W39QfP9BN72SbsY52yC86uo xGU5PGLnXtk6R5mJcWQhemNKXxeMQGTWay6Jws4jH/xdgRH+h/Ep1+39JtV5zC5m qu0rkIR2X4P735c3kvTby1kLCQp2lYDoJ++hJZO9ESaPwnllrUEcsnsPGkYMcQFs 7SEf88bJhfpy3Dx6ZlIfYp0BRSxG1uW3vr1aUIUWtUslHuZOrFRAxmT0TqVlusSZ dSVDn0bcwzEznmnxehkLv56z7LQgRbf9faF8u3Y/ZIuYOv2ei6IUjlU/B7pHq+2e xuz6ONaNEOquBwrTuuinRneeNffqoJQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:20:48 2025 by rpki-client