$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afbd72a2-a1c5-3aac-aa05-7b34f2ce8b61.roa File: afbd72a2-a1c5-3aac-aa05-7b34f2ce8b61.roa (raw, json) Hash identifier: 71yWWJUYXMq5Qy842OTZt4xHQt0djD9bMpgcy0yNIuo= Subject key identifier: 52:53:95:02:1E:70:F3:AF:3F:FA:98:46:F5:DE:F5:9A:FE:55:1C:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F5AA74276A7ADAEAD1C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afbd72a2-a1c5-3aac-aa05-7b34f2ce8b61.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 63.246.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f5:aa:74:27:6a:7a:da:ea:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=5baf15ae-6686-4c95-a5a2-5b5613ba8f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:62:0c:a6:eb:8c:bf:e3:29:b0:46:ae:7d:a5: bf:a7:fd:fa:68:7d:5f:b1:6d:e3:c8:68:85:b5:79: 54:94:cb:44:fc:29:b5:2a:de:36:b2:74:11:3d:ff: 7d:25:18:d6:b8:ec:37:05:28:48:04:a0:e0:7e:8f: e8:2d:31:7f:48:c8:bb:32:82:30:38:16:59:b4:13: 8f:65:ed:ff:c8:fb:0d:ce:95:02:15:b8:e8:ef:10: 04:fe:30:f9:1b:8a:4f:8e:fa:19:af:7c:2c:b5:96: f2:70:32:4d:06:25:74:31:88:d7:75:ec:b0:09:e5: c0:19:84:57:37:3b:11:35:a9:dc:eb:30:44:b3:d3: 43:4b:7c:61:cc:16:1f:57:1f:70:84:ab:ab:5e:d2: b2:be:3f:11:16:46:7b:15:17:d5:61:94:f9:4e:fe: 25:3c:98:0f:65:00:7e:ad:b4:2e:33:af:82:76:29: 96:7a:d8:0a:54:50:5c:d9:f2:32:b6:41:05:e2:76: b5:90:9d:54:02:45:ee:0b:df:43:67:4d:a0:73:5e: 71:64:7c:b6:92:e0:e9:4a:79:81:48:24:9e:56:55: 58:61:af:46:9b:df:7e:99:0e:bb:29:a8:2a:73:6c: 12:9a:b5:64:47:b4:95:db:ea:6f:15:83:49:92:d2: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:53:95:02:1E:70:F3:AF:3F:FA:98:46:F5:DE:F5:9A:FE:55:1C:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afbd72a2-a1c5-3aac-aa05-7b34f2ce8b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.246.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c6:0b:12:37:3d:dc:4b:7c:6f:8f:5e:e2:0c:57:4d:e5:c8: 39:7b:6c:5e:a1:a7:a2:ca:75:58:43:c1:33:8e:84:13:d3:33: 2d:3a:fe:6b:31:68:b0:50:61:fb:74:9c:dc:dd:11:68:e0:91: 29:8e:ba:24:3a:ac:f3:ad:37:5f:7f:02:68:20:e8:ec:cc:e0: 43:8d:6c:48:ec:94:99:09:6f:00:5f:c6:5a:47:22:93:d7:e8: 40:17:14:71:21:87:af:e2:d1:4e:f7:c4:d9:64:67:b1:ee:b3: ef:f8:b3:83:80:36:18:4b:05:cf:c4:0a:7d:e2:cf:88:81:6d: a0:6b:e7:a0:51:e5:50:c5:52:83:f3:a5:d5:3c:cf:5b:9c:bb: d7:50:e3:6d:2a:08:a6:fe:76:f6:59:ba:76:7d:b6:13:3f:7d: 1f:18:f9:54:08:43:7f:9a:26:0c:35:c3:50:6a:49:53:d3:ff: 24:7d:d2:c5:ea:04:0d:9b:ee:9a:5c:b9:ac:61:1d:4e:e5:52: 71:57:a1:45:63:c6:99:2c:29:d5:98:92:16:18:de:db:68:a7: db:ea:c8:19:e6:b6:0c:24:33:fc:86:32:54:16:73:38:d7:1b: da:43:01:81:97:22:ed:7a:f0:39:8f:fa:5e:67:49:32:d2:0e: f8:e2:e9:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPWqdCdqetrq0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NWJhZjE1YWUtNjY4Ni00Yzk1LWE1YTItNWI1NjEzYmE4ZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2IMpuuMv+MpsEaufaW/p/36aH1fsW3jyGiF tXlUlMtE/Cm1Kt42snQRPf99JRjWuOw3BShIBKDgfo/oLTF/SMi7MoIwOBZZtBOP Ze3/yPsNzpUCFbjo7xAE/jD5G4pPjvoZr3wstZbycDJNBiV0MYjXdeywCeXAGYRX NzsRNanc6zBEs9NDS3xhzBYfVx9whKurXtKyvj8RFkZ7FRfVYZT5Tv4lPJgPZQB+ rbQuM6+CdimWetgKVFBc2fIytkEF4na1kJ1UAkXuC99DZ02gc15xZHy2kuDpSnmB SCSeVlVYYa9Gm99+mQ67Kagqc2wSmrVkR7SV2+pvFYNJktJsQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJTlQIecPOvP/qYRvXe9Zr+VRxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWZiZDcyYTItYTFjNS0z YWFjLWFhMDUtN2IzNGYyY2U4YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFP/ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELGCxI3PdxLfG+PXuIMV03lyDl7bF6hp6LKdVhDwTOOhBPTMy06/msx aLBQYft0nNzdEWjgkSmOuiQ6rPOtN19/Amgg6OzM4EONbEjslJkJbwBfxlpHIpPX 6EAXFHEhh6/i0U73xNlkZ7Hus+/4s4OANhhLBc/ECn3iz4iBbaBr56BR5VDFUoPz pdU8z1ucu9dQ420qCKb+dvZZunZ9thM/fR8Y+VQIQ3+aJgw1w1BqSVPT/yR90sXq BA2b7ppcuaxhHU7lUnFXoUVjxpksKdWYkhYY3ttop9vqyBnmtgwkM/yGMlQWczjX G9pDAYGXIu168DmP+l5nSTLSDvji6Sw= -----END CERTIFICATE-----Generated at Tue Aug 5 20:04:14 2025 by rpki-client