$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f65dd78-fd2c-3e4d-9df2-fe388d151578.roa File: 8f65dd78-fd2c-3e4d-9df2-fe388d151578.roa (raw, json) Hash identifier: LT2deK3LONDtC9Gfva9KCO1wSwPQg+jHE2IfCAZar+Q= Subject key identifier: D7:C5:1C:4F:08:EC:8B:90:D3:EE:30:9B:D6:E2:82:8F:30:FB:7B:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF0E9312B303E7A80895C Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f65dd78-fd2c-3e4d-9df2-fe388d151578.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 63.138.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f0:e9:31:2b:30:3e:7a:80:89:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=670a32e0-9a35-42c4-be31-e6132ce6ef0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:ac:67:15:04:56:04:62:c3:3d:9f:e2:e6: de:b0:94:0f:2a:a0:ed:c5:09:90:25:3f:d5:01:fd: 37:3d:5f:1e:87:51:41:de:9a:ac:03:73:ec:12:8b: 9b:ce:a3:7b:6e:bb:d3:82:fd:7d:a7:df:82:80:f8: 99:1b:2b:a5:57:0a:79:38:27:ec:ca:b2:bf:8f:59: 54:fb:82:c2:40:3f:64:93:ea:87:97:50:ae:47:ea: 93:3d:f5:c3:67:59:02:35:b8:59:71:55:86:ff:18: 30:2c:13:57:06:59:3b:7e:af:26:8d:00:46:54:1b: 4a:0c:b1:24:1f:4a:6e:98:d8:98:eb:0a:03:7e:72: 6d:2e:6a:a3:67:7e:b5:31:84:1c:a6:72:d2:fe:37: a6:7b:df:ed:66:31:0c:42:63:da:f6:a0:93:80:48: 0b:20:1a:20:67:c6:c8:48:48:50:74:d5:79:5e:5f: 90:4d:00:df:09:44:47:83:34:d0:b9:49:c4:f1:35: 0f:b5:b3:65:5c:aa:2d:3f:e4:6c:33:f1:2d:a2:61: 5c:b1:d2:58:49:44:f1:0e:36:64:7c:df:60:33:82: 6e:92:f6:a8:a7:18:4e:c4:cc:54:0d:c8:f4:38:b9: 45:c3:8a:d6:8c:d1:fc:15:07:48:21:01:ca:61:8a: 21:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C5:1C:4F:08:EC:8B:90:D3:EE:30:9B:D6:E2:82:8F:30:FB:7B:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f65dd78-fd2c-3e4d-9df2-fe388d151578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.138.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b8:99:6f:ca:19:a5:4b:63:ea:6f:28:9b:3d:51:92:07:f8: 94:b7:7d:e4:08:7f:00:4f:96:95:b3:d3:70:8c:e1:3a:1b:ae: d5:c3:af:eb:91:a3:17:74:5f:87:20:2b:31:ab:4d:50:3a:21: 7b:65:54:93:3a:ec:2e:d2:4b:56:c5:b5:8c:14:b5:d4:fa:22: 3e:bb:80:af:fa:8f:80:01:6f:64:38:b6:a7:4e:a3:fa:d5:41: fc:f7:c3:5f:29:33:e7:29:5f:32:92:8e:5b:72:c2:2e:29:a2: 98:19:09:bd:2a:b2:a2:65:d4:1b:a1:7d:6d:e9:c9:1a:56:7a: 14:8d:b8:d2:1e:48:cf:cc:e6:94:a6:a1:36:43:1a:79:82:5e: d2:30:7c:90:21:86:29:6e:83:e1:c5:3e:02:a5:b8:41:70:cd: 85:d1:71:91:2e:c0:bc:dd:c7:9e:c1:c8:14:94:92:ff:f2:57: 5d:66:7a:37:9c:cd:cb:59:27:24:84:0f:c5:b8:f0:1b:94:8c: 24:27:00:f2:41:15:57:b7:15:ef:d5:af:2b:b0:48:77:83:fb: 4a:93:58:18:ba:e2:1c:9f:70:91:dc:66:db:69:06:0c:76:5e: c7:47:ea:fc:46:1d:d8:52:c1:91:a2:57:da:62:7f:c0:09:80: 41:3e:d5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPDpMSswPnqAiVwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjcwYTMyZTAtOWEzNS00MmM0LWJlMzEtZTYxMzJjZTZlZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvmsZxUEVgRiwz2f4ubesJQPKqDtxQmQJT/V Af03PV8eh1FB3pqsA3PsEoubzqN7brvTgv19p9+CgPiZGyulVwp5OCfsyrK/j1lU +4LCQD9kk+qHl1CuR+qTPfXDZ1kCNbhZcVWG/xgwLBNXBlk7fq8mjQBGVBtKDLEk H0pumNiY6woDfnJtLmqjZ361MYQcpnLS/jeme9/tZjEMQmPa9qCTgEgLIBogZ8bI SEhQdNV5Xl+QTQDfCURHgzTQuUnE8TUPtbNlXKotP+RsM/EtomFcsdJYSUTxDjZk fN9gM4JukvaopxhOxMxUDcj0OLlFw4rWjNH8FQdIIQHKYYohCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfFHE8I7IuQ0+4wm9bigo8w+3vXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGY2NWRkNzgtZmQyYy0z ZTRkLTlkZjItZmUzODhkMTUxNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu4mW/KGaVLY+pvKJs9UZIH+JS3feQIfwBPlpWz03CM4TobrtXDr+uR oxd0X4cgKzGrTVA6IXtlVJM67C7SS1bFtYwUtdT6Ij67gK/6j4ABb2Q4tqdOo/rV Qfz3w18pM+cpXzKSjltywi4popgZCb0qsqJl1BuhfW3pyRpWehSNuNIeSM/M5pSm oTZDGnmCXtIwfJAhhilug+HFPgKluEFwzYXRcZEuwLzdx57ByBSUkv/yV11mejec zctZJySED8W48BuUjCQnAPJBFVe3Fe/VryuwSHeD+0qTWBi64hyfcJHcZttpBgx2 XsdH6vxGHdhSwZGiV9pif8AJgEE+1Vk= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:30 2025 by rpki-client