$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/c2535aae-8dcb-38fa-a211-c345a2d57257.roa File: c2535aae-8dcb-38fa-a211-c345a2d57257.roa (raw, json) Hash identifier: 88WxPTLJBnma9H8nhaIHxGSNTwm6ma9V4kw7jHpdZkc= Subject key identifier: 4C:80:AF:4A:A7:1B:A9:7F:C9:6D:55:84:35:02:7A:26:C6:20:A2:BE Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849D594E4B749EBCF1AE5916F80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/c2535aae-8dcb-38fa-a211-c345a2d57257.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 24413 IP address blocks: 63.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e4:b7:49:eb:cf:1a:e5:91:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=110b80e6-27e1-47bc-8150-9a76aa4c067a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:88:7a:c8:0b:2c:d9:c1:72:3f:25:a1:54:08: eb:03:15:03:d0:8b:60:50:0a:8a:6e:c7:5c:4a:ae: e9:bf:0d:49:5e:82:24:a9:4d:48:39:88:1b:ad:5d: 20:05:91:e5:77:bd:7b:da:77:77:72:17:66:e6:50: b5:fc:2f:95:0f:c1:79:c6:cb:78:b7:b1:54:b1:a1: 69:ce:44:16:0f:41:9c:4f:62:c8:13:7c:ef:6d:aa: e1:6d:02:ac:f1:9d:a3:b6:14:97:31:70:a3:6e:f2: 32:b1:aa:a7:d9:66:93:3d:b8:d3:82:10:3e:ef:c0: 86:6b:60:8f:cf:aa:82:13:40:3b:8c:e9:1c:40:ef: b4:8c:80:af:d7:1a:37:56:1d:dc:75:a0:29:da:f4: 84:22:65:db:f6:1c:f2:9c:55:36:a0:36:00:50:27: 1e:45:4c:b5:42:df:0a:8c:c4:f8:13:71:6c:38:8d: 39:b7:fb:5c:97:cc:64:20:6b:c0:9a:1c:e4:46:7e: 10:43:cf:18:10:fb:b8:6f:b2:43:96:50:67:11:be: d7:27:72:73:58:e5:da:92:a2:f1:c0:2c:4f:5f:f2: a9:a9:95:f4:5d:01:db:1e:bd:6f:70:06:15:0c:46: cd:94:66:49:8b:77:a5:9a:90:68:5a:4f:66:bf:84: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:80:AF:4A:A7:1B:A9:7F:C9:6D:55:84:35:02:7A:26:C6:20:A2:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/c2535aae-8dcb-38fa-a211-c345a2d57257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.217.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:67:dd:f4:fe:bc:1d:13:1a:c0:f7:b5:45:7d:3b:69:81:80: c1:4f:6f:cf:1a:d5:80:8b:9d:70:20:91:f8:d0:bb:f4:58:9d: a4:05:8e:3a:6b:6f:16:a1:b2:9e:c8:df:51:02:e2:8d:12:fc: 09:7c:90:d4:e3:10:b7:95:2d:ca:8a:1b:1f:86:d6:e7:d4:9e: bc:b4:4a:55:84:c0:1d:04:d2:84:5d:e3:61:65:d8:2c:42:e3: 6e:31:37:7d:a5:ae:07:a0:9f:4e:85:9e:d1:8e:b5:8d:0c:48: e9:4b:4f:44:4a:25:a3:55:48:62:ec:41:02:1f:61:f3:04:10: 3d:9f:6f:e6:bb:61:8b:25:a0:ec:b3:3b:b9:4e:73:87:1a:d5: e7:ff:75:f6:de:45:7c:4c:f7:b9:ba:1d:67:47:fb:f0:ae:4f: 1a:30:1e:8e:a0:f6:6f:a9:f5:39:48:6e:82:44:7d:89:6a:7c: 0d:d3:60:56:12:54:d5:45:78:4e:8e:ca:e3:60:30:80:7a:71: 2d:09:d8:d6:87:2c:8a:30:65:c7:42:5e:0a:86:25:9e:f0:1d: 52:d0:83:fb:52:a5:7d:cd:57:96:a8:74:45:08:be:06:18:04: d9:af:9b:72:88:29:b7:0f:26:69:b5:93:ec:47:20:4f:a2:1d: 61:98:0d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOS3SevPGuWRb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MTEwYjgwZTYtMjdlMS00N2JjLTgxNTAtOWE3NmFhNGMwNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYh6yAss2cFyPyWhVAjrAxUD0ItgUAqKbsdc Sq7pvw1JXoIkqU1IOYgbrV0gBZHld7172nd3chdm5lC1/C+VD8F5xst4t7FUsaFp zkQWD0GcT2LIE3zvbarhbQKs8Z2jthSXMXCjbvIysaqn2WaTPbjTghA+78CGa2CP z6qCE0A7jOkcQO+0jICv1xo3Vh3cdaAp2vSEImXb9hzynFU2oDYAUCceRUy1Qt8K jMT4E3FsOI05t/tcl8xkIGvAmhzkRn4QQ88YEPu4b7JDllBnEb7XJ3JzWOXakqLx wCxPX/KpqZX0XQHbHr1vcAYVDEbNlGZJi3elmpBoWk9mv4QlawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyAr0qnG6l/yW1VhDUCeibGIKK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvYzI1MzVhYWUtOGRjYi0z OGZhLWEyMTEtYzM0NWEyZDU3MjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP9lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZn3fT+vB0TGsD3tUV9O2mBgMFPb88a1YCLnXAgkfjQu/RYnaQFjjpr bxahsp7I31EC4o0S/Al8kNTjELeVLcqKGx+G1ufUnry0SlWEwB0E0oRd42Fl2CxC 424xN32lrgegn06FntGOtY0MSOlLT0RKJaNVSGLsQQIfYfMEED2fb+a7YYsloOyz O7lOc4ca1ef/dfbeRXxM97m6HWdH+/CuTxowHo6g9m+p9TlIboJEfYlqfA3TYFYS VNVFeE6OyuNgMIB6cS0J2NaHLIowZcdCXgqGJZ7wHVLQg/tSpX3NV5aodEUIvgYY BNmvm3KIKbcPJmm1k+xHIE+iHWGYDWg= -----END CERTIFICATE-----Generated at Tue May 13 23:25:46 2025 by rpki-client