$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3b3dd675-b170-3eee-bf6a-12af67835d86.roa File: 3b3dd675-b170-3eee-bf6a-12af67835d86.roa (raw, json) Hash identifier: Uo0Ktr+6treqlJen2bEHhdLM5NEhiW6jOs9u8rWo8a4= Subject key identifier: AA:B2:8C:A4:95:60:D0:2D:CD:94:4C:0D:04:98:08:42:9E:7E:9E:88 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B67974066A7C3C31E875E5C80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3b3dd675-b170-3eee-bf6a-12af67835d86.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 134190 IP address blocks: 63.216.170.0/24 maxlen: 32 63.216.192.160/27 maxlen: 32 63.216.195.192/27 maxlen: 32 63.216.196.128/27 maxlen: 32 63.216.198.96/27 maxlen: 32 63.217.71.96/27 maxlen: 32 63.217.89.64/27 maxlen: 32 63.220.1.192/26 maxlen: 32 63.221.136.32/27 maxlen: 32 63.221.139.32/27 maxlen: 32 63.221.140.192/27 maxlen: 32 63.221.141.32/27 maxlen: 32 63.221.159.0/27 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:40:66:a7:c3:c3:1e:87:5e:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=cb9a4358-6a44-4a89-b549-63194970bbb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ee:c3:b8:be:33:03:1d:9b:b4:d5:ca:38:b8: 03:17:b1:b3:7c:bf:1f:d7:42:a4:93:44:f2:9f:3a: 22:da:9d:d4:6a:ee:26:fe:9c:8a:34:7f:08:16:a6: 52:63:6d:84:d8:39:26:b8:72:18:4a:01:99:93:00: d4:52:2c:67:a5:d6:0d:e3:ff:d9:66:17:b2:9a:28: 5f:93:14:94:47:42:33:c3:1d:7d:71:d9:48:81:2d: e4:98:9f:24:a8:95:05:cf:05:5c:93:03:a7:33:bd: b0:31:71:87:7a:ce:50:b4:2a:81:d2:8c:1e:c6:23: af:21:3c:7e:a3:d8:94:75:ac:e6:bd:2c:5d:22:8a: f3:a5:63:b5:2d:51:4d:d0:2d:ca:30:e1:d5:0e:ac: bf:84:21:98:63:fb:69:e7:50:da:e9:68:27:79:1f: a5:8e:63:81:af:6f:80:62:26:97:7c:3c:8a:93:28: e4:c4:a3:44:94:f6:9a:32:a8:70:97:10:a1:af:e1: 29:2e:86:89:f1:29:ab:f9:d0:f9:6d:40:15:8a:c2: 2c:70:28:b3:e0:78:1e:52:1d:17:fd:16:ea:27:41: 78:e3:88:76:50:cc:9e:8e:c1:ab:41:67:5d:28:c4: 26:65:fb:e9:2d:86:fd:74:3b:07:4b:6a:0a:27:b7: 74:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B2:8C:A4:95:60:D0:2D:CD:94:4C:0D:04:98:08:42:9E:7E:9E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3b3dd675-b170-3eee-bf6a-12af67835d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.216.170.0/24 63.216.192.160/27 63.216.195.192/27 63.216.196.128/27 63.216.198.96/27 63.217.71.96/27 63.217.89.64/27 63.220.1.192/26 63.221.136.32/27 63.221.139.32/27 63.221.140.192/27 63.221.141.32/27 63.221.159.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:b6:34:ce:2a:ca:60:f3:e8:3e:fc:06:06:7f:6e:79:4b:28: ae:35:56:4e:f6:b4:7d:14:07:b0:41:32:5c:83:ef:02:16:29: 65:5d:e7:5c:e7:64:ad:d0:b3:dd:2e:a3:8c:5f:20:76:99:22: b4:5e:88:3a:9c:45:2f:3f:82:30:b2:39:5b:0a:2e:3e:43:3e: 3f:c9:a9:27:ab:f1:bf:12:e5:c4:61:3a:ab:88:21:bf:fe:e8: 58:9c:81:85:43:84:f1:02:8b:ec:9e:0c:48:7d:c2:ba:46:1d: f6:de:d0:26:17:9b:41:e7:64:95:b5:62:55:1a:29:0b:f6:ab: 5e:da:a8:02:d8:9d:b1:c8:b6:3f:87:35:4d:29:46:59:d5:b9: 25:be:0d:36:86:c1:b1:b5:90:f9:d0:af:9a:79:08:fa:30:ec: ba:00:b1:3a:1c:cf:5e:38:cf:79:c2:b4:15:c1:3f:d5:a6:71: e4:02:8b:0d:10:b7:79:dc:55:b9:42:c7:6c:10:78:54:e6:e2: b7:27:19:8a:67:36:d8:15:a4:60:33:55:b2:c7:14:0f:11:02: da:51:9a:0e:11:b0:e0:e3:34:d6:70:70:62:8c:c9:72:71:b6: 7d:48:31:74:fe:33:40:85:8e:03:b9:87:34:5c:3b:cb:55:03: f1:ff:80:eb -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAQ0Mn0MoWEtnl0Bmp8PDHodeXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2I5YTQzNTgtNmE0NC00YTg5LWI1NDktNjMxOTQ5NzBiYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO7DuL4zAx2btNXKOLgDF7GzfL8f10Kkk0Ty nzoi2p3Uau4m/pyKNH8IFqZSY22E2DkmuHIYSgGZkwDUUixnpdYN4//ZZheymihf kxSUR0Izwx19cdlIgS3kmJ8kqJUFzwVckwOnM72wMXGHes5QtCqB0owexiOvITx+ o9iUdazmvSxdIorzpWO1LVFN0C3KMOHVDqy/hCGYY/tp51Da6WgneR+ljmOBr2+A YiaXfDyKkyjkxKNElPaaMqhwlxChr+EpLoaJ8Smr+dD5bUAVisIscCiz4HgeUh0X /RbqJ0F444h2UMyejsGrQWddKMQmZfvpLYb9dDsHS2oKJ7d0jQIDAQABo4IDqTCC A6UwHQYDVR0OBBYEFKqyjKSVYNAtzZRMDQSYCEKefp6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvM2IzZGQ2NzUtYjE3MC0z ZWVlLWJmNmEtMTJhZjY3ODM1ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAP9iqAwUF P9jAoAMFBT/Yw8ADBQU/2MSAAwUFP9jGYAMFBT/ZR2ADBQU/2VlAAwUGP9wBwAMF BT/diCADBQU/3YsgAwUFP92MwAMFBT/djSADBQU/3Z8AMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALe2NM4q ymDz6D78BgZ/bnlLKK41Vk72tH0UB7BBMlyD7wIWKWVd51znZK3Qs90uo4xfIHaZ IrReiDqcRS8/gjCyOVsKLj5DPj/JqSer8b8S5cRhOquIIb/+6FicgYVDhPECi+ye DEh9wrpGHfbe0CYXm0HnZJW1YlUaKQv2q17aqALYnbHItj+HNU0pRlnVuSW+DTaG wbG1kPnQr5p5CPow7LoAsTocz144z3nCtBXBP9WmceQCiw0Qt3ncVblCx2wQeFTm 4rcnGYpnNtgVpGAzVbLHFA8RAtpRmg4RsODjNNZwcGKMyXJxtn1IMXT+M0CFjgO5 hzRcO8tVA/H/gOs= -----END CERTIFICATE-----Generated at Wed Nov 5 11:03:56 2025 by rpki-client