$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3386ac3-63ac-3305-9e42-574d20ff5dfb.roa File: a3386ac3-63ac-3305-9e42-574d20ff5dfb.roa (raw, json) Hash identifier: jHOeyBN6gH3cHE8+dcLzRd8oz0Am9tMHpW1gx2NdFTI= Subject key identifier: F7:0C:94:39:04:1A:F9:23:CA:12:2E:EC:18:0D:09:1F:EF:6E:89:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD498CDE5245715F58800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3386ac3-63ac-3305-9e42-574d20ff5dfb.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 40399 IP address blocks: 63.139.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d4:98:cd:e5:24:57:15:f5:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=8783f328-7796-43f0-a2b1-c84f0af38737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:58:24:f4:71:db:88:04:9d:c4:59:50:dc: 0f:b4:f1:6c:33:d5:01:e2:e6:4a:21:8a:13:c4:71: ac:09:1f:c3:a6:9b:47:c2:b6:67:ed:66:aa:6d:3c: f5:95:39:45:06:98:2b:0f:87:e1:3b:c1:d7:09:5d: a8:f3:da:2b:cc:3f:0c:67:42:93:27:45:50:cc:b2: 6f:4c:de:1c:3a:f6:17:d9:38:ea:d3:09:04:4c:b2: 07:d8:a7:c4:b1:8f:8e:53:b5:d0:dd:fd:ac:e7:3a: 77:80:46:5a:bb:84:52:8d:94:74:e1:82:81:78:db: 6e:0a:ad:d5:fb:1b:9f:45:ac:4d:80:6d:a9:8f:3f: 1d:55:60:6f:cd:9e:3a:a6:19:8f:9e:98:23:9c:56: 3e:bc:15:8f:79:b0:8d:51:5e:19:f0:f0:88:e4:3f: c0:1d:1d:d6:98:dc:55:43:30:b0:22:fd:08:66:8d: a9:de:e6:9f:15:5b:06:65:3d:ec:32:e5:38:b6:fe: 05:c8:bb:b2:42:8c:59:39:d3:1c:fa:ea:86:6e:5f: 01:6d:77:9c:88:da:37:1e:47:64:51:51:1d:4a:b0: ea:82:b2:3b:02:7c:4d:40:05:00:ac:01:30:61:3a: a5:98:3b:c4:78:cc:08:9e:01:ce:56:45:e1:25:e0: 51:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0C:94:39:04:1A:F9:23:CA:12:2E:EC:18:0D:09:1F:EF:6E:89:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3386ac3-63ac-3305-9e42-574d20ff5dfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.139.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:bc:ca:19:49:db:e2:ae:22:43:5a:2d:73:d1:a7:e6:ca:e5: a1:a6:52:9a:a1:35:8e:9e:3d:ab:01:1b:de:08:5f:ec:08:58: fa:ff:6c:98:98:3d:88:b3:e5:77:8c:f8:8f:e0:d0:64:aa:a4: 6d:4d:86:65:73:b1:83:00:5d:74:9d:b5:8b:79:fd:7f:74:f5: f0:12:72:1b:6c:48:68:c9:35:f4:5d:77:2b:fb:52:d8:ba:d8: b2:c3:92:24:02:96:32:f9:cf:90:51:d3:94:38:c2:21:0c:86: e6:20:69:9a:d4:a5:77:3f:da:a3:fe:8e:11:61:59:61:10:50: a6:4e:b0:4d:b9:63:fd:9c:82:ad:37:90:9a:83:e1:fa:b3:6c: 7e:c7:6d:ad:f7:b7:6a:ca:04:4c:b6:86:b8:7a:f6:9a:44:80: d6:1f:7e:a9:64:b6:37:18:21:a7:b0:6a:db:ff:65:ed:68:21: d3:a6:e5:98:af:d7:fe:32:43:c4:5c:c3:07:09:e4:77:97:20: 3a:d1:5d:1f:85:42:36:76:28:12:61:01:52:60:78:7d:9b:5b: 5a:47:46:b3:89:fb:03:4d:19:2a:e6:2c:5e:d3:44:de:72:be: 41:59:d5:15:2e:8d:f8:ea:85:5e:fa:b2:b8:04:f3:27:c8:c1: 34:66:e7:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNSYzeUkVxX1iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODc4M2YzMjgtNzc5Ni00M2YwLWEyYjEtYzg0ZjBhZjM4NzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzalYJPRx24gEncRZUNwPtPFsM9UB4uZKIYoT xHGsCR/DpptHwrZn7WaqbTz1lTlFBpgrD4fhO8HXCV2o89orzD8MZ0KTJ0VQzLJv TN4cOvYX2Tjq0wkETLIH2KfEsY+OU7XQ3f2s5zp3gEZau4RSjZR04YKBeNtuCq3V +xufRaxNgG2pjz8dVWBvzZ46phmPnpgjnFY+vBWPebCNUV4Z8PCI5D/AHR3WmNxV QzCwIv0IZo2p3uafFVsGZT3sMuU4tv4FyLuyQoxZOdMc+uqGbl8BbXeciNo3Hkdk UVEdSrDqgrI7AnxNQAUArAEwYTqlmDvEeMwIngHOVkXhJeBRGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcMlDkEGvkjyhIu7BgNCR/vbok2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTMzODZhYzMtNjNhYy0z MzA1LTllNDItNTc0ZDIwZmY1ZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4tvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH68yhlJ2+KuIkNaLXPRp+bK5aGmUpqhNY6ePasBG94IX+wIWPr/bJiY PYiz5XeM+I/g0GSqpG1NhmVzsYMAXXSdtYt5/X909fASchtsSGjJNfRddyv7Uti6 2LLDkiQCljL5z5BR05Q4wiEMhuYgaZrUpXc/2qP+jhFhWWEQUKZOsE25Y/2cgq03 kJqD4fqzbH7Hba33t2rKBEy2hrh69ppEgNYffqlktjcYIaewatv/Ze1oIdOm5Ziv 1/4yQ8RcwwcJ5HeXIDrRXR+FQjZ2KBJhAVJgeH2bW1pHRrOJ+wNNGSrmLF7TRN5y vkFZ1RUujfjqhV76srgE8yfIwTRm53A= -----END CERTIFICATE-----Generated at Sat Oct 11 00:22:06 2025 by rpki-client