$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/353852e9-8244-3a99-a4c3-a3d7d092a01c.roa File: 353852e9-8244-3a99-a4c3-a3d7d092a01c.roa (raw, json) Hash identifier: N03u51XVrnT0QsaeUul051FedAT8f51LDY1q8upd4I0= Subject key identifier: 74:09:F3:76:50:58:B8:42:A6:71:AB:8B:C4:2F:C5:80:FB:71:E3:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D05AAE22AB2F82AEB73C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/353852e9-8244-3a99-a4c3-a3d7d092a01c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 53286 IP address blocks: 63.139.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:05:aa:e2:2a:b2:f8:2a:eb:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ab39689e-3247-4da2-97c0-9caba69befb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:38:fe:f8:3a:ef:a8:aa:48:86:bf:6e:22:90: 76:73:10:30:88:0e:90:aa:e5:37:d8:7e:c1:64:90: f1:99:66:7f:26:a0:f4:2a:33:82:7b:7b:25:57:3c: 84:0a:3e:29:6f:58:3e:f8:08:2f:6b:ac:4b:06:8b: 08:f9:4d:ad:1d:27:1f:4b:92:96:c1:48:6c:44:f9: ee:fb:20:46:64:2c:68:f1:48:0b:a0:f2:16:e4:ef: 4c:cc:b0:0d:73:8b:14:f4:99:78:33:6d:51:f9:0b: ba:5e:ce:40:a8:df:31:06:15:3f:70:2d:cc:55:a8: de:8e:07:c5:ec:fc:ff:ae:09:8f:bc:26:b4:5f:12: 67:75:e0:04:fd:27:3d:35:24:1e:16:35:d8:8c:59: 9d:53:72:91:6b:40:69:e5:4f:4d:b5:40:57:22:95: b4:fc:91:10:9e:3e:66:4d:e2:1b:bd:35:4a:d7:61: b5:17:6c:82:c2:b3:65:b1:3f:16:a8:bf:02:af:b6: a3:b5:88:4b:f3:43:5e:5e:b3:ee:92:dc:65:61:20: 0c:36:1c:68:6a:fa:b9:0d:54:d0:9e:e7:37:49:71: 12:77:0c:1e:4f:c8:3d:fb:1c:19:d6:30:ec:86:57: cc:da:54:42:9b:f3:1a:50:f4:ca:89:ef:c9:31:ce: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:09:F3:76:50:58:B8:42:A6:71:AB:8B:C4:2F:C5:80:FB:71:E3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/353852e9-8244-3a99-a4c3-a3d7d092a01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.139.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:06:ad:a2:f6:b4:2f:ca:e4:ae:58:7e:08:0b:1c:3a:37:14: 44:4f:c5:ab:44:26:3a:22:ee:63:62:76:41:02:25:ab:d3:f9: 3f:78:e8:77:40:36:d5:94:c5:63:62:96:a8:55:5c:ae:5a:8d: 27:6a:a1:3d:d5:be:d8:a6:dd:be:1c:8f:4c:96:43:4a:f0:9f: 3b:39:15:e7:7d:72:f5:9b:6d:4f:02:d4:2d:40:0e:91:40:a2: 66:7f:5d:ca:03:dd:a6:c6:b4:26:96:54:e4:cb:cd:4f:c5:cb: bf:dd:62:4b:ba:e9:a7:32:a3:34:a9:42:c2:d3:7f:4b:85:41: 6b:9b:bd:39:e4:c8:ed:c1:cd:27:57:9a:c7:67:d1:a3:a4:0f: 55:78:f6:d2:c0:04:62:2b:14:91:98:60:55:7b:74:96:9e:07: c9:d4:f3:10:f1:68:0a:0b:20:15:a6:1c:81:10:2c:6c:bb:62: 96:c9:20:04:69:2c:64:93:f4:93:a2:c0:61:e9:c2:3e:14:31: 43:1b:b7:60:0b:af:b5:5a:bd:f1:7a:b5:bb:fc:37:c2:48:93: 74:aa:a9:45:d0:01:19:9d:1c:b0:e8:4e:3e:dd:d7:74:e1:a0: 5d:bc:67:54:3e:a7:df:25:3a:2e:38:9e:b6:7b:38:22:30:ec: cd:c2:1a:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQWq4iqy+Crrc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YWIzOTY4OWUtMzI0Ny00ZGEyLTk3YzAtOWNhYmE2OWJlZmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzj++DrvqKpIhr9uIpB2cxAwiA6QquU32H7B ZJDxmWZ/JqD0KjOCe3slVzyECj4pb1g++Agva6xLBosI+U2tHScfS5KWwUhsRPnu +yBGZCxo8UgLoPIW5O9MzLANc4sU9Jl4M21R+Qu6Xs5AqN8xBhU/cC3MVajejgfF 7Pz/rgmPvCa0XxJndeAE/Sc9NSQeFjXYjFmdU3KRa0Bp5U9NtUBXIpW0/JEQnj5m TeIbvTVK12G1F2yCwrNlsT8WqL8Cr7ajtYhL80NeXrPuktxlYSAMNhxoavq5DVTQ nuc3SXESdwweT8g9+xwZ1jDshlfM2lRCm/MaUPTKie/JMc5ATQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQJ83ZQWLhCpnGri8QvxYD7ceMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzUzODUyZTktODI0NC0z YTk5LWE0YzMtYTNkN2QwOTJhMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4tUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcGraL2tC/K5K5YfggLHDo3FERPxatEJjoi7mNidkECJavT+T946HdA NtWUxWNilqhVXK5ajSdqoT3Vvtim3b4cj0yWQ0rwnzs5Fed9cvWbbU8C1C1ADpFA omZ/XcoD3abGtCaWVOTLzU/Fy7/dYku66acyozSpQsLTf0uFQWubvTnkyO3BzSdX msdn0aOkD1V49tLABGIrFJGYYFV7dJaeB8nU8xDxaAoLIBWmHIEQLGy7YpbJIARp LGST9JOiwGHpwj4UMUMbt2ALr7VavfF6tbv8N8JIk3SqqUXQARmdHLDoTj7d13Th oF28Z1Q+p98lOi44nrZ7OCIw7M3CGjM= -----END CERTIFICATE-----Generated at Wed Nov 5 03:04:57 2025 by rpki-client