$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7c247d03-e282-3b19-ba3b-595b56914954.roa File: 7c247d03-e282-3b19-ba3b-595b56914954.roa (raw, json) Hash identifier: BWuBjX10tETPfUkP/l6Xqo+AokUv/2sWbJb39FbHg7s= Subject key identifier: 54:1C:C5:30:08:C7:EC:B1:7C:03:78:66:13:2A:9D:66:27:00:7A:98 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B970CE68F8996282CA4809400 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7c247d03-e282-3b19-ba3b-595b56914954.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 45753 IP address blocks: 63.220.4.0/24 maxlen: 24 63.220.7.0/24 maxlen: 24 63.221.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e6:8f:89:96:28:2c:a4:80:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=1bcda660-1773-4988-968e-c64210af3329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a0:bb:82:c8:94:7f:f3:75:23:95:4f:ef:be: 18:c9:03:7a:11:c1:5a:34:84:97:33:4c:8e:e8:b1: 8d:44:e8:86:06:97:72:69:e1:9a:7a:23:67:f1:bc: b6:d7:16:fc:b3:0f:0d:4d:41:0d:18:a9:18:53:e9: 47:f9:60:09:04:ff:9c:be:a3:66:b2:79:b3:e9:81: d9:26:fd:64:d7:16:a2:22:08:ae:04:e0:8b:17:fe: 00:f7:3c:3c:0e:18:41:74:23:93:71:59:c6:bf:42: 9b:8a:56:05:85:11:a7:9b:15:55:93:13:06:38:5e: ac:5d:1e:2f:cd:85:da:77:8d:76:c7:7d:3f:5e:4b: 39:25:90:0f:23:1e:dd:0a:e7:ec:74:30:ac:97:cd: ac:5e:1c:26:10:6f:0b:56:08:2c:d2:15:a2:b8:5c: 97:ba:3b:d9:51:7d:1e:a1:a3:42:12:86:6b:cb:83: 2d:92:da:6e:32:d9:14:bf:89:fb:98:f6:3d:b8:86: 95:05:5d:32:74:a5:fd:a8:9f:13:a6:c0:4e:ce:6a: e0:64:d1:72:30:b6:94:2a:6f:a6:b5:0c:a5:bb:37: 71:39:d9:f1:c1:49:a0:40:8d:41:75:c5:2e:5a:f8: 5e:a6:2d:e3:3f:21:53:1e:02:67:69:52:dd:2a:cd: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1C:C5:30:08:C7:EC:B1:7C:03:78:66:13:2A:9D:66:27:00:7A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7c247d03-e282-3b19-ba3b-595b56914954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.220.4.0/24 63.220.7.0/24 63.221.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4c:48:9b:fd:ee:ea:b4:7b:0c:39:ca:b2:5e:5a:a3:61:54: 6c:3e:40:85:01:bc:b0:71:e6:ae:fa:d5:15:3a:18:db:fe:1c: ff:3b:2e:22:7d:98:45:42:61:3c:10:d1:df:66:cf:e0:75:43: 9f:9e:3a:44:cf:6e:52:2e:2c:b5:ef:71:70:8e:4d:69:3c:e4: df:95:aa:a0:ef:6f:88:2d:22:d7:38:59:ea:8e:df:95:29:b7: b3:cc:e5:1c:58:7f:6e:11:b3:a0:5e:41:fd:54:f0:f7:53:80: 85:6b:a7:06:9c:76:53:90:b1:f4:f4:02:ed:36:68:15:4f:1a: ab:0c:21:45:54:f2:bd:79:f8:6d:ac:09:0a:73:e3:24:b8:aa: d1:85:aa:ef:d8:54:2f:b7:a2:75:d8:95:63:ab:89:ae:99:62: df:ca:e0:99:7d:e2:b4:41:1d:5d:12:64:6e:55:e1:e2:1e:c1: b8:d6:5f:da:cb:4a:1f:ff:17:7c:d2:12:c1:12:53:50:ce:e4: 1d:1b:05:6e:34:fc:a7:36:f9:7a:8d:be:b5:db:d5:19:8b:96: dd:7a:d7:3c:e4:90:80:fd:73:6f:83:3a:5a:84:6d:24:cf:f8: c0:e8:65:54:90:d1:bf:c9:d0:cc:34:d3:e6:6f:04:0f:c3:77: f5:e9:61:ef -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEuXDOaPiZYoLKSAlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MWJjZGE2NjAtMTc3My00OTg4LTk2OGUtYzY0MjEwYWYzMzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKC7gsiUf/N1I5VP774YyQN6EcFaNISXM0yO 6LGNROiGBpdyaeGaeiNn8by21xb8sw8NTUENGKkYU+lH+WAJBP+cvqNmsnmz6YHZ Jv1k1xaiIgiuBOCLF/4A9zw8DhhBdCOTcVnGv0KbilYFhRGnmxVVkxMGOF6sXR4v zYXad412x30/Xks5JZAPIx7dCufsdDCsl82sXhwmEG8LVggs0hWiuFyXujvZUX0e oaNCEoZry4MtktpuMtkUv4n7mPY9uIaVBV0ydKX9qJ8TpsBOzmrgZNFyMLaUKm+m tQyluzdxOdnxwUmgQI1BdcUuWvhepi3jPyFTHgJnaVLdKs1tFwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFQcxTAIx+yxfAN4ZhMqnWYnAHqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvN2MyNDdkMDMtZTI4Mi0z YjE5LWJhM2ItNTk1YjU2OTE0OTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAP9wEAwQA P9wHAwQAP92KMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEFMSJv97uq0eww5yrJeWqNhVGw+QIUBvLBx5q76 1RU6GNv+HP87LiJ9mEVCYTwQ0d9mz+B1Q5+eOkTPblIuLLXvcXCOTWk85N+VqqDv b4gtItc4WeqO35Upt7PM5RxYf24Rs6BeQf1U8PdTgIVrpwacdlOQsfT0Au02aBVP GqsMIUVU8r15+G2sCQpz4yS4qtGFqu/YVC+3onXYlWOria6ZYt/K4Jl94rRBHV0S ZG5V4eIewbjWX9rLSh//F3zSEsESU1DO5B0bBW40/Kc2+XqNvrXb1RmLlt161zzk kID9c2+DOlqEbSTP+MDoZVSQ0b/J0Mw00+ZvBA/Dd/XpYe8= -----END CERTIFICATE-----Generated at Sat Oct 25 13:35:35 2025 by rpki-client