$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cb4d4426-ecc1-3fb2-9fa0-42132bb4191a.roa File: cb4d4426-ecc1-3fb2-9fa0-42132bb4191a.roa (raw, json) Hash identifier: VY6+ugPEJxAOBNYzFnuV1OAO3e4j9lbayg1Fyylz04c= Subject key identifier: E9:F3:34:B0:B1:7F:E1:D7:B0:63:56:2B:5A:EB:FA:95:D3:13:AC:99 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849D594E4A5F43CD6A80F69DE80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cb4d4426-ecc1-3fb2-9fa0-42132bb4191a.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 22566 IP address blocks: 63.221.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e4:a5:f4:3c:d6:a8:0f:69:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=29ac1cc5-ee9b-4dc9-8528-4ca912e948b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ac:a1:47:c2:0d:82:bd:be:00:7d:28:7b:07: 81:fd:cf:0c:49:17:b3:12:07:a8:cb:c0:8c:31:bb: 73:2e:3c:97:8c:ad:33:3f:cb:90:74:e8:5d:51:5b: 93:95:6c:02:29:83:6e:58:df:76:0e:8b:b4:4d:d5: 61:69:db:44:ac:8e:9f:d5:da:82:f2:17:92:1c:3a: 09:ad:19:8b:b9:57:36:1b:fd:5a:49:68:6b:6c:b2: e1:14:e4:1c:e4:28:e7:4b:c5:db:fc:a2:63:20:a4: 29:37:24:d7:d0:c3:be:47:d5:0c:48:8f:01:da:29: 1c:e1:6b:79:fa:c8:a0:d9:45:99:2f:c1:f8:e2:0b: f8:45:d9:1c:90:8c:f0:f2:7a:4c:26:c7:74:db:99: 30:1e:16:ba:1e:fb:08:c9:8f:e5:e2:c5:c4:16:c2: 78:ef:0e:ec:9f:20:71:5f:6f:58:27:0b:1d:fc:72: d5:d4:ba:2c:a6:78:88:db:45:b6:2b:7d:2d:2d:d4: 99:36:a4:78:d9:2d:98:f3:dc:5c:65:0c:51:5f:e1: 9b:e3:ff:42:e4:34:1c:19:7e:15:3f:d3:ca:9e:4d: 10:e7:c3:9f:c9:2e:f6:75:53:49:19:a7:60:4d:af: 1a:92:d2:29:f0:fd:70:ec:8c:e4:d5:7c:22:03:c1: 9c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F3:34:B0:B1:7F:E1:D7:B0:63:56:2B:5A:EB:FA:95:D3:13:AC:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cb4d4426-ecc1-3fb2-9fa0-42132bb4191a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.221.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:41:ee:1c:6f:11:75:a7:71:df:a8:1c:bf:e9:91:96:f0:6a: 20:5e:76:f7:79:7c:ec:55:59:02:6c:9a:e9:0e:d8:5e:3c:00: 50:97:44:55:58:1d:3a:2b:ec:f2:7b:ae:fd:51:8f:87:92:a6: 1e:b2:f6:87:db:42:cb:90:71:3b:cd:ef:70:ae:6b:d3:7a:92: 0c:7d:51:74:66:01:53:ee:0f:4e:b0:13:f5:9f:f0:ae:3a:3d: 27:6b:eb:41:9e:73:cb:6c:4c:82:bb:61:2d:af:39:5d:8d:45: d7:45:fb:d0:20:6a:a5:93:0c:0d:ac:ab:d8:bb:87:4e:5b:45: 6c:fa:24:36:97:09:eb:7e:59:1a:b3:99:c7:cd:52:ab:a6:ed: dc:e4:ed:bc:85:a8:32:db:79:2e:46:fc:f3:47:43:b6:34:41: b5:d2:e5:44:a9:3d:6b:36:e0:f6:0b:8a:e1:fb:b1:60:1f:fb: 5a:09:1e:c3:c7:22:67:1c:3c:08:f5:5c:ed:0a:74:b4:d5:5e: 4a:e5:e8:9e:3f:1b:80:b1:d6:e9:79:bf:2c:d8:21:d1:52:50: f2:db:79:1d:18:fa:ba:3b:5d:6d:e6:89:b1:ad:12:c3:81:39: bc:e9:ee:ba:e1:00:26:e3:3e:af:da:27:45:ea:d5:17:cb:31: e1:fb:ec:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOSl9DzWqA9p3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MjlhYzFjYzUtZWU5Yi00ZGM5LTg1MjgtNGNhOTEyZTk0OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKyhR8INgr2+AH0oeweB/c8MSRezEgeoy8CM MbtzLjyXjK0zP8uQdOhdUVuTlWwCKYNuWN92Dou0TdVhadtErI6f1dqC8heSHDoJ rRmLuVc2G/1aSWhrbLLhFOQc5CjnS8Xb/KJjIKQpNyTX0MO+R9UMSI8B2ikc4Wt5 +sig2UWZL8H44gv4RdkckIzw8npMJsd025kwHha6HvsIyY/l4sXEFsJ47w7snyBx X29YJwsd/HLV1LospniI20W2K30tLdSZNqR42S2Y89xcZQxRX+Gb4/9C5DQcGX4V P9PKnk0Q58OfyS72dVNJGadgTa8aktIp8P1w7Izk1XwiA8GcWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnzNLCxf+HXsGNWK1rr+pXTE6yZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvY2I0ZDQ0MjYtZWNjMS0z ZmIyLTlmYTAtNDIxMzJiYjQxOTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP92EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5B7hxvEXWncd+oHL/pkZbwaiBedvd5fOxVWQJsmukO2F48AFCXRFVY HTor7PJ7rv1Rj4eSph6y9ofbQsuQcTvN73Cua9N6kgx9UXRmAVPuD06wE/Wf8K46 PSdr60Gec8tsTIK7YS2vOV2NRddF+9AgaqWTDA2sq9i7h05bRWz6JDaXCet+WRqz mcfNUqum7dzk7byFqDLbeS5G/PNHQ7Y0QbXS5USpPWs24PYLiuH7sWAf+1oJHsPH ImccPAj1XO0KdLTVXkrl6J4/G4Cx1ul5vyzYIdFSUPLbeR0Y+ro7XW3mibGtEsOB Obzp7rrhACbjPq/aJ0Xq1RfLMeH77Ps= -----END CERTIFICATE-----Generated at Sun Jun 29 12:32:44 2025 by rpki-client