$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1fcbfb56-e00e-3d33-b19a-02240494efa6.roa File: 1fcbfb56-e00e-3d33-b19a-02240494efa6.roa (raw, json) Hash identifier: QS8O94X/yaFTwGgKHOM2c7YZZ/oQNdD2O5UUFZogzoM= Subject key identifier: 18:1B:2C:90:2A:7F:44:F8:49:7D:72:E1:84:2F:05:03:77:09:9F:78 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584A9900C186700C435AB453D360 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1fcbfb56-e00e-3d33-b19a-02240494efa6.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 138994 IP address blocks: 63.222.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c1:86:70:0c:43:5a:b4:53:d3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=ec52d3d0-e7c0-48e4-a59b-72ea6a22d920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:44:96:a1:82:cd:6b:1d:84:9d:2a:95:4c:93: 2e:87:5e:67:08:37:5a:9c:bd:77:0e:da:86:db:9b: f8:7d:6d:02:83:33:a2:4b:38:0a:f2:c8:e5:4a:2b: c5:3a:30:05:25:7c:d4:1b:e2:7e:28:e5:24:9e:23: 00:73:2c:77:c4:ab:b1:35:21:b3:35:3f:04:41:14: d5:04:e6:91:83:4b:a3:48:f0:53:69:46:f3:a8:39: b6:d2:84:89:43:ad:c9:07:f5:71:ac:e4:66:d9:d5: 7c:28:a0:8f:90:56:1c:f9:df:fa:a3:cf:1c:a7:29: f5:2e:90:9e:72:7c:39:e0:ac:d8:4c:3e:52:c7:26: 9f:f2:a5:a1:3e:cb:19:05:e3:70:8b:90:ab:d3:b6: 51:27:f8:54:8f:cc:b0:41:74:0d:19:40:07:2c:02: 99:4c:cd:67:db:f1:4f:36:c6:13:82:b6:f2:d4:cf: cc:da:53:17:ea:6a:a0:fb:be:c0:0e:23:9b:af:af: 17:6e:ad:a1:62:1d:a0:fa:1f:76:62:a3:c6:1c:bd: f5:1b:5d:9b:21:dd:32:e0:4c:ac:63:88:c6:6d:58: cf:81:75:22:f1:b7:d6:95:de:3e:65:98:08:66:d4: e7:49:ba:7c:64:bf:3d:aa:f4:e3:bf:df:25:f2:5d: d8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1B:2C:90:2A:7F:44:F8:49:7D:72:E1:84:2F:05:03:77:09:9F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1fcbfb56-e00e-3d33-b19a-02240494efa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.222.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:02:ba:e0:c4:44:04:70:25:ce:a2:54:09:61:53:1a:aa:c7: e3:01:ee:82:67:53:3d:55:a6:87:42:a6:5b:ef:ee:c1:62:2a: a2:c1:07:cb:8a:21:c4:97:45:fe:9b:48:44:83:84:be:73:92: b3:a9:e6:ff:3c:a9:52:e1:a7:68:5b:7a:db:6d:04:b8:c4:f5: 67:f3:8a:6a:19:53:4a:14:57:62:10:4b:68:64:70:72:db:5f: 1e:da:58:a8:91:e3:26:3b:1d:20:74:dd:c6:37:7e:01:20:15: 28:09:f0:fa:42:da:64:54:c9:41:4e:e5:b1:92:70:f9:f4:df: 77:13:00:15:51:38:1a:c9:1d:0d:0f:cb:fa:22:44:04:2a:73: 72:22:b5:f4:36:d7:29:df:85:5a:7d:ed:36:e0:e6:70:0b:2c: 51:1d:58:69:dc:0e:80:0d:4a:9c:74:b2:51:a2:75:eb:9c:bf: 89:b0:d1:41:77:6e:cb:ad:4f:d2:f8:35:9b:63:e8:cd:76:2f: 14:79:83:e2:35:52:f6:1d:e5:f6:4e:96:04:7a:b1:4d:01:3f: 77:d5:95:f3:bd:ca:70:88:70:88:3d:16:a0:09:87:77:32:d0: 06:af:6f:f5:e5:39:f1:c0:88:b6:33:d3:d9:2d:c4:39:93:1c: a4:aa:e1:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMGGcAxDWrRT02AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZWM1MmQzZDAtZTdjMC00OGU0LWE1OWItNzJlYTZhMjJkOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0SWoYLNax2EnSqVTJMuh15nCDdanL13DtqG 25v4fW0CgzOiSzgK8sjlSivFOjAFJXzUG+J+KOUkniMAcyx3xKuxNSGzNT8EQRTV BOaRg0ujSPBTaUbzqDm20oSJQ63JB/VxrORm2dV8KKCPkFYc+d/6o88cpyn1LpCe cnw54KzYTD5Sxyaf8qWhPssZBeNwi5Cr07ZRJ/hUj8ywQXQNGUAHLAKZTM1n2/FP NsYTgrby1M/M2lMX6mqg+77ADiObr68Xbq2hYh2g+h92YqPGHL31G12bId0y4Eys Y4jGbVjPgXUi8bfWld4+ZZgIZtTnSbp8ZL89qvTjv98l8l3YywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgbLJAqf0T4SX1y4YQvBQN3CZ94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMWZjYmZiNTYtZTAwZS0z ZDMzLWIxOWEtMDIyNDA0OTRlZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP95+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8CuuDERARwJc6iVAlhUxqqx+MB7oJnUz1VpodCplvv7sFiKqLBB8uK IcSXRf6bSESDhL5zkrOp5v88qVLhp2hbetttBLjE9WfzimoZU0oUV2IQS2hkcHLb Xx7aWKiR4yY7HSB03cY3fgEgFSgJ8PpC2mRUyUFO5bGScPn033cTABVROBrJHQ0P y/oiRAQqc3IitfQ21ynfhVp97Tbg5nALLFEdWGncDoANSpx0slGideucv4mw0UF3 bsutT9L4NZtj6M12LxR5g+I1UvYd5fZOlgR6sU0BP3fVlfO9ynCIcIg9FqAJh3cy 0Aavb/XlOfHAiLYz09ktxDmTHKSq4aY= -----END CERTIFICATE-----Generated at Tue Aug 5 21:36:31 2025 by rpki-client