$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/720a84df-1fff-35b7-84fd-023d40b8838b.roa File: 720a84df-1fff-35b7-84fd-023d40b8838b.roa (raw, json) Hash identifier: XV2u/Dx57Ct+MPw8Hq1EFrxjTenu11cJ+HsDQh9E+gQ= Subject key identifier: 1E:B5:EC:9C:6A:83:A0:61:51:8B:12:68:1D:1B:3A:70:BD:34:C8:63 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849D594E03D4DB61229BFBE2000 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/720a84df-1fff-35b7-84fd-023d40b8838b.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 46261 IP address blocks: 63.221.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e0:3d:4d:b6:12:29:bf:be:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=079af199-12c7-42c7-8de2-ad2a6ccfec92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8d:7d:64:76:14:41:b1:bb:ce:17:c2:9b:5a: e6:03:5b:57:37:5e:2a:2b:c1:2a:ea:4b:26:bb:fe: f9:8a:11:16:bf:7b:00:7e:55:78:3a:fa:9d:9d:47: 15:60:8a:60:6d:8e:0e:5e:ef:52:31:a4:2c:3b:d5: 84:91:8b:ed:99:29:17:c1:50:39:6f:58:14:c8:6c: 78:19:d9:39:82:41:04:c0:83:b8:de:f3:9e:31:94: 61:fd:31:ae:23:5c:a2:92:47:73:c2:77:ad:f5:5b: 7f:57:46:ea:b9:d2:a0:9a:28:22:b1:03:91:fe:20: 6e:3d:ac:3e:4c:a9:1c:e4:f4:cf:a6:68:49:8a:38: ea:09:a2:3e:e0:09:31:50:e1:60:ee:cd:6a:3c:ea: cb:92:0b:63:21:68:bf:29:fa:0b:83:bc:17:c9:08: b4:da:d0:9d:11:15:3e:94:27:97:8d:df:8f:34:b2: 98:5f:30:d4:21:cc:66:a5:70:84:10:f4:e4:f4:48: a2:41:59:af:ef:61:3e:b1:db:cd:20:24:f1:be:0c: 26:1f:f1:4e:ba:77:e1:fe:1d:ad:6e:93:cc:c3:74: 74:9f:6d:77:00:e4:76:d9:88:9a:99:aa:81:88:45: cd:20:47:0f:37:b8:97:d4:2a:7e:11:2a:35:9e:1f: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B5:EC:9C:6A:83:A0:61:51:8B:12:68:1D:1B:3A:70:BD:34:C8:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/720a84df-1fff-35b7-84fd-023d40b8838b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.221.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:1d:6b:d9:60:3a:35:3e:a9:9b:e1:5e:71:af:07:21:da:e2: 7d:af:57:6a:f7:de:74:dc:94:3a:8e:bf:ee:43:28:d3:1e:44: db:61:1d:13:c0:a0:3a:dd:cc:af:6a:d3:8c:06:35:1c:64:51: 73:84:44:ec:e2:64:92:4a:35:3c:9b:5a:38:69:bb:17:32:ff: e6:30:8f:9f:d2:2a:f5:cc:bf:13:44:21:06:e2:0a:fc:69:1d: 4d:8b:9f:27:72:fa:c3:73:38:14:46:df:e5:c3:4c:b8:9e:3b: 2e:19:8e:16:5c:72:dd:03:fc:dd:7e:e9:98:da:80:5d:fb:b3: 3a:1a:dd:bd:57:8e:d5:08:dc:51:c8:67:a8:ea:19:71:88:a7: 4d:3f:be:cd:21:9d:60:77:c6:a1:a6:c5:65:78:99:a6:6e:b3: 19:9d:22:37:4b:99:80:c8:79:4c:49:bc:c8:11:30:39:c0:a9: ba:d3:7a:3d:5a:05:b3:1e:8f:85:0b:69:cd:5b:2e:78:03:0f: 37:25:18:71:cf:76:ad:94:28:f3:98:14:1c:0e:c5:8c:69:1e: df:be:8b:53:29:35:9f:3b:ab:1b:92:f6:30:ed:76:2f:34:35: 4f:f3:04:65:93:e2:98:16:02:b7:d3:ef:57:25:25:f1:65:77: 6e:0f:29:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOA9TbYSKb++IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MDc5YWYxOTktMTJjNy00MmM3LThkZTItYWQyYTZjY2ZlYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY19ZHYUQbG7zhfCm1rmA1tXN14qK8Eq6ksm u/75ihEWv3sAflV4OvqdnUcVYIpgbY4OXu9SMaQsO9WEkYvtmSkXwVA5b1gUyGx4 Gdk5gkEEwIO43vOeMZRh/TGuI1yikkdzwnet9Vt/V0bqudKgmigisQOR/iBuPaw+ TKkc5PTPpmhJijjqCaI+4AkxUOFg7s1qPOrLkgtjIWi/KfoLg7wXyQi02tCdERU+ lCeXjd+PNLKYXzDUIcxmpXCEEPTk9EiiQVmv72E+sdvNICTxvgwmH/FOunfh/h2t bpPMw3R0n213AOR22YiamaqBiEXNIEcPN7iX1Cp+ESo1nh+heQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB617Jxqg6BhUYsSaB0bOnC9NMhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNzIwYTg0ZGYtMWZmZi0z NWI3LTg0ZmQtMDIzZDQwYjg4MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP91YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoda9lgOjU+qZvhXnGvByHa4n2vV2r33nTclDqOv+5DKNMeRNthHRPA oDrdzK9q04wGNRxkUXOEROziZJJKNTybWjhpuxcy/+Ywj5/SKvXMvxNEIQbiCvxp HU2Lnydy+sNzOBRG3+XDTLieOy4ZjhZcct0D/N1+6ZjagF37szoa3b1XjtUI3FHI Z6jqGXGIp00/vs0hnWB3xqGmxWV4maZusxmdIjdLmYDIeUxJvMgRMDnAqbrTej1a BbMej4ULac1bLngDDzclGHHPdq2UKPOYFBwOxYxpHt++i1MpNZ87qxuS9jDtdi80 NU/zBGWT4pgWArfT71clJfFld24PKRQ= -----END CERTIFICATE-----Generated at Sat Jun 7 13:51:01 2025 by rpki-client