$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fbfc454-4acf-3c45-8bfc-384a6780f33a.roa File: 9fbfc454-4acf-3c45-8bfc-384a6780f33a.roa (raw, json) Hash identifier: Z3K4iywEUIjMvp9LLl9kt04B8KJMBq6Ovv/UMPCVc1I= Subject key identifier: CF:59:D8:5A:BB:D5:21:E1:1B:13:26:8D:30:25:4F:59:D6:02:4F:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF14E0B97E9E29FA6DF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fbfc454-4acf-3c45-8bfc-384a6780f33a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 63.254.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f1:4e:0b:97:e9:e2:9f:a6:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c4e07e62-edce-4da7-81d9-663ef2639ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:44:6a:e5:bf:78:c3:a8:d7:00:84:ae:16:d7: 4d:9a:aa:c6:4b:54:30:d9:81:ed:5b:f6:bf:61:f5: 7e:1f:9c:2e:c3:7f:59:2f:d4:27:dc:40:34:dc:95: a2:79:01:a4:6c:ac:51:6d:d9:b7:0b:0e:b9:62:4a: b7:27:40:a8:91:05:dc:5f:9f:ed:71:c1:16:8c:0f: 23:09:3c:93:8a:da:e1:06:9b:a4:63:bb:ba:54:65: 28:fb:80:48:8b:e7:ad:09:c8:fd:e7:53:c1:34:de: 08:a9:51:5a:1f:9e:13:e5:f7:ab:7d:5c:f7:ab:17: fd:42:79:99:19:11:97:10:08:b2:76:28:8a:e2:34: 1a:09:c7:bd:e2:98:f5:48:e3:96:46:fe:1c:9b:a7: 9a:75:68:6b:1e:b6:3b:fd:3b:64:4a:ad:23:5e:0c: 71:37:d5:7b:0c:21:34:51:6e:97:72:33:40:e8:73: bb:80:e8:64:55:17:2e:97:7e:d6:ba:df:5e:53:39: 20:85:70:6e:38:52:d4:c4:8d:bb:22:ac:d4:24:87: c0:3d:96:38:57:fa:9b:d9:36:3c:e8:4e:6a:e6:27: 5a:22:d9:60:36:2e:58:a7:7d:03:70:cc:a4:e9:a4: 55:c5:ca:75:f4:35:32:e0:6f:9e:04:4e:62:79:1b: 06:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:59:D8:5A:BB:D5:21:E1:1B:13:26:8D:30:25:4F:59:D6:02:4F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fbfc454-4acf-3c45-8bfc-384a6780f33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.254.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:50:03:82:06:55:48:ce:14:31:cd:65:b8:a4:d7:80:c4:8f: 0b:7a:80:c7:67:fb:6a:c8:95:9b:a4:e1:ca:c4:f7:d6:5f:67: 74:db:15:b2:55:6a:a0:75:8b:5f:3b:23:95:c4:42:53:f1:b1: 3a:5b:b0:d0:c9:d6:75:cb:5e:a3:e3:ec:93:9f:01:ff:00:62: 21:7e:ea:ed:7f:9d:21:ed:2a:f6:15:77:c8:f9:fc:63:a9:19: 9b:5b:eb:1a:99:1e:3b:a0:5e:af:34:92:50:fc:ad:f8:da:0f: ae:f8:9e:38:89:e6:fe:6c:d9:ab:52:1f:70:85:6b:14:42:ba: e0:29:b6:c9:26:7a:15:cd:ba:d1:ac:c8:66:64:e8:43:02:15: 30:49:e6:74:db:e9:32:d9:b6:28:73:d7:9d:8d:93:f8:b0:4a: ac:4c:8f:17:12:ac:a0:23:23:2e:e7:dd:75:d7:96:ed:92:52: 94:4c:05:4a:4d:ab:a7:a5:76:6b:77:a1:ec:d3:92:0d:ea:c5: 73:5e:7a:2f:4c:b6:bb:1d:ab:45:1a:35:70:17:2a:06:0b:e4: 20:fb:11:21:39:74:e9:33:b1:47:4a:16:8a:db:29:0a:4e:a8: c7:34:1d:01:f1:41:73:05:90:c3:b5:68:a1:43:dd:56:a3:5d: e5:d4:14:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPFOC5fp4p+m34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzRlMDdlNjItZWRjZS00ZGE3LTgxZDktNjYzZWYyNjM5Y2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiURq5b94w6jXAISuFtdNmqrGS1Qw2YHtW/a/ YfV+H5wuw39ZL9Qn3EA03JWieQGkbKxRbdm3Cw65Ykq3J0CokQXcX5/tccEWjA8j CTyTitrhBpukY7u6VGUo+4BIi+etCcj951PBNN4IqVFaH54T5ferfVz3qxf9QnmZ GRGXEAiydiiK4jQaCce94pj1SOOWRv4cm6eadWhrHrY7/TtkSq0jXgxxN9V7DCE0 UW6XcjNA6HO7gOhkVRcul37Wut9eUzkghXBuOFLUxI27IqzUJIfAPZY4V/qb2TY8 6E5q5idaItlgNi5Yp30DcMyk6aRVxcp19DUy4G+eBE5ieRsGQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9Z2Fq71SHhGxMmjTAlT1nWAk/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWZiZmM0NTQtNGFjZi0z YzQ1LThiZmMtMzg0YTY3ODBmMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP/6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFQA4IGVUjOFDHNZbik14DEjwt6gMdn+2rIlZuk4crE99ZfZ3TbFbJV aqB1i187I5XEQlPxsTpbsNDJ1nXLXqPj7JOfAf8AYiF+6u1/nSHtKvYVd8j5/GOp GZtb6xqZHjugXq80klD8rfjaD674njiJ5v5s2atSH3CFaxRCuuAptskmehXNutGs yGZk6EMCFTBJ5nTb6TLZtihz152Nk/iwSqxMjxcSrKAjIy7n3XXXlu2SUpRMBUpN q6eldmt3oezTkg3qxXNeei9Mtrsdq0UaNXAXKgYL5CD7ESE5dOkzsUdKForbKQpO qMc0HQHxQXMFkMO1aKFD3VajXeXUFKY= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:38 2025 by rpki-client