$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea6e8c50-a39d-30cc-a6d5-963165a4fe6a.roa File: ea6e8c50-a39d-30cc-a6d5-963165a4fe6a.roa (raw, json) Hash identifier: EZaHNguME42PJUOpyKqYg7mJXDWU8c/7MrOYGGj9fao= Subject key identifier: 7E:E4:D0:92:73:39:66:62:B8:84:C5:B6:59:26:69:6F:44:36:FC:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0C897D147300E45426D20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea6e8c50-a39d-30cc-a6d5-963165a4fe6a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 63.246.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c8:97:d1:47:30:0e:45:42:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=3eb38c50-231e-4e12-9fe5-ab9261d8baab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0f:92:13:2a:ab:97:bf:f6:39:95:52:75:f8: c9:18:73:26:45:e3:9a:49:99:94:81:f0:f0:cb:37: 77:5a:fe:1c:cd:37:da:aa:a8:96:5b:02:0a:fd:5d: f9:7a:09:36:fd:0d:a1:63:9a:53:07:0f:d5:ce:99: da:71:09:e6:9d:d0:c6:6d:e3:7b:7f:aa:33:13:61: 24:21:7a:17:8d:74:04:14:60:e5:1a:55:f3:9b:bd: be:cb:d3:1a:e7:0b:f7:bf:eb:18:f7:db:d6:af:63: b8:c4:c5:2b:78:77:d8:91:98:3d:50:5c:69:e7:63: 84:33:0a:a3:c6:a3:73:bd:0e:a6:92:1d:62:53:d5: 0e:44:e5:0d:82:db:3e:ba:a4:c7:db:05:aa:87:a2: 53:91:6a:7b:c1:95:13:ec:ef:8b:41:80:1a:0a:81: c6:7a:ae:69:14:36:d8:72:15:6f:3f:42:62:32:b3: 47:c8:33:98:0b:14:a9:f9:0f:09:0f:95:d7:c4:01: 34:7e:3e:8a:98:c8:43:a8:31:b2:1d:e9:bb:b7:5d: 7c:3e:39:5f:4d:5d:e3:2c:e3:e7:20:39:40:33:aa: fa:f1:c9:67:15:46:57:71:63:ac:2d:90:97:7f:2b: 23:60:9f:3b:87:45:1f:42:dd:6a:80:bb:eb:a2:4d: 29:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E4:D0:92:73:39:66:62:B8:84:C5:B6:59:26:69:6F:44:36:FC:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea6e8c50-a39d-30cc-a6d5-963165a4fe6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.246.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:5d:78:ba:e8:d1:6b:61:2f:16:e8:d7:48:ac:1e:d8:0c:ad: fb:6e:83:e8:81:3e:86:23:11:37:de:77:8b:31:4d:ac:37:b0: 11:3a:0b:34:41:a5:a5:11:a2:87:a2:0f:27:2f:39:1c:bc:13: 37:39:f7:b1:58:cd:c9:8d:e6:16:f4:0b:26:b5:51:2e:26:d9: cc:36:0c:c8:fa:50:ad:d2:60:4c:ad:8b:5f:15:58:3d:2d:24: 85:8e:af:e1:6b:a5:56:a6:2c:b3:0b:d3:fd:cc:34:a7:65:4b: 38:c2:42:60:52:75:f6:6f:c5:36:40:3a:27:c3:60:23:f5:8d: 15:55:69:3b:a7:06:7c:79:f2:3a:e1:ea:e6:8a:83:97:12:69: 6f:61:7f:87:87:9b:63:28:6b:cf:db:bd:01:c3:d1:e2:6b:ca: d3:bb:22:4f:1b:5a:9d:88:1e:f2:98:08:4e:87:f0:62:a9:d3: 0a:4a:5a:b7:94:3e:fb:17:da:de:7f:c9:67:53:bd:be:17:37: 2a:ad:80:c6:d2:7e:ca:63:39:09:6b:28:cd:5c:f3:be:ac:54: 0c:86:72:63:2c:24:9d:59:78:20:22:57:11:a4:be:c6:7c:ec: 09:ec:3f:fd:cf:ec:c0:96:9d:61:42:e2:78:76:d5:c6:f3:e9: 47:49:08:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMiX0UcwDkVCbSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk M2ViMzhjNTAtMjMxZS00ZTEyLTlmZTUtYWI5MjYxZDhiYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA+SEyqrl7/2OZVSdfjJGHMmReOaSZmUgfDw yzd3Wv4czTfaqqiWWwIK/V35egk2/Q2hY5pTBw/VzpnacQnmndDGbeN7f6ozE2Ek IXoXjXQEFGDlGlXzm72+y9Ma5wv3v+sY99vWr2O4xMUreHfYkZg9UFxp52OEMwqj xqNzvQ6mkh1iU9UOROUNgts+uqTH2wWqh6JTkWp7wZUT7O+LQYAaCoHGeq5pFDbY chVvP0JiMrNHyDOYCxSp+Q8JD5XXxAE0fj6KmMhDqDGyHem7t118PjlfTV3jLOPn IDlAM6r68clnFUZXcWOsLZCXfysjYJ87h0UfQt1qgLvrok0pcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7k0JJzOWZiuITFtlkmaW9ENvwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWE2ZThjNTAtYTM5ZC0z MGNjLWE2ZDUtOTYzMTY1YTRmZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFP/bAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhdeLro0WthLxbo10isHtgMrftug+iBPoYjETfed4sxTaw3sBE6CzRB paURooeiDycvORy8Ezc597FYzcmN5hb0Cya1US4m2cw2DMj6UK3SYEyti18VWD0t JIWOr+FrpVamLLML0/3MNKdlSzjCQmBSdfZvxTZAOifDYCP1jRVVaTunBnx58jrh 6uaKg5cSaW9hf4eHm2Moa8/bvQHD0eJrytO7Ik8bWp2IHvKYCE6H8GKp0wpKWreU PvsX2t5/yWdTvb4XNyqtgMbSfspjOQlrKM1c876sVAyGcmMsJJ1ZeCAiVxGkvsZ8 7AnsP/3P7MCWnWFC4nh21cbz6UdJCH8= -----END CERTIFICATE-----Generated at Tue Aug 5 17:09:02 2025 by rpki-client