$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fbfc454-4acf-3c45-8bfc-384a6780f33a.roa File: 9fbfc454-4acf-3c45-8bfc-384a6780f33a.roa (raw, json) Hash identifier: QJc4xs7vaoZQYbEwRUhcKTcf/vGcUUVSNni1l/Ru2kQ= Subject key identifier: 7E:73:42:2E:2C:C8:FA:85:D8:6D:F9:B0:95:B4:D7:30:DB:72:01:E4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F5F42F5D6C22001A4F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fbfc454-4acf-3c45-8bfc-384a6780f33a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 63.254.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f5:f4:2f:5d:6c:22:00:1a:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f6ec098d-f72b-4baf-b52d-6676fd400f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:9a:da:cd:2c:78:28:23:ce:9e:c8:ed:2c: 5e:ae:7d:57:91:39:c6:e6:c5:82:9f:0a:72:76:e5: 36:8b:29:4e:2e:fc:55:93:41:a7:1f:3a:a9:40:0d: 47:3e:13:80:bd:9e:b0:52:c9:05:66:91:b9:8d:3b: 34:02:ea:f7:6c:f8:48:c5:fe:fa:ff:07:fa:a2:7e: 12:fe:cb:b7:7e:10:41:2d:4b:30:f1:91:fd:49:51: ee:51:6d:87:b8:be:d3:79:da:c3:42:c8:34:9a:ab: 26:98:c3:62:a9:76:bd:fe:dd:ff:d0:67:1a:a5:d1: 7c:c8:f9:f6:b1:31:f9:12:9c:e6:70:00:a1:a3:78: 9d:cf:08:c1:20:ba:66:39:9f:1d:27:2d:e3:e7:e4: 6a:9e:aa:d0:1c:09:ae:4d:ac:c3:87:12:db:5a:2e: db:54:96:66:40:f2:f9:5b:60:42:87:0d:a5:8c:cb: 82:c7:89:d4:45:25:2c:17:eb:6c:06:ea:59:1a:9e: e4:41:11:03:dc:34:70:16:8d:f2:8f:26:b8:d3:55: ab:5a:90:d8:ee:9a:07:5d:4c:dd:2f:c3:fc:b6:92: ac:34:e4:c1:74:73:a9:1c:86:41:19:18:bb:4b:c3: 6f:2b:b6:5b:e0:ff:e0:2f:a8:24:5e:9d:2c:ad:ff: cb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:73:42:2E:2C:C8:FA:85:D8:6D:F9:B0:95:B4:D7:30:DB:72:01:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fbfc454-4acf-3c45-8bfc-384a6780f33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.254.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3c:c6:6d:d1:f5:e0:31:89:b6:48:97:44:73:8f:20:11:b5: a6:39:19:b5:6b:9e:99:07:3d:68:4b:4e:eb:74:1a:77:4d:66: d1:17:eb:c3:0f:62:23:e1:59:65:0d:7a:fa:a1:6d:a5:2d:82: 0e:45:12:05:13:11:e9:47:ad:e5:23:8c:64:ee:5f:9b:54:b1: 4f:2d:4b:12:69:a4:ad:b6:05:42:29:b4:4a:1f:8f:7a:04:d4: e7:fd:8c:a1:c4:cd:b2:79:b6:2e:66:c1:2c:c2:52:4b:ee:3f: f4:cc:b0:cd:b5:2c:3b:6a:f6:64:03:f4:20:67:94:a8:c7:f4: 7c:10:85:09:65:ec:34:c3:f4:83:c6:9e:fd:c4:b8:87:33:ae: 87:83:24:d9:8e:c2:b2:06:1c:28:76:d5:1d:65:ae:21:c0:d9: 28:de:93:97:de:9a:12:e6:cc:02:fe:ce:77:56:96:5b:b9:bc: 51:3c:bd:01:92:b6:cd:af:ba:c1:99:d0:6c:f6:08:de:46:4e: 60:09:4d:cc:c6:5d:ea:a4:c3:37:04:5b:37:db:cc:7d:e8:52: 45:d1:c2:16:4d:07:25:b7:65:a0:b9:31:36:b8:13:7e:a1:a4: 05:36:e5:42:6e:62:ae:09:b3:43:4e:07:7f:fc:c3:90:a7:07: bd:39:54:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPX0L11sIgAaT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjZlYzA5OGQtZjcyYi00YmFmLWI1MmQtNjY3NmZkNDAwZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpWa2s0seCgjzp7I7Sxern1XkTnG5sWCnwpy duU2iylOLvxVk0GnHzqpQA1HPhOAvZ6wUskFZpG5jTs0Aur3bPhIxf76/wf6on4S /su3fhBBLUsw8ZH9SVHuUW2HuL7TedrDQsg0mqsmmMNiqXa9/t3/0GcapdF8yPn2 sTH5EpzmcACho3idzwjBILpmOZ8dJy3j5+RqnqrQHAmuTazDhxLbWi7bVJZmQPL5 W2BChw2ljMuCx4nURSUsF+tsBupZGp7kQRED3DRwFo3yjya401WrWpDY7poHXUzd L8P8tpKsNOTBdHOpHIZBGRi7S8NvK7Zb4P/gL6gkXp0srf/LdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5zQi4syPqF2G35sJW01zDbcgHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWZiZmM0NTQtNGFjZi0z YzQ1LThiZmMtMzg0YTY3ODBmMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP/6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM8xm3R9eAxibZIl0RzjyARtaY5GbVrnpkHPWhLTut0GndNZtEX68MP YiPhWWUNevqhbaUtgg5FEgUTEelHreUjjGTuX5tUsU8tSxJppK22BUIptEofj3oE 1Of9jKHEzbJ5ti5mwSzCUkvuP/TMsM21LDtq9mQD9CBnlKjH9HwQhQll7DTD9IPG nv3EuIczroeDJNmOwrIGHCh21R1lriHA2Sjek5femhLmzAL+zndWllu5vFE8vQGS ts2vusGZ0Gz2CN5GTmAJTczGXeqkwzcEWzfbzH3oUkXRwhZNByW3ZaC5MTa4E36h pAU25UJuYq4Js0NOB3/8w5CnB705VOM= -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:54 2025 by rpki-client