$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cd79fc08-e584-3b8d-8b6c-053c96e54198.roa File: cd79fc08-e584-3b8d-8b6c-053c96e54198.roa (raw, json) Hash identifier: Zm2WE6FhP62Xtudn2XoKshpnS6iZApG/JPTqwdOpP5s= Subject key identifier: 41:57:09:9D:19:52:28:BF:D3:47:60:0D:04:5D:B5:1A:2A:30:AC:8D Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B970CE17CAF2C23DC8724DB00 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cd79fc08-e584-3b8d-8b6c-053c96e54198.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16841 IP address blocks: 63.217.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e1:7c:af:2c:23:dc:87:24:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=afb1eec6-4733-43eb-9f60-6de69e798c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b9:3b:04:31:99:cb:c7:c4:a3:87:ae:cd:e4: 3e:47:0a:4c:75:36:95:3f:14:9a:5b:07:68:e1:22: 24:dc:0e:75:03:b2:25:e8:df:77:22:a1:1b:50:f5: 91:c7:55:d9:fb:25:95:a6:e6:3d:d3:11:98:d9:5e: 73:d2:90:ce:fa:4d:28:e5:13:f8:29:d1:07:27:89: 94:26:a5:e2:e6:49:57:02:3d:dc:c4:7e:40:45:7f: da:d6:da:2a:1b:33:b5:f8:16:0f:4b:36:c4:ec:d3: 52:07:23:cd:95:33:0e:89:5c:e0:33:39:2a:88:57: f3:9e:5b:65:18:86:d2:8c:5d:c8:0c:9e:98:a1:23: 53:13:b1:0e:5d:29:41:7e:c4:3f:ae:f5:5e:d0:a0: 9b:95:32:a9:72:a2:ea:3b:bb:b3:a5:2c:67:5d:1e: fc:da:02:b7:d9:5c:87:2a:39:cf:fc:8b:29:0c:5f: 2d:cd:a6:81:dd:8f:eb:be:e0:4a:5c:b0:0c:63:57: 9d:7a:3f:84:c6:d5:45:62:d6:80:05:5b:fd:d1:e6: 60:d5:89:32:03:78:c2:07:9a:c7:ab:a6:fc:bb:29: f8:b1:2a:a0:b8:b9:fe:00:34:d9:d3:ce:69:ec:19: f2:6d:0f:91:70:17:48:dd:93:dc:f3:63:72:83:b6: b7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:57:09:9D:19:52:28:BF:D3:47:60:0D:04:5D:B5:1A:2A:30:AC:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cd79fc08-e584-3b8d-8b6c-053c96e54198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.217.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:da:37:10:e5:12:14:ea:02:49:32:bc:97:b5:1c:30:f6:e2: 12:a1:0a:0d:c0:0d:f0:cd:9d:58:c7:9b:a3:99:68:55:a2:f1: 22:64:78:5d:0f:de:43:12:a1:6e:dd:e8:ba:67:08:53:9d:bf: ce:ac:5b:c6:27:36:bb:83:b2:d6:55:b2:b4:75:4a:88:b5:67: 35:bc:46:c3:5d:cc:25:08:81:65:ae:50:ef:b2:44:63:b1:88: 6d:68:49:a7:45:55:e6:3b:e4:84:52:09:e6:1c:6b:9d:5a:13: fe:4e:29:59:f8:44:d8:54:3e:26:f8:93:0d:13:b8:86:68:5c: c5:67:a5:d2:75:74:2c:86:2d:b5:fd:9d:e3:f9:53:b3:ec:db: e1:73:aa:34:2a:e1:16:46:23:b8:20:7d:82:ba:cf:a1:f7:21: 1c:92:04:45:e0:bb:f5:c7:af:10:95:69:64:9f:8c:be:1e:65: 8b:dd:8f:9b:01:f5:c9:da:02:f9:fe:af:60:c4:ae:ef:68:52: 68:5c:be:fc:0d:cd:67:80:2a:e1:63:07:3d:dc:1c:54:be:47: b6:67:f4:bc:b7:42:35:e0:96:fe:b3:8e:d5:77:a7:f4:48:20: bf:57:05:07:16:9f:c9:3d:db:83:8e:90:2e:89:66:b0:cd:12: a2:84:a6:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOF8rywj3Ick2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YWZiMWVlYzYtNDczMy00M2ViLTlmNjAtNmRlNjllNzk4YzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprk7BDGZy8fEo4euzeQ+RwpMdTaVPxSaWwdo 4SIk3A51A7Il6N93IqEbUPWRx1XZ+yWVpuY90xGY2V5z0pDO+k0o5RP4KdEHJ4mU JqXi5klXAj3cxH5ARX/a1toqGzO1+BYPSzbE7NNSByPNlTMOiVzgMzkqiFfznltl GIbSjF3IDJ6YoSNTE7EOXSlBfsQ/rvVe0KCblTKpcqLqO7uzpSxnXR782gK32VyH KjnP/IspDF8tzaaB3Y/rvuBKXLAMY1edej+ExtVFYtaABVv90eZg1YkyA3jCB5rH q6b8uyn4sSqguLn+ADTZ085p7BnybQ+RcBdI3ZPc82Nyg7a3UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFXCZ0ZUii/00dgDQRdtRoqMKyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvY2Q3OWZjMDgtZTU4NC0z YjhkLThiNmMtMDUzYzk2ZTU0MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP9lsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/aNxDlEhTqAkkyvJe1HDD24hKhCg3ADfDNnVjHm6OZaFWi8SJkeF0P 3kMSoW7d6LpnCFOdv86sW8YnNruDstZVsrR1Soi1ZzW8RsNdzCUIgWWuUO+yRGOx iG1oSadFVeY75IRSCeYca51aE/5OKVn4RNhUPib4kw0TuIZoXMVnpdJ1dCyGLbX9 neP5U7Ps2+FzqjQq4RZGI7ggfYK6z6H3IRySBEXgu/XHrxCVaWSfjL4eZYvdj5sB 9cnaAvn+r2DEru9oUmhcvvwNzWeAKuFjBz3cHFS+R7Zn9Ly3QjXglv6zjtV3p/RI IL9XBQcWn8k924OOkC6JZrDNEqKEpmI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:17:48 2025 by rpki-client