$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2119d135-fbe2-37ef-9c8e-60af45ede476.roa File: 2119d135-fbe2-37ef-9c8e-60af45ede476.roa (raw, json) Hash identifier: pDEYevR5tsZgxsKJ45vFwBVlGVO3mSjulPSYEWIH2Nk= Subject key identifier: AB:9A:CF:77:5F:7D:9D:D6:69:C9:4A:5F:83:09:81:F3:C3:23:71:BB Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B970CE7134F519E0C272F5B80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2119d135-fbe2-37ef-9c8e-60af45ede476.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 7262 IP address blocks: 63.217.85.0/24 maxlen: 24 63.223.203.0/24 maxlen: 24 63.223.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e7:13:4f:51:9e:0c:27:2f:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=40858bb6-93a5-439f-b556-eb6e4c15ba43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:07:d0:7a:64:43:9f:6d:68:4f:fa:1a:7a: 1f:6b:23:eb:db:41:b6:4d:e0:1f:88:86:59:0a:6a: 4d:7e:5c:78:e8:8e:19:2c:de:74:a2:f7:6d:4a:04: 01:79:f2:23:3c:bc:1a:57:45:66:c7:15:1e:93:86: e3:11:14:13:66:9a:45:c7:3b:ff:32:56:7c:0c:13: 3c:4b:d3:fc:77:a4:e2:54:91:53:7d:60:ee:40:e4: f1:07:ee:fd:f4:2a:20:aa:6b:88:24:49:2c:b0:0c: 8e:76:c9:0a:d7:96:ca:23:08:a4:b0:28:21:8d:90: 78:56:b1:2b:db:33:e7:12:74:86:4b:89:0a:88:17: 83:62:91:8d:79:2e:b1:a7:00:f8:09:0f:2b:f9:64: 07:1f:27:2c:66:44:fb:64:2d:4f:90:e9:3c:ce:2e: ec:9e:cb:2b:82:79:da:36:19:5f:53:56:03:80:de: 61:66:d0:51:ce:78:c3:ac:d1:16:b5:56:6e:c7:fb: 31:f1:ff:66:db:d5:4f:18:f2:98:fd:3d:a9:03:23: 2f:e4:14:4a:9c:34:52:47:79:d9:29:11:e7:90:07: 37:a0:3c:e2:3b:3e:46:f0:d5:3f:8a:9b:85:f2:82: 76:8e:a5:6e:23:78:2f:13:8e:52:00:2b:78:f1:93: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9A:CF:77:5F:7D:9D:D6:69:C9:4A:5F:83:09:81:F3:C3:23:71:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2119d135-fbe2-37ef-9c8e-60af45ede476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.217.85.0/24 63.223.203.0-63.223.204.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:3a:6d:c2:8e:bd:4d:6c:a3:90:14:5c:1c:d3:c2:b4:56:30: a5:ff:1f:27:6d:63:b9:7a:0c:29:5a:3b:5a:2c:5d:df:17:c9: 74:b5:b6:5b:b3:82:5d:bd:2a:df:e1:20:d3:bc:b8:3e:6a:4c: 07:55:e5:ce:55:c4:f3:d6:04:55:a1:3b:d0:c3:8e:89:27:b2: bc:06:21:ef:27:84:bc:05:89:2a:a2:97:85:8a:f0:ef:8f:44: cb:0f:c1:cb:83:89:65:ac:f5:df:81:1c:f9:c7:d0:34:6c:33: 1a:4f:fc:d0:bc:7e:e3:9a:0d:c2:a7:44:95:74:07:a3:a4:c7: b7:bd:da:7d:19:6a:eb:a8:5f:e1:14:bf:9a:2a:9b:26:b7:fb: b3:3e:87:da:77:ae:17:b4:c7:60:6b:15:96:49:38:f3:8f:5d: f7:d4:24:b0:a9:c2:a0:92:71:fe:5c:42:a1:e8:d6:2f:b3:31: 9c:28:8a:47:33:a6:2e:a6:49:74:73:db:93:86:f7:2d:c9:b2: d3:d7:26:84:6d:15:9e:f7:9d:4b:a5:56:b0:b5:be:19:0c:11: 85:1b:6f:88:a4:52:84:ef:28:e4:44:15:95:af:a1:5e:7f:11: 53:12:3e:d5:84:dc:78:c6:5f:4a:c1:7d:ac:07:c8:16:f1:8c: 1f:ef:d4:36 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEuXDOcTT1GeDCcvW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NDA4NThiYjYtOTNhNS00MzlmLWI1NTYtZWI2ZTRjMTViYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbkH0HpkQ59taE/6GnofayPr20G2TeAfiIZZ CmpNflx46I4ZLN50ovdtSgQBefIjPLwaV0VmxxUek4bjERQTZppFxzv/MlZ8DBM8 S9P8d6TiVJFTfWDuQOTxB+799CogqmuIJEkssAyOdskK15bKIwiksCghjZB4VrEr 2zPnEnSGS4kKiBeDYpGNeS6xpwD4CQ8r+WQHHycsZkT7ZC1PkOk8zi7snssrgnna NhlfU1YDgN5hZtBRznjDrNEWtVZux/sx8f9m29VPGPKY/T2pAyMv5BRKnDRSR3nZ KRHnkAc3oDziOz5G8NU/ipuF8oJ2jqVuI3gvE45SACt48ZOEkwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFKuaz3dffZ3WaclKX4MJgfPDI3G7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMjExOWQxMzUtZmJlMi0z N2VmLTljOGUtNjBhZjQ1ZWRlNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAP9lVMAwD BAA/38sDBAA/38wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAyzptwo69TWyjkBRcHNPCtFYwpf8fJ21juXoM KVo7Wixd3xfJdLW2W7OCXb0q3+Eg07y4PmpMB1XlzlXE89YEVaE70MOOiSeyvAYh 7yeEvAWJKqKXhYrw749Eyw/By4OJZaz134Ec+cfQNGwzGk/80Lx+45oNwqdElXQH o6THt73afRlq66hf4RS/miqbJrf7sz6H2neuF7THYGsVlkk4849d99QksKnCoJJx /lxCoejWL7MxnCiKRzOmLqZJdHPbk4b3Lcmy09cmhG0VnvedS6VWsLW+GQwRhRtv iKRShO8o5EQVla+hXn8RUxI+1YTceMZfSsF9rAfIFvGMH+/UNg== -----END CERTIFICATE-----Generated at Tue Oct 28 00:01:41 2025 by rpki-client