$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3b3dd675-b170-3eee-bf6a-12af67835d86.roa File: 3b3dd675-b170-3eee-bf6a-12af67835d86.roa (raw, json) Hash identifier: KtCPhMYrDRbPFRzQh8DbQH1WCXBcqmjqbf8VOxMUEfU= Subject key identifier: 65:CC:4A:C6:01:2E:4E:30:41:57:B5:30:05:9C:6C:2F:73:BA:05:00 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584A86DB72AE82C3E033894DD700 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3b3dd675-b170-3eee-bf6a-12af67835d86.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 134190 IP address blocks: 63.216.170.0/24 maxlen: 32 63.216.192.160/27 maxlen: 32 63.216.195.192/27 maxlen: 32 63.216.196.128/27 maxlen: 32 63.216.198.96/27 maxlen: 32 63.217.71.96/27 maxlen: 32 63.217.89.64/27 maxlen: 32 63.220.1.192/26 maxlen: 32 63.221.136.32/27 maxlen: 32 63.221.139.32/27 maxlen: 32 63.221.140.192/27 maxlen: 32 63.221.141.32/27 maxlen: 32 63.221.159.0/27 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:72:ae:82:c3:e0:33:89:4d:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=2a9ca349-fff9-4e5c-948a-3189004d1cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:01:c9:b6:6b:84:04:d1:5a:1b:a0:01:ab: 5d:6a:76:c4:ba:75:49:88:85:ef:ad:3f:f9:cb:d8: 06:a0:70:0d:ff:83:de:68:d0:37:32:4c:1d:dd:bc: 81:90:0f:49:1d:3f:1c:b2:be:5b:ee:45:9f:7c:3c: 3f:b8:e5:18:81:a4:38:71:af:97:29:8e:cd:37:5c: c1:b6:cc:ab:11:a8:dc:77:5f:75:c8:ef:03:3f:23: f3:21:28:d0:6f:3f:1f:1d:02:a2:9f:46:df:7b:1d: 9f:9e:9e:58:96:00:ba:bf:ae:27:05:c4:fa:85:13: 04:5d:72:96:07:7f:69:64:8c:11:91:10:ab:20:0f: 74:42:d2:1d:91:bf:2e:62:a6:d0:8a:7c:bb:dc:ce: 11:64:b9:b4:c8:c0:2f:c4:51:84:b6:09:5f:53:32: a8:98:6e:cb:82:e4:d0:65:82:e4:69:12:d9:39:0a: 79:39:bf:43:8e:f8:56:25:9e:6d:c7:36:6b:c3:28: 8e:f4:9d:e7:0b:d2:50:e4:bf:dd:dd:fd:7a:1e:a6: 5e:e1:09:b6:21:04:92:c6:38:70:91:48:c6:80:c4: 61:c8:fc:e9:4c:58:52:a3:74:86:14:9d:9d:5b:de: 02:24:e9:d9:d2:fa:ec:6b:71:10:58:74:e8:63:c6: 02:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CC:4A:C6:01:2E:4E:30:41:57:B5:30:05:9C:6C:2F:73:BA:05:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3b3dd675-b170-3eee-bf6a-12af67835d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.216.170.0/24 63.216.192.160/27 63.216.195.192/27 63.216.196.128/27 63.216.198.96/27 63.217.71.96/27 63.217.89.64/27 63.220.1.192/26 63.221.136.32/27 63.221.139.32/27 63.221.140.192/27 63.221.141.32/27 63.221.159.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:e1:16:81:b6:b6:65:84:8e:7b:5c:c8:da:45:ae:e7:23:30: 9f:92:07:1f:f2:16:cb:b9:a8:25:8f:42:d0:70:4d:0a:df:ff: bc:33:43:92:c1:b2:70:50:ec:f3:a0:9b:b7:da:bf:d9:43:4c: 66:75:a9:d4:4d:89:87:fb:10:69:9d:c6:a0:4c:6a:74:47:05: 7c:43:39:96:74:a1:c5:f5:b9:20:3f:07:42:fb:93:18:b8:93: 23:da:10:02:37:ad:6f:4a:67:f1:6f:28:9d:49:f5:37:d3:c7: 26:9a:a0:5a:d3:16:b3:ef:db:1a:9d:73:69:36:53:a8:22:09: d6:25:6d:5c:5c:19:56:46:5d:d6:93:4a:90:bc:7f:b0:d3:0d: a1:83:67:50:2a:88:1f:b9:b6:96:a9:7b:a8:b1:14:59:7e:8a: 3e:ff:32:40:eb:39:52:23:35:73:44:47:79:30:dc:ce:a3:b9: 7b:96:7e:65:2a:f5:26:be:98:99:c0:29:63:9a:d5:15:08:20: c0:51:f4:9a:25:55:38:46:49:41:c3:ba:75:f4:79:fd:d5:69: 31:ef:e7:e4:0d:66:bb:75:dc:07:f0:77:de:86:05:4b:02:45: 3d:51:f0:f8:69:bc:9d:20:0e:5d:2d:ec:9c:cc:51:48:12:99: 2a:3e:55:c2 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAQ0Mn0MoWEqG23KugsPgM4lN1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MmE5Y2EzNDktZmZmOS00ZTVjLTk0OGEtMzE4OTAwNGQxY2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7YBybZrhATRWhugAatdanbEunVJiIXvrT/5 y9gGoHAN/4PeaNA3Mkwd3byBkA9JHT8csr5b7kWffDw/uOUYgaQ4ca+XKY7NN1zB tsyrEajcd191yO8DPyPzISjQbz8fHQKin0bfex2fnp5YlgC6v64nBcT6hRMEXXKW B39pZIwRkRCrIA90QtIdkb8uYqbQiny73M4RZLm0yMAvxFGEtglfUzKomG7LguTQ ZYLkaRLZOQp5Ob9DjvhWJZ5txzZrwyiO9J3nC9JQ5L/d3f16HqZe4Qm2IQSSxjhw kUjGgMRhyPzpTFhSo3SGFJ2dW94CJOnZ0vrsa3EQWHToY8YCEwIDAQABo4IDqTCC A6UwHQYDVR0OBBYEFGXMSsYBLk4wQVe1MAWcbC9zugUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvM2IzZGQ2NzUtYjE3MC0z ZWVlLWJmNmEtMTJhZjY3ODM1ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAP9iqAwUF P9jAoAMFBT/Yw8ADBQU/2MSAAwUFP9jGYAMFBT/ZR2ADBQU/2VlAAwUGP9wBwAMF BT/diCADBQU/3YsgAwUFP92MwAMFBT/djSADBQU/3Z8AMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALbhFoG2 tmWEjntcyNpFrucjMJ+SBx/yFsu5qCWPQtBwTQrf/7wzQ5LBsnBQ7POgm7fav9lD TGZ1qdRNiYf7EGmdxqBManRHBXxDOZZ0ocX1uSA/B0L7kxi4kyPaEAI3rW9KZ/Fv KJ1J9TfTxyaaoFrTFrPv2xqdc2k2U6giCdYlbVxcGVZGXdaTSpC8f7DTDaGDZ1Aq iB+5tpape6ixFFl+ij7/MkDrOVIjNXNER3kw3M6juXuWfmUq9Sa+mJnAKWOa1RUI IMBR9JolVThGSUHDunX0ef3VaTHv5+QNZrt13Afwd96GBUsCRT1R8PhpvJ0gDl0t 7JzMUUgSmSo+VcI= -----END CERTIFICATE-----Generated at Wed Jul 23 11:57:14 2025 by rpki-client