$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/947df0f8-80fa-3538-878b-55885ca0b9b8.roa File: 947df0f8-80fa-3538-878b-55885ca0b9b8.roa (raw, json) Hash identifier: Vb7dV6gT1ymh8e+NPxnTzFZ/6P1+RJ2EGZgMXrLPrP0= Subject key identifier: F7:46:C3:C6:4D:F1:37:9F:38:21:9C:BB:6A:FF:02:CB:18:A4:A4:B8 Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F4328584A5FC5DB1060156D85693A5600 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/947df0f8-80fa-3538-878b-55885ca0b9b8.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 398216 IP address blocks: 63.250.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:db:10:60:15:6d:85:69:3a:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=2ed4bdcf-2ac3-4976-be96-08ecf0482cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dd:d4:59:a3:9f:fe:29:87:5e:6d:e2:a5:ac: 1a:e4:94:ec:3d:b6:1d:59:f9:0c:c0:02:4c:70:37: f1:46:ad:e4:c7:55:30:55:17:1d:28:76:d8:41:6e: 63:ce:cf:60:eb:b3:54:10:17:98:0e:be:fa:7c:91: 12:c2:6f:b0:62:d9:e1:c3:07:a1:f2:13:43:90:6f: e9:72:da:2e:f8:cf:23:d6:65:c3:9a:18:5b:2b:8e: c3:68:55:b5:a1:03:4d:0b:aa:24:e1:98:8b:66:68: 9b:61:a4:14:4b:13:14:39:7e:b0:51:e4:3d:42:d3: 84:cf:7c:e5:cd:2e:17:e6:11:a6:5c:88:ff:b4:cd: 67:73:aa:f6:85:59:2f:e6:71:c5:16:e5:e2:f5:57: 6b:3f:2e:cc:b1:17:65:51:b3:84:fe:3a:c4:79:40: 91:b8:45:80:02:c8:39:6d:9f:a5:ea:6d:a6:a8:63: e3:4e:e4:61:ae:b7:3f:d7:a7:59:b3:ea:87:af:ad: 83:28:32:8c:68:46:47:b3:b1:da:a6:29:e9:fe:5d: 3f:10:49:de:72:d3:21:3b:9d:8d:5b:72:5c:97:bc: ae:4e:6a:02:ce:e6:f0:85:f4:7b:a1:9d:e0:8e:8d: 7c:bd:3b:80:38:9f:6b:44:1b:14:c5:ff:3b:7f:fd: fc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:46:C3:C6:4D:F1:37:9F:38:21:9C:BB:6A:FF:02:CB:18:A4:A4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/947df0f8-80fa-3538-878b-55885ca0b9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv4: 63.250.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:db:f0:19:c1:86:2f:04:e1:8b:2b:8c:fb:97:b3:0c:7a:d7: 44:c5:02:3b:25:52:fd:7f:a0:d9:39:2f:81:9e:af:f5:56:e3: 62:b7:4c:89:5a:a3:67:06:c2:a0:be:0e:88:b7:9e:77:26:4e: 8b:c3:c5:ca:92:3f:7a:05:4e:d9:87:10:be:84:76:b5:03:1d: ad:75:da:e2:4e:af:60:38:a0:ea:0c:1c:d5:88:69:12:17:5c: 63:55:07:30:68:c6:29:7e:21:67:c0:9f:cd:f1:75:46:06:0d: 60:e2:36:23:53:d3:a8:fb:a2:65:e4:39:55:e0:58:b6:e6:6f: 5d:fc:fc:43:f1:05:18:dc:8a:ef:2d:94:8a:be:19:bf:80:37: 4e:da:77:b3:1b:04:56:74:98:36:e1:d9:72:69:9a:9d:b8:0b: 88:8a:d6:20:17:f6:ba:fd:f7:35:72:40:cb:e4:c7:cd:d2:f6: f1:12:88:4e:ed:06:3a:6e:20:ee:18:a7:1f:63:52:25:8a:12: 4d:44:7b:76:57:27:30:2c:85:23:29:aa:12:37:7c:8e:78:4b: 21:02:83:8d:57:f4:29:c6:65:4e:e0:02:cc:eb:63:09:66:bc: 99:e9:ea:55:5c:74:ff:e3:1b:7a:17:77:d7:e9:8b:0d:c6:f3: 14:e4:bf:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdsQYBVthWk6VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk MmVkNGJkY2YtMmFjMy00OTc2LWJlOTYtMDhlY2YwNDgyY2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi93UWaOf/imHXm3ipawa5JTsPbYdWfkMwAJM cDfxRq3kx1UwVRcdKHbYQW5jzs9g67NUEBeYDr76fJESwm+wYtnhwweh8hNDkG/p ctou+M8j1mXDmhhbK47DaFW1oQNNC6ok4ZiLZmibYaQUSxMUOX6wUeQ9QtOEz3zl zS4X5hGmXIj/tM1nc6r2hVkv5nHFFuXi9VdrPy7MsRdlUbOE/jrEeUCRuEWAAsg5 bZ+l6m2mqGPjTuRhrrc/16dZs+qHr62DKDKMaEZHs7Hapinp/l0/EEnectMhO52N W3Jcl7yuTmoCzubwhfR7oZ3gjo18vTuAOJ9rRBsUxf87f/38kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdGw8ZN8TefOCGcu2r/AssYpKS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvOTQ3ZGYwZjgtODBmYS0z NTM4LTg3OGItNTU4ODVjYTBiOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP/owMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/b8BnBhi8E4YsrjPuXswx610TFAjslUv1/oNk5L4Ger/VW42K3TIla o2cGwqC+Doi3nncmTovDxcqSP3oFTtmHEL6EdrUDHa112uJOr2A4oOoMHNWIaRIX XGNVBzBoxil+IWfAn83xdUYGDWDiNiNT06j7omXkOVXgWLbmb138/EPxBRjciu8t lIq+Gb+AN07ad7MbBFZ0mDbh2XJpmp24C4iK1iAX9rr99zVyQMvkx83S9vESiE7t BjpuIO4Ypx9jUiWKEk1Ee3ZXJzAshSMpqhI3fI54SyECg41X9CnGZU7gAszrYwlm vJnp6lVcdP/jG3oXd9fpiw3G8xTkv2Y= -----END CERTIFICATE-----Generated at Mon Jul 28 17:33:26 2025 by rpki-client