$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/720a84df-1fff-35b7-84fd-023d40b8838b.roa File: 720a84df-1fff-35b7-84fd-023d40b8838b.roa (raw, json) Hash identifier: CHFzRxKuqwcWsLabNm/Fsv1TkCQPKHM0i+btOsr6Oeg= Subject key identifier: C2:D7:54:F7:AF:86:9B:C3:3B:36:3B:77:B8:27:9E:24:2B:15:51:BC Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B970CE1551E8CDBB18A2B9E80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/720a84df-1fff-35b7-84fd-023d40b8838b.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 46261 IP address blocks: 63.221.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e1:55:1e:8c:db:b1:8a:2b:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=c1695d52-a1bb-4500-8ebe-c07e4032f978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3b:9a:81:8d:0a:6f:1a:e0:96:e3:0e:a1:a7: 30:94:dc:cc:74:bd:60:15:5a:c0:80:dd:f7:c9:98: 24:49:36:ba:8d:4a:44:70:c9:c3:e9:21:2a:c7:9b: 4a:94:88:37:70:b9:15:64:61:d0:6a:86:32:28:e4: 1c:db:d3:f2:65:ed:68:89:e3:9d:fe:15:51:3b:ca: 28:bc:d9:ed:fb:fc:cf:8e:43:b1:dc:2a:16:b8:54: 56:0f:19:bf:aa:65:cd:cd:81:41:6c:b6:0b:af:e4: 31:3c:bb:34:a0:fa:b8:7b:bd:f9:e4:26:aa:87:16: 14:34:ef:7a:8c:b8:4f:01:fe:5d:e6:6a:3f:48:63: 2b:04:61:bd:79:78:66:0b:1a:36:34:72:6a:c6:23: 9a:37:86:d3:28:94:a7:fd:a8:c3:92:f4:8e:bd:92: 2c:45:1d:c0:4c:d0:29:04:04:64:33:e1:dd:98:6d: aa:26:46:b1:7c:c4:e7:26:df:0e:75:b1:e4:49:fe: fa:4a:62:47:c2:bf:81:68:61:2f:dd:0d:02:a0:f5: 30:7a:1d:c9:14:07:4d:aa:8f:22:98:ff:ef:7d:39: 06:be:5e:97:92:c7:de:5e:dc:cc:44:45:53:ce:92: 61:60:a0:fb:28:52:3e:e6:3f:1a:ba:f1:1a:99:be: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D7:54:F7:AF:86:9B:C3:3B:36:3B:77:B8:27:9E:24:2B:15:51:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/720a84df-1fff-35b7-84fd-023d40b8838b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.221.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d6:b5:b8:19:1d:86:0e:47:c1:33:bc:42:06:d2:2f:c4:85: 09:c6:d8:f7:d9:16:4e:28:8f:4b:6c:3e:86:56:c5:d1:fa:c2: e8:64:50:a9:47:ea:5e:e8:de:57:b7:cb:b6:23:a5:c8:30:40: fe:9d:d8:66:44:26:4f:e8:da:38:50:b3:09:1e:09:18:f3:87: 53:a6:92:f0:0a:ec:82:c1:f3:7c:29:a7:7e:eb:0f:50:17:92: e8:4f:a2:a8:45:61:cc:73:22:2a:30:7a:ae:cf:b0:5a:0e:f6: d3:54:65:d0:8c:59:82:fd:f7:4c:5b:a7:c8:ba:da:af:6e:58: e1:4f:73:d5:e9:21:fa:5a:2c:4a:33:70:e4:7e:a9:6c:15:07: 0b:b3:c5:a7:6f:a2:a3:16:5c:db:01:e3:45:ee:26:55:3f:9c: 67:51:87:25:2a:e4:ae:0a:dd:b1:6e:80:fe:83:1a:b8:f7:e6: b5:59:c2:bf:94:1d:21:08:d6:8c:ea:6a:a1:ec:cc:13:7f:ce: bc:76:69:f6:66:0b:5c:f7:9c:25:76:ec:83:40:46:57:b2:21: 0c:7b:b5:3c:be:48:20:cc:7d:e3:74:34:84:74:0d:f5:a6:b8: 27:d4:e6:d4:50:9b:8a:e6:b1:67:77:76:b0:92:08:6f:45:99: de:fc:c6:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOFVHozbsYornoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YzE2OTVkNTItYTFiYi00NTAwLThlYmUtYzA3ZTQwMzJmOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDuagY0KbxrgluMOoacwlNzMdL1gFVrAgN33 yZgkSTa6jUpEcMnD6SEqx5tKlIg3cLkVZGHQaoYyKOQc29PyZe1oieOd/hVRO8oo vNnt+/zPjkOx3CoWuFRWDxm/qmXNzYFBbLYLr+QxPLs0oPq4e7355CaqhxYUNO96 jLhPAf5d5mo/SGMrBGG9eXhmCxo2NHJqxiOaN4bTKJSn/ajDkvSOvZIsRR3ATNAp BARkM+HdmG2qJkaxfMTnJt8OdbHkSf76SmJHwr+BaGEv3Q0CoPUweh3JFAdNqo8i mP/vfTkGvl6XksfeXtzMREVTzpJhYKD7KFI+5j8auvEamb7+jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLXVPevhpvDOzY7d7gnniQrFVG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNzIwYTg0ZGYtMWZmZi0z NWI3LTg0ZmQtMDIzZDQwYjg4MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP91YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7WtbgZHYYOR8EzvEIG0i/EhQnG2PfZFk4oj0tsPoZWxdH6wuhkUKlH 6l7o3le3y7YjpcgwQP6d2GZEJk/o2jhQswkeCRjzh1OmkvAK7ILB83wpp37rD1AX kuhPoqhFYcxzIioweq7PsFoO9tNUZdCMWYL990xbp8i62q9uWOFPc9XpIfpaLEoz cOR+qWwVBwuzxadvoqMWXNsB40XuJlU/nGdRhyUq5K4K3bFugP6DGrj35rVZwr+U HSEI1ozqaqHszBN/zrx2afZmC1z3nCV27INARleyIQx7tTy+SCDMfeN0NIR0DfWm uCfU5tRQm4rmsWd3drCSCG9Fmd78xqA= -----END CERTIFICATE-----Generated at Wed Oct 22 12:40:17 2025 by rpki-client