$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa File: 49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa (raw, json) Hash identifier: RS8UpwvY7qIH+niRJ9o70Cd5QMtt5cXf084bdT1YcGk= Subject key identifier: 8B:71:03:75:42:09:89:5D:87:8C:BD:2B:31:CE:0C:C2:A7:3A:50:37 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584AECC1371CA20B3B886F645680 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 35860 IP address blocks: 63.133.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:37:1c:a2:0b:3b:88:6f:64:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bf28e025-8278-4808-81dc-22c4d6e0af77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:de:24:03:1c:30:c5:b9:7b:41:05:75:e9:84: 51:79:bd:82:4a:8d:41:a9:0d:35:00:64:cf:8e:c6: 1a:e0:8b:9b:a6:bf:48:a8:90:3c:2b:fb:37:55:c8: 56:c2:d2:2d:0c:57:6c:de:3e:09:89:b5:7f:9d:f3: cf:76:99:df:a4:48:12:e5:4e:a0:78:96:af:0d:e2: a4:67:38:a5:a5:28:ec:ed:25:b0:c2:7a:1e:3c:2b: f6:23:9c:98:71:a8:c7:0d:2f:b3:2d:25:68:b4:41: f9:56:82:0d:c7:95:0b:e3:8c:1b:41:23:1a:2a:a7: 57:5c:5b:a2:b1:0e:a1:0e:0a:b7:73:46:81:43:d5: ce:9b:53:13:48:0a:d3:49:c2:0a:c9:48:0f:d4:da: 41:a1:60:9b:85:97:28:51:f8:fd:44:ce:37:1e:3d: 83:8a:58:bc:da:cc:6d:39:78:86:a5:1c:00:76:96: 53:1a:08:95:87:ca:97:15:87:67:1b:92:7f:bc:80: fd:d0:f2:b6:b0:15:96:01:d1:83:51:b8:45:1e:41: e0:aa:0b:40:dd:79:f0:a1:a3:22:14:75:6e:f2:41: 97:fe:eb:b3:db:02:23:42:cf:6b:3a:3f:f2:d5:78: 09:35:f2:d3:3c:2a:8e:24:c1:b6:81:0b:b6:3e:3b: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:71:03:75:42:09:89:5D:87:8C:BD:2B:31:CE:0C:C2:A7:3A:50:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:53:6c:22:b5:3e:40:52:11:ab:64:8e:bb:44:27:c8:4a:7a: c4:56:fb:24:54:2c:d8:a3:79:dc:f9:36:8b:d4:83:5c:44:ac: 74:0a:e3:a8:c5:86:9e:d4:81:f8:67:b6:1a:8f:d8:73:79:2e: 14:87:02:42:a8:45:d9:6d:07:8a:ba:e4:53:72:a5:4f:fb:5a: 1f:05:74:3d:12:ef:e3:4b:3c:41:81:8d:88:2c:2f:6e:aa:2e: 8e:9b:51:20:c0:56:ad:b7:5d:f5:7d:4f:6a:1f:86:d2:c4:21: a6:38:57:11:d3:9d:1d:9a:64:d2:a4:21:ab:a3:bd:0c:86:c2: 3c:d3:c9:99:4b:8b:ba:de:42:b2:bf:89:c8:92:d8:03:7a:1b: 34:b0:81:8c:a4:a2:30:ee:b6:27:09:82:a2:01:fe:23:77:fc: 7d:8b:25:11:42:03:03:b6:2f:14:93:98:ba:2a:62:47:9c:ec: f0:3a:7c:d7:b3:84:7d:75:e6:ea:a4:8a:ec:8d:6b:6f:bf:91: b6:1f:db:84:2a:e4:7f:25:10:68:56:75:03:67:80:60:7b:9f: 8c:bb:ce:1e:43:d3:77:15:f3:75:48:28:45:e2:8f:1c:e0:90: 22:3b:3c:d2:fd:6a:47:59:d4:5a:67:6f:f9:8e:d5:a9:52:d8: 79:6c:ab:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTccogs7iG9kVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmYyOGUwMjUtODI3OC00ODA4LTgxZGMtMjJjNGQ2ZTBhZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt4kAxwwxbl7QQV16YRReb2CSo1BqQ01AGTP jsYa4Iubpr9IqJA8K/s3VchWwtItDFds3j4JibV/nfPPdpnfpEgS5U6geJavDeKk ZzilpSjs7SWwwnoePCv2I5yYcajHDS+zLSVotEH5VoINx5UL44wbQSMaKqdXXFui sQ6hDgq3c0aBQ9XOm1MTSArTScIKyUgP1NpBoWCbhZcoUfj9RM43Hj2Dili82sxt OXiGpRwAdpZTGgiVh8qXFYdnG5J/vID90PK2sBWWAdGDUbhFHkHgqgtA3XnwoaMi FHVu8kGX/uuz2wIjQs9rOj/y1XgJNfLTPCqOJMG2gQu2PjseJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItxA3VCCYldh4y9KzHODMKnOlA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvNDljMzA5MmMtMTdmZS0z YTgxLWIzZWQtMTRmNTU2MjBkOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP4XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNTbCK1PkBSEatkjrtEJ8hKesRW+yRULNijedz5NovUg1xErHQK46jF hp7UgfhnthqP2HN5LhSHAkKoRdltB4q65FNypU/7Wh8FdD0S7+NLPEGBjYgsL26q Lo6bUSDAVq23XfV9T2ofhtLEIaY4VxHTnR2aZNKkIaujvQyGwjzTyZlLi7reQrK/ iciS2AN6GzSwgYykojDuticJgqIB/iN3/H2LJRFCAwO2LxSTmLoqYkec7PA6fNez hH115uqkiuyNa2+/kbYf24Qq5H8lEGhWdQNngGB7n4y7zh5D03cV83VIKEXijxzg kCI7PNL9akdZ1Fpnb/mO1alS2HlsqzY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:40:12 2025 by rpki-client