$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c23c1b79-d06d-3bb5-bb2c-667097bfe06c.roa File: c23c1b79-d06d-3bb5-bb2c-667097bfe06c.roa (raw, json) Hash identifier: /Jx1qulfDiZJ4OrDjIA7KbFE8xIPTRRCgdz3tvD0q50= Subject key identifier: 67:0D:27:B6:BA:49:9C:1A:41:DA:C7:83:E0:9B:2A:4B:5E:BF:E0:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C4844191BCB7820B1D0C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c23c1b79-d06d-3bb5-bb2c-667097bfe06c.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 139.55.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:48:44:19:1b:cb:78:20:b1:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=de34fe25-1674-47d1-a8e6-d86e1584e2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:0a:7f:92:bb:d7:14:5a:b4:2f:84:76:ab: df:20:9d:06:15:75:00:96:86:bc:b0:16:e7:09:5c: fb:e0:39:7c:0c:8d:79:ca:9a:e8:ca:2a:0b:f1:49: 63:7c:0b:92:88:ea:ce:29:ab:95:25:64:b2:17:d3: 1f:ed:75:53:a8:14:56:84:c2:c3:dc:f9:4d:2d:97: ef:c7:8f:3d:1b:18:1b:64:d4:16:cb:2e:91:01:0d: 4f:a3:fd:38:82:db:69:26:12:bd:46:4b:ed:4f:6f: 03:f6:03:4e:39:18:fb:30:c3:18:be:f6:05:b0:69: 8e:7b:dd:55:3b:c6:67:53:bf:3f:dc:0a:e9:47:43: a3:8c:6a:43:f7:76:73:6c:9e:dd:a8:00:b5:e0:6e: ed:cd:58:2d:3c:6e:22:9c:4a:9e:78:33:8e:23:54: be:8c:92:1c:79:d9:f0:52:1a:69:4c:9b:78:0c:71: 35:18:d4:09:5b:0c:17:07:9d:7e:5b:6b:c0:63:c2: de:e9:8e:ee:87:c3:28:bf:8f:e2:d0:8d:eb:d8:f8: c2:e7:c6:2e:74:23:01:dd:9e:44:50:32:e8:02:df: 13:5c:d7:89:55:09:36:31:14:9a:0f:96:8a:f4:fa: 00:07:a4:63:66:2e:16:8f:35:f5:21:b4:f5:c2:b8: 1f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0D:27:B6:BA:49:9C:1A:41:DA:C7:83:E0:9B:2A:4B:5E:BF:E0:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c23c1b79-d06d-3bb5-bb2c-667097bfe06c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:8d:32:6b:1f:39:e9:56:1c:96:52:a6:61:23:67:b8:06:11: 77:b4:1b:7c:5f:15:2d:37:a0:c0:ad:60:b3:52:2e:ea:eb:26: 7e:2f:60:d0:90:77:95:b7:b8:9d:c3:d6:c6:67:6c:05:d7:74: 76:9a:16:a9:81:8e:4c:17:ae:fd:5e:4d:02:f7:59:ec:c1:8c: 53:51:b9:c5:f1:9c:53:d5:41:e6:e3:08:32:9b:71:64:db:99: db:fa:e3:6f:a2:1c:cd:57:39:2c:cf:6b:12:3d:3a:b6:a0:63: b3:e2:aa:2a:b5:16:6a:23:b5:5e:af:a0:64:09:e7:e5:ba:c0: 71:3a:81:1f:25:9b:f4:7d:92:82:69:53:6c:55:10:09:ab:37: 9f:bf:f2:1d:f6:ef:6b:2d:63:23:d7:a9:0c:9c:41:1d:d6:db: 81:f1:64:47:8d:c1:b7:c6:e1:31:89:f0:a0:2c:16:96:4b:88: 5c:b2:a5:5e:bb:52:28:c0:8b:0a:de:5e:f4:c4:9a:db:11:f6: 86:f3:d1:29:3e:4d:01:8f:8e:78:c8:52:43:43:81:fc:68:ee: e2:51:55:e8:72:0a:91:da:90:39:56:41:77:28:e9:f4:31:85: 34:1e:d6:30:bb:f0:63:5c:03:03:87:63:08:21:95:0a:30:c2: 19:35:45:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEhEGRvLeCCx0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGUzNGZlMjUtMTY3NC00N2QxLWE4ZTYtZDg2ZTE1ODRlMmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6IKf5K71xRatC+EdqvfIJ0GFXUAloa8sBbn CVz74Dl8DI15yproyioL8UljfAuSiOrOKauVJWSyF9Mf7XVTqBRWhMLD3PlNLZfv x489GxgbZNQWyy6RAQ1Po/04gttpJhK9RkvtT28D9gNOORj7MMMYvvYFsGmOe91V O8ZnU78/3ArpR0OjjGpD93ZzbJ7dqAC14G7tzVgtPG4inEqeeDOOI1S+jJIcednw UhppTJt4DHE1GNQJWwwXB51+W2vAY8Le6Y7uh8Mov4/i0I3r2PjC58YudCMB3Z5E UDLoAt8TXNeJVQk2MRSaD5aK9PoAB6RjZi4WjzX1IbT1wrgf8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcNJ7a6SZwaQdrHg+CbKktev+DYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzIzYzFiNzktZDA2ZC0z YmI1LWJiMmMtNjY3MDk3YmZlMDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKNMmsfOelWHJZSpmEjZ7gGEXe0G3xfFS03oMCtYLNSLurrJn4vYNCQ d5W3uJ3D1sZnbAXXdHaaFqmBjkwXrv1eTQL3WezBjFNRucXxnFPVQebjCDKbcWTb mdv642+iHM1XOSzPaxI9OragY7Piqiq1FmojtV6voGQJ5+W6wHE6gR8lm/R9koJp U2xVEAmrN5+/8h3272stYyPXqQycQR3W24HxZEeNwbfG4TGJ8KAsFpZLiFyypV67 UijAiwreXvTEmtsR9obz0Sk+TQGPjnjIUkNDgfxo7uJRVehyCpHakDlWQXco6fQx hTQe1jC78GNcAwOHYwghlQowwhk1Rfc= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:39 2025 by rpki-client