$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa File: a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa (raw, json) Hash identifier: yhX7WpqwDNBdYboTm6LJPwKT+Twe9e7Gq0wb2pIUO0s= Subject key identifier: AC:36:6A:27:3D:CB:9E:E6:31:0B:CF:82:33:F6:4D:31:E3:AE:87:B5 Certificate issuer: /CN=da2a5577-6855-4d86-a3f1-a04b562e9c06 Certificate serial: 010D0C9F4328584A979B7BAAED4D30485994AE80 Authority key identifier: 48:B8:10:96:24:E1:DE:79:8E:A4:47:64:72:2E:2E:61:2E:54:99:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa Signing time: Mon 21 Jul 2025 13:01:04 +0000 ROA not before: Mon 21 Jul 2025 13:01:04 +0000 ROA not after: Sun 19 Oct 2025 13:01:04 +0000 asID: 32248 IP address blocks: 162.250.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:9b:7b:aa:ed:4d:30:48:59:94:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da2a5577-6855-4d86-a3f1-a04b562e9c06 Validity Not Before: Jul 21 13:01:04 2025 GMT Not After : Oct 19 13:01:04 2025 GMT Subject: CN=4cd387c9-1431-43b6-b0a7-ef504b4536fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d6:25:e6:ef:60:ac:46:c6:1b:38:5b:a4:05: ad:53:c7:67:72:8f:f1:90:f7:5f:25:90:8b:4a:df: 0d:12:12:b5:1d:ab:14:cd:68:2a:75:b2:fe:75:bb: 3d:d6:f9:b8:0d:08:14:af:50:a9:51:72:45:0d:83: ad:7b:1e:8c:9e:7a:a8:48:26:66:56:d7:ce:aa:36: 61:ae:8e:a6:7b:22:8a:3c:af:8a:24:77:c5:d4:94: b3:2c:84:fa:4e:bc:bc:52:73:68:45:13:77:ba:51: ee:51:cd:c7:0b:af:3f:8b:20:41:21:c0:26:2e:d3: b0:0c:09:64:bb:eb:d5:79:25:20:36:f5:d8:e8:f0: b0:17:9f:0a:70:5d:f6:21:85:47:c1:ca:ca:1a:0a: e6:6e:ae:9b:94:35:9b:49:aa:a7:d6:ba:9b:a3:b0: 52:c6:ea:60:6f:a1:10:06:eb:e8:30:40:bd:c2:54: 36:40:ae:b1:d7:b0:71:cf:e0:b4:5d:0b:7a:39:11: ec:ec:f3:8a:66:e5:ec:f5:e6:30:e9:e8:89:2c:d6: 4c:82:ce:86:05:4e:f7:6d:d0:d9:2e:f5:c8:62:31: 00:f1:d7:c6:75:ac:5b:ca:2c:20:9c:4d:ad:98:a7: b1:11:b0:e4:50:18:3a:d1:08:ca:f9:e6:0c:14:1e: 43:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:36:6A:27:3D:CB:9E:E6:31:0B:CF:82:33:F6:4D:31:E3:AE:87:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/a73c81a0-c7cf-3aa8-b452-358d26a129a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06/da2a5577-6855-4d86-a3f1-a04b562e9c06.crl X509v3 Authority Key Identifier: keyid:48:B8:10:96:24:E1:DE:79:8E:A4:47:64:72:2E:2E:61:2E:54:99:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da2a5577-6855-4d86-a3f1-a04b562e9c06.cer sbgp-ipAddrBlock: critical IPv4: 162.250.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:76:f7:bf:a0:5f:54:6a:e3:a1:d3:5e:a3:1e:53:08:6d:64: 04:a1:cb:f3:0f:54:c8:d1:e7:6c:34:b9:f7:0a:31:bd:e9:44: 35:7f:b1:a9:65:b6:5f:49:19:80:28:cd:3a:bb:61:ac:f0:21: 13:0f:b1:32:89:fc:9d:59:9d:f3:af:a7:25:97:ed:a4:bd:92: 88:08:02:11:d6:3d:a2:03:8c:db:1e:dd:c1:e1:30:78:79:07: b3:d6:81:12:a7:24:ca:45:e2:4b:35:40:72:bc:6e:91:c9:2c: 28:06:a6:c9:c0:00:2a:e1:08:f1:2d:c6:d6:ef:f0:04:fa:05: 33:ec:3d:12:f1:65:c6:db:89:43:d2:18:39:09:0e:69:f1:94: 7f:ab:f7:3d:04:1c:99:13:c5:4d:c3:9b:e2:62:9d:8f:ff:51: 25:9c:80:ff:60:08:0d:a5:12:f7:12:c0:2e:31:a1:0d:e8:1f: 9c:6d:97:b3:02:0e:9c:35:d5:66:3f:fc:fc:eb:66:e9:55:9f: 40:41:b4:ae:66:ad:af:27:3a:2a:ee:1b:9d:4e:0c:00:58:92: 90:16:cc:a7:37:5f:dd:01:1c:06:d5:25:ed:d6:8c:4d:c4:88: fd:68:89:3e:d7:49:de:38:4a:89:0e:56:39:84:a5:2b:e8:d4: 55:61:5e:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqXm3uq7U0wSFmUroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEyYTU1NzctNjg1NS00ZDg2LWEzZjEtYTA0YjU2MmU5 YzA2MB4XDTI1MDcyMTEzMDEwNFoXDTI1MTAxOTEzMDEwNFowLzEtMCsGA1UEAxMk NGNkMzg3YzktMTQzMS00M2I2LWIwYTctZWY1MDRiNDUzNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtYl5u9grEbGGzhbpAWtU8dnco/xkPdfJZCL St8NEhK1HasUzWgqdbL+dbs91vm4DQgUr1CpUXJFDYOtex6MnnqoSCZmVtfOqjZh ro6meyKKPK+KJHfF1JSzLIT6Try8UnNoRRN3ulHuUc3HC68/iyBBIcAmLtOwDAlk u+vVeSUgNvXY6PCwF58KcF32IYVHwcrKGgrmbq6blDWbSaqn1rqbo7BSxupgb6EQ BuvoMEC9wlQ2QK6x17Bxz+C0XQt6ORHs7POKZuXs9eYw6eiJLNZMgs6GBU73bdDZ LvXIYjEA8dfGdaxbyiwgnE2tmKexEbDkUBg60QjK+eYMFB5DxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKw2aic9y57mMQvPgjP2TTHjroe1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTJh NTU3Ny02ODU1LTRkODYtYTNmMS1hMDRiNTYyZTljMDYvYTczYzgxYTAtYzdjZi0z YWE4LWI0NTItMzU4ZDI2YTEyOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEyYTU1NzctNjg1NS00ZDg2LWEz ZjEtYTA0YjU2MmU5YzA2L2RhMmE1NTc3LTY4NTUtNGQ4Ni1hM2YxLWEwNGI1NjJl OWMwNi5jcmwwHwYDVR0jBBgwFoAUSLgQliTh3nmOpEdkci4uYS5UmcowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTJhNTU3Ny02ODU1LTRkODYtYTNmMS1hMDRi NTYyZTljMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN297+gX1Rq46HTXqMeUwhtZAShy/MPVMjR52w0ufcKMb3pRDV/sall tl9JGYAozTq7YazwIRMPsTKJ/J1ZnfOvpyWX7aS9kogIAhHWPaIDjNse3cHhMHh5 B7PWgRKnJMpF4ks1QHK8bpHJLCgGpsnAACrhCPEtxtbv8AT6BTPsPRLxZcbbiUPS GDkJDmnxlH+r9z0EHJkTxU3Dm+JinY//USWcgP9gCA2lEvcSwC4xoQ3oH5xtl7MC Dpw11WY//PzrZulVn0BBtK5mra8nOiruG51ODABYkpAWzKc3X90BHAbVJe3WjE3E iP1oiT7XSd44SokOVjmEpSvo1FVhXh4= -----END CERTIFICATE-----Generated at Wed Aug 6 16:27:06 2025 by rpki-client