$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d0867835-3593-3f05-a0cf-1c9f8cfde811.roa File: d0867835-3593-3f05-a0cf-1c9f8cfde811.roa (raw, json) Hash identifier: C793fLHX9uSATUblfnyfgdzHoWPGZNprDy9Z287In2g= Subject key identifier: 58:1B:81:03:DA:9F:F9:9E:90:4F:F3:8D:BC:DF:1E:50:13:66:8C:D1 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584C7681710C2407FF698C3F7340 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d0867835-3593-3f05-a0cf-1c9f8cfde811.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 17057 IP address blocks: 63.217.106.0/24 maxlen: 24 63.217.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:71:0c:24:07:ff:69:8c:3f:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=e34a6cba-f26a-4f5a-ba94-5708919b8bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a8:53:c3:7e:26:a3:87:81:d5:a4:22:4c:b7: b9:d1:5b:89:92:5a:aa:da:c5:de:19:9d:73:12:05: 81:52:13:4e:c5:47:97:76:95:c1:40:58:35:26:1e: 4c:61:55:02:98:3f:64:c9:8d:b5:d2:9d:17:1f:d5: 02:76:7f:b0:9f:b5:a7:b7:e9:60:34:e6:d2:37:93: b6:d4:0e:3d:92:ae:62:48:d0:4c:27:d5:19:21:24: 1d:63:8d:d1:7e:90:fd:a8:84:91:10:49:17:f3:fc: 2f:70:77:9f:f6:99:60:c0:e1:1a:f1:fe:88:98:34: c1:3a:32:c6:dd:06:ac:77:4a:88:25:ce:f0:f1:c9: ed:c7:f9:e7:5e:33:a0:79:4c:b0:50:1d:01:58:a9: 2f:8c:89:7d:a0:d0:58:95:0d:d2:75:aa:bb:97:dd: aa:f4:3c:d6:88:e2:5d:16:5a:45:da:e7:c4:b8:95: 73:a4:c9:f2:29:8d:23:81:11:f9:a8:1e:11:09:11: 82:36:01:f9:40:7d:a7:32:3f:92:4f:46:77:e8:40: c7:6c:42:45:9a:d1:ed:e1:be:ba:fe:3e:ac:79:8a: df:a1:9d:0b:10:6a:39:fb:7e:13:4e:dd:6f:b3:49: 65:0b:17:77:64:43:fc:87:ea:f0:0c:73:b9:55:a0: 55:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1B:81:03:DA:9F:F9:9E:90:4F:F3:8D:BC:DF:1E:50:13:66:8C:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d0867835-3593-3f05-a0cf-1c9f8cfde811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.217.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:9a:96:a4:7e:df:b9:56:e3:73:34:b6:74:94:09:a5:02:ad: 7b:f7:40:a0:9d:f0:38:83:70:29:e4:e4:3f:84:6b:1c:8c:a5: 2c:54:e0:1f:96:9d:6d:46:04:fe:98:21:31:c1:ec:bb:cd:72: f7:73:c5:e8:fc:9a:8c:c7:c2:9f:5a:14:78:3b:34:48:6a:9c: 9f:1d:88:33:63:92:5d:6c:7c:29:de:62:0b:78:6f:6c:3e:b5: c9:6b:af:92:d2:56:7a:19:8d:1c:e4:ff:0d:d7:75:27:2f:e0: e2:9f:f4:52:87:d0:e7:b2:63:0d:75:d7:45:b1:dc:65:c7:e0: 88:a0:32:8c:bb:71:4c:f6:82:c6:9b:58:3d:bd:b4:b9:5c:7f: 0d:af:c0:24:7e:a6:d5:b5:d9:42:2b:82:cb:e6:7d:d3:2d:2c: b3:19:e4:22:28:8a:a8:57:2f:7d:cd:2a:a5:50:88:33:63:67: 1e:a5:3c:51:e1:e3:d3:c6:cf:f4:78:5f:b3:26:f8:d8:e6:95: 26:58:0e:76:c2:d2:05:19:d4:f4:33:dc:94:4c:bf:15:f8:74: 62:fe:23:59:4e:dc:dd:43:c6:59:52:2e:0e:98:cd:03:4c:78: bf:02:99:23:f8:4e:9f:08:97:92:e4:52:0f:53:86:ff:0d:3c: 67:ea:56:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx2gXEMJAf/aYw/c0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk ZTM0YTZjYmEtZjI2YS00ZjVhLWJhOTQtNTcwODkxOWI4YmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkahTw34mo4eB1aQiTLe50VuJklqq2sXeGZ1z EgWBUhNOxUeXdpXBQFg1Jh5MYVUCmD9kyY210p0XH9UCdn+wn7Wnt+lgNObSN5O2 1A49kq5iSNBMJ9UZISQdY43RfpD9qISREEkX8/wvcHef9plgwOEa8f6ImDTBOjLG 3Qasd0qIJc7w8cntx/nnXjOgeUywUB0BWKkvjIl9oNBYlQ3Sdaq7l92q9DzWiOJd FlpF2ufEuJVzpMnyKY0jgRH5qB4RCRGCNgH5QH2nMj+ST0Z36EDHbEJFmtHt4b66 /j6seYrfoZ0LEGo5+34TTt1vs0llCxd3ZEP8h+rwDHO5VaBV1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgbgQPan/mekE/zjbzfHlATZozRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZDA4Njc4MzUtMzU5My0z ZjA1LWEwY2YtMWM5ZjhjZmRlODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP9lqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWalqR+37lW43M0tnSUCaUCrXv3QKCd8DiDcCnk5D+EaxyMpSxU4B+W nW1GBP6YITHB7LvNcvdzxej8mozHwp9aFHg7NEhqnJ8diDNjkl1sfCneYgt4b2w+ tclrr5LSVnoZjRzk/w3XdScv4OKf9FKH0OeyYw1110Wx3GXH4IigMoy7cUz2gsab WD29tLlcfw2vwCR+ptW12UIrgsvmfdMtLLMZ5CIoiqhXL33NKqVQiDNjZx6lPFHh 49PGz/R4X7Mm+NjmlSZYDnbC0gUZ1PQz3JRMvxX4dGL+I1lO3N1DxllSLg6YzQNM eL8CmSP4Tp8Il5LkUg9Thv8NPGfqVjA= -----END CERTIFICATE-----Generated at Thu Feb 26 06:35:26 2026 by rpki-client