$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/aa20e92c-ef1d-3334-9d2a-c581e247163f.roa File: aa20e92c-ef1d-3334-9d2a-c581e247163f.roa (raw, json) Hash identifier: rRRUn+NpzpcSOm1/tMiffRsznj2cuuKQraN03bldtZ4= Subject key identifier: E5:CA:78:C7:E3:3A:1C:45:FE:B9:6C:01:63:BE:7E:B5:75:DE:1F:0E Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584BA39D0511CF5D65BBED9090E0 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/aa20e92c-ef1d-3334-9d2a-c581e247163f.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 198148 IP address blocks: 63.222.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:05:11:cf:5d:65:bb:ed:90:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=67d660c2-039b-44e4-b677-bf173031428e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:1a:57:d3:07:b0:f8:77:39:db:0c:c2:d5: 08:05:16:42:f9:6a:41:f4:93:76:27:2d:27:9b:07: f2:ab:dd:41:f8:8c:5e:b4:aa:f0:15:51:ff:b9:be: c6:0e:f6:dd:67:b2:d3:e2:2a:65:41:13:ee:96:3a: 35:46:71:a9:57:b3:53:cc:5b:6c:c9:c9:26:a3:02: 13:8d:5e:9c:78:16:11:03:88:4f:c1:d8:70:8e:54: 85:4e:ac:96:56:3d:e0:07:71:26:57:e2:bc:9d:e2: 44:be:76:35:0d:2c:06:35:6f:52:a1:9b:b6:cb:07: a6:1a:f4:46:1a:7d:a9:70:55:c9:90:98:ca:4d:15: 6a:ce:b2:54:da:af:cd:99:24:bf:c5:de:4f:be:17: e0:f9:ac:cf:38:28:5b:e3:ee:34:15:1e:cf:a0:6f: bc:8a:52:6f:e4:48:5c:24:96:47:06:3f:9a:5e:1a: 07:8a:88:f8:dd:39:52:6f:9c:62:dc:31:ec:c5:74: 53:6a:bc:0c:e2:0b:77:b7:f1:b8:b2:da:ba:38:a1: b8:c0:6f:4c:69:a7:45:6f:97:76:ee:87:c2:74:76: fd:6b:58:95:6b:a2:cc:0c:eb:e3:56:17:c0:03:4e: ae:41:ad:b7:4d:72:a7:d7:67:0e:55:58:50:40:0d: 47:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CA:78:C7:E3:3A:1C:45:FE:B9:6C:01:63:BE:7E:B5:75:DE:1F:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/aa20e92c-ef1d-3334-9d2a-c581e247163f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.222.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4c:21:58:62:76:06:c3:2d:cf:e9:6e:9e:d6:64:e7:03:87: d6:0c:b1:51:c4:64:3f:9a:a4:12:cf:b5:a1:9f:5c:fe:ec:2f: e0:2d:8d:04:e5:32:24:0e:f7:6f:4c:c9:df:3b:1e:3b:e0:8a: d7:77:37:e9:1d:7b:34:a9:f0:71:db:13:6c:98:1b:cf:20:e7: 1d:7c:45:7f:ee:a6:87:61:a8:8c:82:91:89:16:81:84:cf:cd: e3:35:34:ab:71:6a:ea:dd:b5:18:a1:43:4a:4f:03:04:23:9a: 5a:e1:8e:8f:13:95:5e:70:1b:ad:02:22:59:be:bf:5e:88:60: 36:39:5e:f6:0c:72:8b:aa:82:ec:b1:5e:97:f6:a9:af:ee:2b: 91:33:34:bc:78:82:58:4c:72:1d:5a:27:8a:0f:e6:e6:bf:03: 72:60:43:d0:73:34:ed:6b:d7:bf:65:17:95:12:67:ea:8d:c0: 17:d7:21:d3:bc:20:3c:7f:52:47:5b:39:91:2a:43:33:08:62: 3c:07:34:d5:ff:2b:9e:04:bd:c2:3d:d1:f7:be:df:6f:78:43: a9:ee:f9:74:aa:c9:27:5c:81:72:74:ec:3c:59:e4:83:22:20: 0d:a6:33:7c:c3:34:df:9a:13:dd:35:74:be:2b:a5:5c:6c:51: 2d:99:67:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQURz11lu+2QkOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjdkNjYwYzItMDM5Yi00NGU0LWI2NzctYmYxNzMwMzE0MjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucMaV9MHsPh3OdsMwtUIBRZC+WpB9JN2Jy0n mwfyq91B+IxetKrwFVH/ub7GDvbdZ7LT4iplQRPuljo1RnGpV7NTzFtsyckmowIT jV6ceBYRA4hPwdhwjlSFTqyWVj3gB3EmV+K8neJEvnY1DSwGNW9SoZu2ywemGvRG Gn2pcFXJkJjKTRVqzrJU2q/NmSS/xd5Pvhfg+azPOChb4+40FR7PoG+8ilJv5Ehc JJZHBj+aXhoHioj43TlSb5xi3DHsxXRTarwM4gt3t/G4stq6OKG4wG9MaadFb5d2 7ofCdHb9a1iVa6LMDOvjVhfAA06uQa23TXKn12cOVVhQQA1HMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXKeMfjOhxF/rlsAWO+frV13h8OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvYWEyMGU5MmMtZWYxZC0z MzM0LTlkMmEtYzU4MWUyNDcxNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP969MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJMIVhidgbDLc/pbp7WZOcDh9YMsVHEZD+apBLPtaGfXP7sL+AtjQTl MiQO929Myd87Hjvgitd3N+kdezSp8HHbE2yYG88g5x18RX/upodhqIyCkYkWgYTP zeM1NKtxaurdtRihQ0pPAwQjmlrhjo8TlV5wG60CIlm+v16IYDY5XvYMcouqguyx Xpf2qa/uK5EzNLx4glhMch1aJ4oP5ua/A3JgQ9BzNO1r179lF5USZ+qNwBfXIdO8 IDx/UkdbOZEqQzMIYjwHNNX/K54EvcI90fe+3294Q6nu+XSqySdcgXJ07DxZ5IMi IA2mM3zDNN+aE901dL4rpVxsUS2ZZ+M= -----END CERTIFICATE-----Generated at Wed Nov 5 06:06:45 2025 by rpki-client