$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02e7ce27-5044-3e5c-8706-75e485d1de81.roa File: 02e7ce27-5044-3e5c-8706-75e485d1de81.roa (raw, json) Hash identifier: c4++k+66tKchzeJdYlGtznTLEjLzTz6NGWGXxEfXj4c= Subject key identifier: 81:99:82:4F:2D:D7:DF:CB:E0:A1:26:BA:1F:67:6C:A0:D2:34:DE:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D0517F968E946E1F4B240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02e7ce27-5044-3e5c-8706-75e485d1de81.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 40399 IP address blocks: 63.138.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:05:17:f9:68:e9:46:e1:f4:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=10e32426-c7ae-4079-a7a9-59e541c4b9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:23:8f:a7:17:48:6a:7e:ef:a6:2c:1b:b7: 79:5c:e7:26:1d:12:5b:5b:68:49:eb:4d:56:22:80: e8:53:f8:27:44:12:89:62:c3:db:b7:c9:be:46:5e: 52:4d:6e:cf:84:f7:87:a7:4b:3d:b2:3f:c7:4f:de: 6c:1f:8e:6b:1f:53:41:0c:36:f0:12:bf:ac:b5:8a: 65:54:4b:24:43:48:c5:0a:fd:11:cc:c5:45:0a:37: b0:ce:6a:ed:32:94:34:78:13:eb:78:be:d9:9b:81: bd:06:a3:0c:75:cb:86:61:6d:c0:6b:2a:76:d8:1c: b9:dd:3f:df:b1:b4:2b:c2:a2:49:45:b2:49:2e:47: 69:2a:5d:da:1e:de:73:8d:76:64:2b:1f:62:87:d7: 2e:bf:89:2e:8d:96:4d:ca:6d:e1:41:a5:87:9f:0d: e6:18:ef:43:55:8b:9c:82:87:c0:24:26:65:32:36: 03:77:8f:48:40:d8:dd:d8:81:1f:b6:fa:76:17:df: da:3e:2a:31:f7:03:26:0a:14:e5:d4:3f:fd:5b:d0: 0a:eb:4f:4b:e5:1e:e7:51:e8:11:0f:dd:a0:cb:6e: 49:58:78:96:37:55:7d:e8:82:ba:8e:19:be:48:1b: bf:43:48:58:d7:b5:f0:e6:47:75:27:fd:5c:d9:49: bb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:99:82:4F:2D:D7:DF:CB:E0:A1:26:BA:1F:67:6C:A0:D2:34:DE:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02e7ce27-5044-3e5c-8706-75e485d1de81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.138.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:db:28:0c:86:75:3f:13:1d:07:77:81:7a:aa:b1:c5:9a:a8: 7d:38:b0:fd:a7:0c:0a:3d:9d:c0:59:d1:71:ee:4d:81:66:af: 5c:b3:e8:54:b5:d1:f6:42:0e:f2:8a:66:ee:27:bc:e2:26:89: 20:43:32:bc:5b:ca:cd:a9:8f:de:01:1a:73:54:56:28:e9:91: d0:9d:0b:49:61:64:ad:11:a1:f0:df:90:3e:d1:37:8c:3d:88: 76:da:ef:b9:15:e8:c7:96:81:d8:80:9a:b1:94:a6:13:61:bb: 97:ef:e3:cf:b3:f0:c9:a0:a4:23:0e:1a:37:ab:ae:bb:49:62: 67:a2:40:1a:8c:d2:90:3e:5a:ea:a7:4d:f7:d5:72:26:ce:df: fc:47:cc:af:a1:90:b4:d1:53:28:09:97:a2:10:e6:ba:92:31: f6:9c:ec:76:70:63:bc:65:a9:78:af:36:0f:1c:40:b2:23:23: 40:60:ab:78:d8:19:e3:ae:65:1d:85:35:c1:dc:74:b0:25:25: 89:66:12:fc:a8:99:94:dc:da:a0:cc:cf:e9:57:b1:fd:a3:d5: 06:de:ae:6e:b6:ca:92:90:53:6c:c2:e8:4b:13:b5:a0:10:0d: 7a:08:3c:34:12:13:90:fb:2d:84:23:c0:6a:e7:53:6b:95:d4: 6e:3d:7c:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQUX+WjpRuH0skAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTBlMzI0MjYtYzdhZS00MDc5LWE3YTktNTllNTQxYzRiOWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl8jj6cXSGp+76YsG7d5XOcmHRJbW2hJ601W IoDoU/gnRBKJYsPbt8m+Rl5STW7PhPeHp0s9sj/HT95sH45rH1NBDDbwEr+stYpl VEskQ0jFCv0RzMVFCjewzmrtMpQ0eBPreL7Zm4G9BqMMdcuGYW3Aayp22By53T/f sbQrwqJJRbJJLkdpKl3aHt5zjXZkKx9ih9cuv4kujZZNym3hQaWHnw3mGO9DVYuc gofAJCZlMjYDd49IQNjd2IEftvp2F9/aPiox9wMmChTl1D/9W9AK609L5R7nUegR D92gy25JWHiWN1V96IK6jhm+SBu/Q0hY17Xw5kd1J/1c2Um7FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGZgk8t19/L4KEmuh9nbKDSNN6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDJlN2NlMjctNTA0NC0z ZTVjLTg3MDYtNzVlNDg1ZDFkZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4psMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDbKAyGdT8THQd3gXqqscWaqH04sP2nDAo9ncBZ0XHuTYFmr1yz6FS1 0fZCDvKKZu4nvOImiSBDMrxbys2pj94BGnNUVijpkdCdC0lhZK0RofDfkD7RN4w9 iHba77kV6MeWgdiAmrGUphNhu5fv48+z8MmgpCMOGjerrrtJYmeiQBqM0pA+Wuqn TffVcibO3/xHzK+hkLTRUygJl6IQ5rqSMfac7HZwY7xlqXivNg8cQLIjI0Bgq3jY GeOuZR2FNcHcdLAlJYlmEvyomZTc2qDMz+lXsf2j1Qberm62ypKQU2zC6EsTtaAQ DXoIPDQSE5D7LYQjwGrnU2uV1G49fEg= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:22 2025 by rpki-client