$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1f8ff7-5e08-3727-83f3-f7fd47f5ce3d.roa File: db1f8ff7-5e08-3727-83f3-f7fd47f5ce3d.roa (raw, json) Hash identifier: 95QMxVetIVMazhJTNz3yIC8jmZUwotArdPwh7Xdkhl8= Subject key identifier: 27:0B:CF:9A:56:83:2B:E1:0C:9B:EB:EB:C4:53:C2:30:78:8A:5F:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F61E775586E3DEB5ACC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1f8ff7-5e08-3727-83f3-f7fd47f5ce3d.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 63.255.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f6:1e:77:55:86:e3:de:b5:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=9f3f632d-67b3-4957-9cd0-59ed3385fc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:22:9d:af:65:66:20:73:d1:a5:83:cc:eb:12: 9c:78:84:4e:71:45:bb:e9:bf:40:77:8e:f5:6f:ef: 4b:2b:87:34:e2:16:e7:08:6d:07:0e:a6:ad:c5:ce: 3d:07:b3:fd:74:17:85:1d:8a:bf:c4:de:93:d6:cb: 54:e3:bf:c3:2c:eb:f3:ae:18:6e:33:47:d8:b4:cf: 4a:36:aa:bc:11:5e:ba:08:02:e6:f4:b7:45:e5:35: e3:e4:eb:13:4b:7c:24:3e:be:6b:27:96:08:52:d3: 0e:03:4c:1b:d3:a9:f2:8b:44:d3:db:b9:6c:6b:9e: 3d:2f:4b:80:7b:84:1d:ac:b0:cc:58:8a:0d:78:72: 2f:c8:9b:d4:79:e3:88:eb:df:71:f3:db:5f:bf:07: cf:88:4c:2c:8f:18:72:ba:79:ad:b3:29:ad:68:9f: 81:f2:42:09:57:f7:8c:db:40:3b:90:2d:80:06:10: df:13:a9:28:8b:cd:56:a8:6e:a7:19:ac:92:9e:fb: 19:55:17:e8:cf:47:39:08:dd:78:f1:12:d4:10:44: df:a8:98:36:c5:51:71:f9:45:ec:31:9f:39:6c:aa: 14:0c:3e:2f:b9:fe:df:e1:73:97:e8:02:bf:ad:69: 94:96:35:cb:b1:41:7f:6a:a3:2b:85:95:b9:6b:fe: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0B:CF:9A:56:83:2B:E1:0C:9B:EB:EB:C4:53:C2:30:78:8A:5F:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1f8ff7-5e08-3727-83f3-f7fd47f5ce3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.255.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:11:22:8b:94:6d:82:47:a2:0d:7f:3e:2a:b5:15:b8:f7:08: 3f:8b:86:9a:9b:e2:bc:1e:20:0a:19:cd:c2:0a:8e:a8:2d:2e: 87:65:96:35:14:7a:e5:c9:82:7f:8c:36:0f:a8:f0:ac:e5:86: 34:78:59:cf:85:4d:67:58:dd:16:e7:da:d2:f1:36:82:74:7b: 39:86:1c:92:13:c7:7d:f5:c3:b2:10:bf:17:0a:56:e4:10:4c: cf:5b:a6:94:7b:29:d4:19:46:c7:30:15:63:cc:53:3e:62:d8: 1e:a4:54:68:2a:0f:f6:37:7e:5c:f7:b4:41:7b:d0:73:6f:95: 5b:aa:de:19:b0:ee:e4:92:26:28:e2:0e:78:4a:17:16:9a:a0: 5c:ca:66:7a:49:56:b1:35:d8:ff:71:84:0f:77:a5:40:2d:61: 45:f5:2e:c8:e9:d4:1e:89:af:6c:4a:fc:7a:4b:c4:cf:93:5a: 17:b4:83:e8:b7:1c:a7:83:58:70:5f:e1:e8:8b:e5:cd:b4:7a: c4:e4:e3:2f:f9:ea:63:f4:52:3f:26:90:ba:18:f7:6d:52:25: 4f:d9:cf:ac:3c:02:23:0d:00:11:81:af:f9:a8:fc:f3:f0:cc: 61:2e:2d:2c:28:ee:52:b0:6b:12:11:0b:5d:5a:fc:10:cd:ef: cb:8d:3c:83 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoPYed1WG4961rMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OWYzZjYzMmQtNjdiMy00OTU3LTljZDAtNTllZDMzODVmYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiKdr2VmIHPRpYPM6xKceIROcUW76b9Ad471 b+9LK4c04hbnCG0HDqatxc49B7P9dBeFHYq/xN6T1stU47/DLOvzrhhuM0fYtM9K Nqq8EV66CALm9LdF5TXj5OsTS3wkPr5rJ5YIUtMOA0wb06nyi0TT27lsa549L0uA e4QdrLDMWIoNeHIvyJvUeeOI699x89tfvwfPiEwsjxhyunmtsymtaJ+B8kIJV/eM 20A7kC2ABhDfE6koi81WqG6nGaySnvsZVRfoz0c5CN148RLUEETfqJg2xVFx+UXs MZ85bKoUDD4vuf7f4XOX6AK/rWmUljXLsUF/aqMrhZW5a/4tMwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCcLz5pWgyvhDJvr68RTwjB4il8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGIxZjhmZjctNWUwOC0z NzI3LTgzZjMtZjdmZDQ3ZjVjZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAP/8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIREii5RtgkeiDX8+KrUVuPcIP4uGmpvivB4gChnNwgqOqC0uh2WWNRR6 5cmCf4w2D6jwrOWGNHhZz4VNZ1jdFufa0vE2gnR7OYYckhPHffXDshC/FwpW5BBM z1umlHsp1BlGxzAVY8xTPmLYHqRUaCoP9jd+XPe0QXvQc2+VW6reGbDu5JImKOIO eEoXFpqgXMpmeklWsTXY/3GED3elQC1hRfUuyOnUHomvbEr8ekvEz5NaF7SD6Lcc p4NYcF/h6IvlzbR6xOTjL/nqY/RSPyaQuhj3bVIlT9nPrDwCIw0AEYGv+aj88/DM YS4tLCjuUrBrEhELXVr8EM3vy408gw== -----END CERTIFICATE-----Generated at Tue Aug 5 16:49:29 2025 by rpki-client