$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7bad9c23-ec56-3322-a5b4-7ce9ce198f2f.roa File: 7bad9c23-ec56-3322-a5b4-7ce9ce198f2f.roa (raw, json) Hash identifier: 6cKmaRf9ZWfRE3SwexiR+fWoXhtDRLQRwjESwDIrZ0M= Subject key identifier: 86:0A:9D:89:52:C5:0B:A2:1E:AB:18:D3:D6:9A:AA:C1:E0:82:BF:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B23318DE56E1F0417B8249E70 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7bad9c23-ec56-3322-a5b4-7ce9ce198f2f.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 63.255.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:8d:e5:6e:1f:04:17:b8:24:9e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=6edf0dc2-235b-4d01-91f4-94792e669e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:51:78:dd:7b:f3:ce:a5:ed:be:fc:59:d5: ad:07:72:34:56:97:69:83:49:34:7e:1a:58:47:e4: 41:7b:2d:fd:35:c2:26:8c:36:8b:e0:6a:d1:19:20: db:07:f8:6c:6c:ea:93:c8:65:0d:f7:b0:6e:d5:a1: ce:7b:6e:ef:a7:c0:8c:7e:2e:e9:f1:01:b2:9b:9e: 3b:58:1e:d1:e6:dc:79:bf:a8:ce:de:b7:e1:15:cd: df:8d:37:0f:28:bd:67:4d:5c:bd:77:b2:b6:f2:ce: 94:a4:ec:06:4a:22:62:f2:3f:95:9f:4a:14:e9:a1: 0c:b9:45:9f:9c:37:07:60:bf:6b:df:b6:b8:26:6c: ec:b3:94:b9:13:11:03:53:82:9e:fe:8b:ae:ae:97: de:a7:76:98:35:95:44:bd:08:bb:9e:7e:f2:e9:b5: 36:35:ba:0a:2f:5a:23:27:90:a9:1e:e2:c1:77:36: 32:1f:6f:45:1b:01:65:c6:e9:64:5a:56:89:dd:e1: b1:a6:ec:66:3d:b1:7f:85:2f:f4:59:de:ea:b1:31: f3:60:ab:f6:14:d5:2a:be:ee:28:cf:e9:22:c4:ce: ca:af:16:74:e2:8c:b3:61:a1:ba:66:63:6d:b8:85: 83:a2:05:09:d1:d8:2b:5c:af:3b:db:5d:87:24:ab: ea:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0A:9D:89:52:C5:0B:A2:1E:AB:18:D3:D6:9A:AA:C1:E0:82:BF:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7bad9c23-ec56-3322-a5b4-7ce9ce198f2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.255.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d1:a9:ec:4d:a8:ad:4f:e8:42:5a:15:ec:a4:6b:22:f4:e0: 52:48:56:d8:7b:83:33:a9:9b:72:81:f4:5c:71:d7:8d:a8:fc: b5:87:55:c2:2f:cb:bb:a4:df:df:77:cd:a9:51:ec:3c:09:8e: 1f:f1:81:3c:59:bc:14:ee:8f:51:be:28:f4:f6:a2:bb:97:af: 06:82:b3:e7:c4:61:7d:c2:ce:05:a1:86:b3:dd:8b:c0:0b:32: 4b:d8:0d:e9:65:b1:7e:25:8d:4a:f0:27:5a:a8:8e:a3:41:7b: 54:58:05:98:f4:89:4a:64:0c:da:7b:08:2a:51:91:f5:ce:4c: 83:d8:eb:fb:58:73:90:80:bd:70:e6:cb:51:56:11:c1:58:36: ff:2a:3a:d0:77:3a:99:14:5d:79:09:14:94:5a:ef:c8:7d:00: 50:32:33:a3:79:b9:3a:c3:24:d2:31:9a:05:f7:fa:6d:11:a3: 3b:5d:73:02:a3:4a:e4:c6:32:3e:f6:3d:4c:ce:83:34:df:4d: 6a:23:cd:46:c8:38:fe:1a:41:e9:6c:a9:d1:56:48:c0:d2:93: 8b:0b:b5:39:d0:1f:f6:2d:6f:75:75:82:7c:5f:2e:f4:05:07: 47:35:c8:7d:32:96:c2:91:8b:7a:31:34:10:9a:ed:0d:ad:e5: 86:4e:6d:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMY3lbh8EF7gknnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk NmVkZjBkYzItMjM1Yi00ZDAxLTkxZjQtOTQ3OTJlNjY5ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotJReN17886l7b78WdWtB3I0Vpdpg0k0fhpY R+RBey39NcImjDaL4GrRGSDbB/hsbOqTyGUN97Bu1aHOe27vp8CMfi7p8QGym547 WB7R5tx5v6jO3rfhFc3fjTcPKL1nTVy9d7K28s6UpOwGSiJi8j+Vn0oU6aEMuUWf nDcHYL9r37a4Jmzss5S5ExEDU4Ke/ouurpfep3aYNZVEvQi7nn7y6bU2NboKL1oj J5CpHuLBdzYyH29FGwFlxulkWlaJ3eGxpuxmPbF/hS/0Wd7qsTHzYKv2FNUqvu4o z+kixM7KrxZ04oyzYaG6ZmNtuIWDogUJ0dgrXK87212HJKvqCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYKnYlSxQuiHqsY09aaqsHggr9KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2JhZDljMjMtZWM1Ni0z MzIyLWE1YjQtN2NlOWNlMTk4ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP//TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/RqexNqK1P6EJaFeykayL04FJIVth7gzOpm3KB9Fxx142o/LWHVcIv y7uk3993zalR7DwJjh/xgTxZvBTuj1G+KPT2oruXrwaCs+fEYX3CzgWhhrPdi8AL MkvYDellsX4ljUrwJ1qojqNBe1RYBZj0iUpkDNp7CCpRkfXOTIPY6/tYc5CAvXDm y1FWEcFYNv8qOtB3OpkUXXkJFJRa78h9AFAyM6N5uTrDJNIxmgX3+m0RoztdcwKj SuTGMj72PUzOgzTfTWojzUbIOP4aQelsqdFWSMDSk4sLtTnQH/Ytb3V1gnxfLvQF B0c1yH0ylsKRi3oxNBCa7Q2t5YZObfw= -----END CERTIFICATE-----Generated at Sat Oct 11 00:10:19 2025 by rpki-client