$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4859443b-249c-3fba-8db4-46b941af7483.roa File: 4859443b-249c-3fba-8db4-46b941af7483.roa (raw, json) Hash identifier: 6aKlTOtW2aRsFPVFwRAZKZj2dtBxaDVN6O2xjXZSv6w= Subject key identifier: 8B:6E:5A:8C:75:64:E6:50:12:F9:31:4A:A9:9F:A0:FF:96:A6:F2:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A10838E98BF6A0165E2480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4859443b-249c-3fba-8db4-46b941af7483.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 36104 IP address blocks: 63.255.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:08:38:e9:8b:f6:a0:16:5e:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=9f073f3f-b70c-4856-b2e6-a681d24bb918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:23:6f:2f:73:df:dc:21:a2:9b:d0:dd:f2:d6: 9a:d2:d5:4c:58:0c:9b:ae:35:5d:1c:74:e1:f7:d0: f3:19:9f:12:4a:ce:95:7a:47:50:16:7b:db:b6:16: 91:44:64:0f:df:70:f1:a3:16:05:19:0d:af:f8:d2: 37:ee:d2:ca:51:ad:b4:1c:ac:af:7a:55:52:3a:88: 7e:d4:20:34:ca:15:36:d7:d8:bc:8d:aa:cd:48:b7: 6f:cf:69:65:88:08:0a:92:76:71:09:4e:c8:7f:92: 3f:61:f6:aa:5b:a2:77:05:3d:e3:6c:17:5d:b9:b0: aa:23:d3:8c:3b:a4:3a:f6:aa:19:d4:ac:e5:36:55: 49:32:d2:93:c5:8d:f8:2f:5f:a7:d8:51:43:04:71: 6e:89:a2:c4:af:47:0f:c2:98:18:2f:18:ab:45:88: 9f:62:22:16:ed:13:d4:0e:39:f2:a7:55:ea:6d:19: d6:61:a7:30:25:51:a5:49:06:50:de:a4:d5:74:b1: ec:0a:ce:cc:1a:02:ca:0a:87:93:c3:4f:7f:32:b1: f3:7f:b2:3c:12:d2:e9:ac:eb:27:e4:04:f4:75:2f: c9:f5:3f:99:81:ad:46:41:2c:b9:02:c2:54:6d:ef: e5:85:36:f3:eb:2a:a3:42:17:9a:e0:cf:f9:ba:8a: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6E:5A:8C:75:64:E6:50:12:F9:31:4A:A9:9F:A0:FF:96:A6:F2:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4859443b-249c-3fba-8db4-46b941af7483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.255.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:1b:5a:2c:a9:2f:77:96:e2:f9:70:e1:78:f6:0e:d9:9f:30: 73:50:bf:74:df:cd:1e:4c:b5:f5:32:f5:ca:73:13:7d:ad:b7: a8:bf:34:16:5d:81:a1:38:c2:b1:e2:e0:e4:d2:92:ee:3f:b3: ce:07:04:fd:b8:df:de:ef:f8:83:b6:d6:0c:9f:d0:d3:95:4d: 65:55:24:4d:63:94:30:f5:f3:e3:f8:c5:34:3a:9f:2d:0b:d0: ab:48:a8:a1:b0:45:2b:45:8c:5f:13:13:7e:f7:6e:d7:29:e3: 67:00:f8:14:44:51:c6:d9:75:bc:e0:47:26:96:89:05:07:ad: 7b:c4:0d:b8:96:e7:37:c1:4a:5b:b1:3e:f0:71:67:61:95:48: ac:50:6f:a1:b6:c9:30:83:d5:5c:6e:5e:59:d5:8b:4f:d1:72: f6:33:16:67:bb:4b:4f:70:17:ec:02:70:9d:45:8b:66:90:05: fc:3d:a2:44:9a:8b:50:01:fb:2a:9e:40:39:88:46:2d:b6:dc: ad:86:c5:18:cb:47:81:32:11:23:9d:ba:44:ad:f7:8c:8d:ec: b9:3f:18:68:eb:b2:5e:3c:4a:26:7a:99:16:66:38:e4:8e:3e: 1e:64:1e:43:1b:74:cf:38:97:7c:d3:c2:3e:25:e6:34:fa:b9: 49:12:a1:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQg46Yv2oBZeJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OWYwNzNmM2YtYjcwYy00ODU2LWIyZTYtYTY4MWQyNGJiOTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSNvL3Pf3CGim9Dd8taa0tVMWAybrjVdHHTh 99DzGZ8SSs6VekdQFnvbthaRRGQP33DxoxYFGQ2v+NI37tLKUa20HKyvelVSOoh+ 1CA0yhU219i8jarNSLdvz2lliAgKknZxCU7If5I/YfaqW6J3BT3jbBddubCqI9OM O6Q69qoZ1KzlNlVJMtKTxY34L1+n2FFDBHFuiaLEr0cPwpgYLxirRYifYiIW7RPU Djnyp1XqbRnWYacwJVGlSQZQ3qTVdLHsCs7MGgLKCoeTw09/MrHzf7I8EtLprOsn 5AT0dS/J9T+Zga1GQSy5AsJUbe/lhTbz6yqjQhea4M/5uoo4IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItuWox1ZOZQEvkxSqmfoP+WpvIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDg1OTQ0M2ItMjQ5Yy0z ZmJhLThkYjQtNDZiOTQxYWY3NDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/89MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEbWiypL3eW4vlw4Xj2DtmfMHNQv3TfzR5MtfUy9cpzE32tt6i/NBZd gaE4wrHi4OTSku4/s84HBP24397v+IO21gyf0NOVTWVVJE1jlDD18+P4xTQ6ny0L 0KtIqKGwRStFjF8TE373btcp42cA+BREUcbZdbzgRyaWiQUHrXvEDbiW5zfBSlux PvBxZ2GVSKxQb6G2yTCD1VxuXlnVi0/RcvYzFme7S09wF+wCcJ1Fi2aQBfw9okSa i1AB+yqeQDmIRi223K2GxRjLR4EyESOdukSt94yN7Lk/GGjrsl48SiZ6mRZmOOSO Ph5kHkMbdM84l3zTwj4l5jT6uUkSoco= -----END CERTIFICATE-----Generated at Thu Aug 7 14:44:46 2025 by rpki-client