$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/8fa428bf-ce7d-37c5-bd1e-10efd1de9bed.roa File: 8fa428bf-ce7d-37c5-bd1e-10efd1de9bed.roa (raw, json) Hash identifier: kddS/T66xp7H60qxv/nMApJ2qAHFMel6KUMcSMmGihk= Subject key identifier: 73:D0:49:C7:AF:52:52:DC:54:77:10:D4:35:21:C7:53:4E:A5:F7:4F Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Certificate serial: 010D0C9F4328584B110C0C0A4CF3BA5EA0144340 Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/8fa428bf-ce7d-37c5-bd1e-10efd1de9bed.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 22612 IP address blocks: 63.250.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:0c:0a:4c:f3:ba:5e:a0:14:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=8dd11f24-ff17-4460-801d-2c9461ea3a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d0:2c:a2:6b:fa:ac:40:de:ee:92:33:a5:c0: 75:d5:d9:fd:85:6e:8d:48:7a:8c:12:fa:d6:1e:ed: 79:1e:11:58:48:3a:83:45:69:4e:94:6f:64:56:5c: 81:cc:d3:dc:c1:3b:5f:cf:59:b1:8b:f4:d8:c9:da: 32:a0:bb:5c:c2:dc:4d:c0:60:13:b3:50:d5:24:5e: 6e:f9:7e:a2:96:0d:a8:22:f0:1d:a8:a3:7c:c2:0d: e4:2f:a8:07:e2:73:cf:2c:7f:ab:29:f5:a2:18:aa: d8:59:a4:e3:91:f2:30:4b:63:22:47:c7:5e:9f:71: f1:78:f7:f4:3c:52:ed:86:e2:3e:51:7d:46:63:5d: 45:ed:3a:ae:ef:1f:6c:bb:cd:f6:5c:e2:40:ee:f2: 03:cc:f5:1b:a6:29:50:52:97:08:5e:83:ae:5a:1f: 7e:7d:57:b2:35:68:cb:de:42:a8:7f:84:b4:30:1d: b2:d9:7b:70:ee:1d:b2:e0:99:a6:b3:c9:56:44:99: 36:48:1d:02:79:59:07:90:5a:0f:c9:72:b6:21:ce: b9:35:a4:73:52:d3:11:c6:f0:3c:57:6d:8d:b3:6f: ad:fa:ee:d8:64:52:46:a6:ea:05:03:5c:ce:e9:a3: cc:f7:27:31:d8:48:d9:39:0f:04:61:23:8a:df:de: e7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D0:49:C7:AF:52:52:DC:54:77:10:D4:35:21:C7:53:4E:A5:F7:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/8fa428bf-ce7d-37c5-bd1e-10efd1de9bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl X509v3 Authority Key Identifier: keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer sbgp-ipAddrBlock: critical IPv4: 63.250.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:12:fe:ff:0c:35:89:b9:e2:1d:73:00:7a:b3:23:08:40:73: 05:51:97:1b:f5:e5:e2:31:36:63:9a:62:09:78:1e:70:52:76: 71:5e:6e:37:02:47:2b:f3:61:8a:63:58:03:c3:f1:ba:77:95: a0:d9:4f:3a:c4:c8:0d:e9:0e:40:45:16:8f:38:b8:4b:de:67: c7:47:bd:7e:e9:e6:5f:19:47:77:54:60:00:d6:bd:e0:2d:b7: ab:65:0c:58:0a:fe:76:5c:18:8b:08:bb:cb:53:8e:48:f1:3e: 20:ca:8d:cd:3d:95:bf:62:19:18:1c:4d:47:8d:00:97:b4:b4: 90:e7:bc:23:b8:58:76:1f:73:36:f7:f2:fe:51:ca:7d:54:26: 17:bd:09:80:62:f6:2b:53:68:e7:8e:c7:b2:03:46:43:60:ce: e2:47:e9:3c:1a:fb:e8:ea:34:1b:60:44:1b:05:4a:05:fd:28: a3:ba:04:a5:1a:37:b8:52:b9:a4:2f:5a:28:df:7b:89:58:fe: 65:f4:7a:ee:11:72:0c:5b:e8:13:c9:2a:05:82:a7:85:e8:f0: dd:80:b7:48:3d:85:71:0b:60:67:c1:23:3e:53:de:76:23:da: 73:22:05:66:65:64:6f:1e:2a:a6:fe:7a:fc:3e:6d:71:36:8b: aa:4b:bd:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAwKTPO6XqAUQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw YjZlMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk OGRkMTFmMjQtZmYxNy00NDYwLTgwMWQtMmM5NDYxZWEzYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tAsomv6rEDe7pIzpcB11dn9hW6NSHqMEvrW Hu15HhFYSDqDRWlOlG9kVlyBzNPcwTtfz1mxi/TYydoyoLtcwtxNwGATs1DVJF5u +X6ilg2oIvAdqKN8wg3kL6gH4nPPLH+rKfWiGKrYWaTjkfIwS2MiR8den3HxePf0 PFLthuI+UX1GY11F7Tqu7x9su832XOJA7vIDzPUbpilQUpcIXoOuWh9+fVeyNWjL 3kKof4S0MB2y2Xtw7h2y4Jmms8lWRJk2SB0CeVkHkFoPyXK2Ic65NaRzUtMRxvA8 V22Ns2+t+u7YZFJGpuoFA1zO6aPM9ycx2EjZOQ8EYSOK397nuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPQScevUlLcVHcQ1DUhx1NOpfdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvOGZhNDI4YmYtY2U3ZC0z N2M1LWJkMWUtMTBlZmQxZGU5YmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1 ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2 MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP/ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgS/v8MNYm54h1zAHqzIwhAcwVRlxv15eIxNmOaYgl4HnBSdnFebjcC RyvzYYpjWAPD8bp3laDZTzrEyA3pDkBFFo84uEveZ8dHvX7p5l8ZR3dUYADWveAt t6tlDFgK/nZcGIsIu8tTjkjxPiDKjc09lb9iGRgcTUeNAJe0tJDnvCO4WHYfczb3 8v5Ryn1UJhe9CYBi9itTaOeOx7IDRkNgzuJH6Twa++jqNBtgRBsFSgX9KKO6BKUa N7hSuaQvWijfe4lY/mX0eu4Rcgxb6BPJKgWCp4Xo8N2At0g9hXELYGfBIz5T3nYj 2nMiBWZlZG8eKqb+evw+bXE2i6pLvb0= -----END CERTIFICATE-----Generated at Mon Sep 8 13:41:44 2025 by rpki-client