$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2be22edb-0c49-36cd-9b15-b5e4861a68e4.roa File: 2be22edb-0c49-36cd-9b15-b5e4861a68e4.roa (raw, json) Hash identifier: j3F+VSfMxmIflgwzhXstzeAQBwLO9djQnSOBnsK4nJg= Subject key identifier: C2:07:B0:0B:FC:BD:8C:25:B6:60:6A:96:FC:E7:59:C7:AC:70:46:3F Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B047C045E1060F2CE6530EF00 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2be22edb-0c49-36cd-9b15-b5e4861a68e4.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 198148 IP address blocks: 63.222.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:04:5e:10:60:f2:ce:65:30:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=af3c35cb-bb60-4096-88bc-15a3ba8c6d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4e:90:f8:5a:60:36:2e:e9:b0:08:6e:d1:1b: 77:18:cd:46:6f:6e:fb:e2:cc:8a:0c:d1:35:67:55: e3:86:86:e5:ee:1b:db:ab:18:84:45:d0:af:8e:2d: f0:9d:6c:25:6b:40:28:77:f2:35:f0:1b:9b:f4:5c: 8e:30:c1:ff:60:8e:96:1b:6c:66:56:f4:31:d6:38: d7:64:fb:83:b4:00:77:6e:eb:8d:e9:37:70:8f:9a: 53:f3:3f:a6:dc:3a:b5:dd:ec:eb:7c:8c:32:9d:da: 04:dd:e8:d2:79:26:db:d1:c0:a3:a9:97:f0:71:76: e2:fb:c6:bd:60:60:81:ce:d1:c8:a2:33:63:55:a4: 85:31:f7:ef:59:91:07:f6:e5:68:51:2c:e9:42:d8: ec:ac:d8:36:f2:14:21:82:39:09:5b:f2:bb:45:ab: db:8d:d2:73:4a:17:97:9c:47:dd:d6:cf:b8:c9:4b: f5:9d:b6:41:a9:53:fa:4a:23:ef:5a:9d:d3:ec:21: 76:93:57:0a:38:67:23:8c:02:29:93:be:6b:3d:26: f5:a4:f0:df:25:65:63:c0:a1:0d:2e:da:c1:94:62: 75:58:f5:cf:74:ea:70:a5:30:26:52:39:89:68:25: 0d:f8:94:8e:44:54:1d:17:8e:e5:55:53:80:1d:cb: b8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:07:B0:0B:FC:BD:8C:25:B6:60:6A:96:FC:E7:59:C7:AC:70:46:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2be22edb-0c49-36cd-9b15-b5e4861a68e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.222.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f9:22:31:b3:cb:d1:b6:01:b3:92:90:1d:2c:c3:4c:dc:f6: 2d:85:d8:74:e0:7e:92:c7:fe:ec:05:6a:3e:b7:d4:4c:fa:3f: 72:f3:60:46:5c:87:78:04:49:ac:e5:63:1f:d8:e5:6a:b7:06: 4e:7b:0c:21:a5:c6:09:aa:b8:80:49:c8:d4:34:1e:53:ef:7f: 87:68:9e:c5:d4:c3:3e:99:f3:ea:b0:56:a7:46:44:f6:5a:00: 80:a2:03:73:d5:3f:50:5c:a6:c0:f3:5b:f1:79:10:8b:5e:b1: e8:dc:0d:07:10:0e:34:41:4d:9a:ca:79:ac:10:1d:76:77:b3: ee:42:10:6c:c3:95:9f:11:b3:b6:b4:ff:3e:fd:8d:3e:3f:8b: 57:ad:fc:21:fb:5e:e2:1d:37:4d:b0:c5:a2:5d:4f:5b:27:07: 95:95:40:64:c4:d9:6b:db:d4:42:9f:e5:9e:b0:db:cb:a1:76: 78:8f:fe:fc:a4:d0:19:b6:dd:4e:e9:59:8d:16:35:a2:d8:05: 27:72:4f:ca:19:69:47:34:42:c3:41:f8:3d:20:1d:eb:d8:0e: 2b:4c:44:1b:0f:b8:c1:30:e1:1f:22:42:5a:3e:d8:58:a1:62: 9f:d0:4d:50:77:1f:07:41:6a:99:21:36:41:b2:e9:2b:3b:a1: 42:ac:54:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAReEGDyzmUw7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YWYzYzM1Y2ItYmI2MC00MDk2LTg4YmMtMTVhM2JhOGM2ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk6Q+FpgNi7psAhu0Rt3GM1Gb2774syKDNE1 Z1Xjhobl7hvbqxiERdCvji3wnWwla0Aod/I18Bub9FyOMMH/YI6WG2xmVvQx1jjX ZPuDtAB3buuN6Tdwj5pT8z+m3Dq13ezrfIwyndoE3ejSeSbb0cCjqZfwcXbi+8a9 YGCBztHIojNjVaSFMffvWZEH9uVoUSzpQtjsrNg28hQhgjkJW/K7RavbjdJzSheX nEfd1s+4yUv1nbZBqVP6SiPvWp3T7CF2k1cKOGcjjAIpk75rPSb1pPDfJWVjwKEN LtrBlGJ1WPXPdOpwpTAmUjmJaCUN+JSORFQdF47lVVOAHcu4CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIHsAv8vYwltmBqlvznWcescEY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMmJlMjJlZGItMGM0OS0z NmNkLTliMTUtYjVlNDg2MWE2OGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDP95oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj5IjGzy9G2AbOSkB0sw0zc9i2F2HTgfpLH/uwFaj631Ez6P3LzYEZc h3gESazlYx/Y5Wq3Bk57DCGlxgmquIBJyNQ0HlPvf4donsXUwz6Z8+qwVqdGRPZa AICiA3PVP1BcpsDzW/F5EItesejcDQcQDjRBTZrKeawQHXZ3s+5CEGzDlZ8Rs7a0 /z79jT4/i1et/CH7XuIdN02wxaJdT1snB5WVQGTE2Wvb1EKf5Z6w28uhdniP/vyk 0Bm23U7pWY0WNaLYBSdyT8oZaUc0QsNB+D0gHevYDitMRBsPuMEw4R8iQlo+2Fih Yp/QTVB3HwdBapkhNkGy6Ss7oUKsVN0= -----END CERTIFICATE-----Generated at Tue Sep 9 17:32:46 2025 by rpki-client