$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2119d135-fbe2-37ef-9c8e-60af45ede476.roa File: 2119d135-fbe2-37ef-9c8e-60af45ede476.roa (raw, json) Hash identifier: 2PiRZran9YYOaX+3vOwqiT5f1MIpTAyRMI+al+m42u4= Subject key identifier: F7:1F:B6:4B:A6:76:2B:0E:2F:D2:12:20:48:76:AB:33:88:71:F5:CE Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584AB650E81FD896F6B5DD391B80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2119d135-fbe2-37ef-9c8e-60af45ede476.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 7262 IP address blocks: 63.217.85.0/24 maxlen: 24 63.223.203.0/24 maxlen: 24 63.223.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:e8:1f:d8:96:f6:b5:dd:39:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=883c7111-e575-4d7c-886e-0307fdda5853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:70:8e:d3:38:f7:e2:71:09:33:e9:4f:c7:73: 6e:be:09:bf:ff:91:ac:2d:3d:15:5a:1c:9e:c9:6c: 53:5e:c1:82:08:91:65:75:aa:88:e4:06:a2:f7:66: 9d:14:07:98:70:6e:35:4a:d2:52:51:3a:88:61:73: ff:26:66:5a:fa:fe:fc:5e:8b:d2:2f:44:e4:48:58: d1:86:fa:65:3d:78:98:3a:0d:29:ac:3e:a5:0a:56: 53:1f:d9:d0:68:8f:16:52:8a:15:fc:5a:b5:25:6e: 04:4b:43:0a:61:bb:c1:92:12:6f:b3:42:a5:dd:b7: 1b:2d:a7:2c:4a:ff:00:6b:4f:c7:ba:1b:07:9d:d0: 86:15:a5:6a:4d:14:d6:95:34:95:0f:da:7b:7b:af: 26:4e:9a:ff:7f:b7:64:35:85:ce:49:00:8b:28:ac: 7e:62:6a:35:bf:31:fb:80:62:50:38:b5:7f:bd:fd: 2a:27:30:bb:21:45:3f:84:6d:e0:e8:88:78:24:25: 5d:e8:e6:c4:85:99:12:e8:c0:c1:d5:6a:49:4c:4b: 5f:20:60:ce:57:49:93:5e:22:f7:7a:ee:45:4d:01: af:61:3a:e8:0a:38:5b:19:8e:26:28:de:8f:6e:c9: d3:81:f3:af:0e:3a:5a:61:fe:43:af:dd:fa:c9:58: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1F:B6:4B:A6:76:2B:0E:2F:D2:12:20:48:76:AB:33:88:71:F5:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2119d135-fbe2-37ef-9c8e-60af45ede476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.217.85.0/24 63.223.203.0-63.223.204.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:d4:77:97:28:4b:a4:55:e5:57:51:12:be:1e:de:4c:4d:88: d2:01:67:b7:90:08:9f:79:c1:8a:3d:76:b9:20:c6:d0:cb:5e: 0f:5a:5d:d3:4c:13:96:70:d9:97:f7:ad:12:79:11:99:84:55: 05:50:ac:3d:c2:37:64:8f:4b:6e:d2:68:4f:64:b0:f8:06:0f: 83:af:5f:ca:85:e0:36:52:df:f9:45:60:77:a0:cb:69:ae:21: 6d:7b:54:9a:24:79:11:d2:ee:b7:4f:1c:51:9e:9f:55:1f:72: 75:05:97:5d:46:7a:3a:48:99:d3:b8:bb:6a:1c:38:f4:8f:6a: 03:87:15:36:4d:37:70:dc:4b:2b:ad:a8:3f:c0:96:71:64:93: f2:ab:80:57:6f:79:2b:88:f3:a9:97:42:59:a2:85:11:37:85: fb:20:f1:49:a6:50:8f:ad:8a:c3:54:64:35:0c:a6:41:f3:49: 57:9c:3f:a4:fa:2e:07:07:51:d0:35:87:4c:d8:d8:63:96:ec: da:fb:a8:16:d8:bd:04:ce:37:ba:9c:88:c5:dd:0d:fc:e7:3b: 53:d0:33:78:3f:57:26:c4:88:c1:d0:82:fa:3f:db:3d:a2:5f: ba:a9:a5:d9:8e:bc:f4:64:07:cc:48:9b:19:c6:15:2e:cb:e9: 97:a5:be:bc -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEq2UOgf2Jb2td05G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk ODgzYzcxMTEtZTU3NS00ZDdjLTg4NmUtMDMwN2ZkZGE1ODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nCO0zj34nEJM+lPx3Nuvgm//5GsLT0VWhye yWxTXsGCCJFldaqI5Aai92adFAeYcG41StJSUTqIYXP/JmZa+v78XovSL0TkSFjR hvplPXiYOg0prD6lClZTH9nQaI8WUooV/Fq1JW4ES0MKYbvBkhJvs0Kl3bcbLacs Sv8Aa0/HuhsHndCGFaVqTRTWlTSVD9p7e68mTpr/f7dkNYXOSQCLKKx+Ymo1vzH7 gGJQOLV/vf0qJzC7IUU/hG3g6Ih4JCVd6ObEhZkS6MDB1WpJTEtfIGDOV0mTXiL3 eu5FTQGvYTroCjhbGY4mKN6PbsnTgfOvDjpaYf5Dr936yVjHMwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFPcftkumdisOL9ISIEh2qzOIcfXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMjExOWQxMzUtZmJlMi0z N2VmLTljOGUtNjBhZjQ1ZWRlNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAP9lVMAwD BAA/38sDBAA/38wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAxtR3lyhLpFXlV1ESvh7eTE2I0gFnt5AIn3nB ij12uSDG0MteD1pd00wTlnDZl/etEnkRmYRVBVCsPcI3ZI9LbtJoT2Sw+AYPg69f yoXgNlLf+UVgd6DLaa4hbXtUmiR5EdLut08cUZ6fVR9ydQWXXUZ6OkiZ07i7ahw4 9I9qA4cVNk03cNxLK62oP8CWcWST8quAV295K4jzqZdCWaKFETeF+yDxSaZQj62K w1RkNQymQfNJV5w/pPouBwdR0DWHTNjYY5bs2vuoFti9BM43upyIxd0N/Oc7U9Az eD9XJsSIwdCC+j/bPaJfuqml2Y689GQHzEibGcYVLsvpl6W+vA== -----END CERTIFICATE-----Generated at Mon Aug 4 19:02:34 2025 by rpki-client