$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7cd09ab-82fd-32a1-bf5f-3993b436ba24.roa File: d7cd09ab-82fd-32a1-bf5f-3993b436ba24.roa (raw, json) Hash identifier: l4g6ugHsztvP7Lz99iD1iGe4d6dvdaP4W0hq1kUtfvI= Subject key identifier: 76:19:20:E0:5F:93:4B:D6:28:32:00:BB:86:F6:5D:B7:D2:A1:C1:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B7B21F605948EEE2AB298DCC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7cd09ab-82fd-32a1-bf5f-3993b436ba24.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 63.254.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f6:05:94:8e:ee:2a:b2:98:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=cae1bf6f-f2c4-4650-9dfa-c5d244dc23ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:75:74:35:a2:16:7c:81:ea:89:fc:44:ad:a6: 8d:07:68:57:ba:bc:ed:5b:7a:77:54:ee:93:e7:80: 2c:d1:75:1a:57:e1:26:c2:0d:cc:a4:b8:43:d7:e8: 5a:21:f7:d2:db:ff:81:38:9b:34:ec:c1:80:04:eb: e9:2b:57:c1:53:0c:f6:1f:c8:0f:d2:99:5e:ba:7d: 2c:a6:0c:e0:5a:c0:89:17:ff:c1:96:d8:79:0f:26: 97:64:84:b5:61:f4:13:8d:e5:3e:2b:a5:78:66:ce: c1:b3:67:5d:3e:ae:5e:af:c7:0e:cc:9d:70:03:9e: 3b:ba:78:68:58:81:c9:21:ac:91:83:25:11:bb:ba: c6:7a:35:2f:3c:13:eb:ec:52:99:00:44:eb:c2:c1: 53:8c:ea:86:ae:5b:48:cd:84:bd:0b:ae:83:03:6a: 81:a0:a5:a4:85:4d:53:07:1b:c7:bb:23:00:cb:b9: 29:89:a8:74:83:1a:88:cd:96:cd:97:c0:e2:3a:67: 5a:ed:fd:b2:4d:c0:67:c5:46:47:bb:b9:e1:76:fc: 2f:19:0b:8e:a5:e5:3e:d5:d7:06:0d:1b:8c:5a:c1: 0c:65:3a:59:bb:8e:04:ac:bc:d4:6e:2d:33:4b:53: 51:4a:5e:5a:f0:a9:08:0e:48:5a:f6:89:aa:db:6f: cd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:19:20:E0:5F:93:4B:D6:28:32:00:BB:86:F6:5D:B7:D2:A1:C1:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7cd09ab-82fd-32a1-bf5f-3993b436ba24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.254.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ef:1b:bb:0e:26:32:c7:15:21:ec:e8:6b:6e:f1:22:7b:c8: ca:6f:e9:b1:24:fa:bf:7e:df:c1:22:01:91:1c:94:8f:6d:e2: a0:2a:6b:63:bc:d4:2d:4c:5b:a2:0d:e6:16:d8:1c:91:5c:ef: 44:81:f5:f8:37:e4:6f:9a:93:52:30:65:d7:48:1c:0e:95:e3: ec:fa:3a:cd:6c:79:c8:66:79:7b:5a:ad:66:d7:59:d5:22:bf: e9:e5:28:aa:95:6a:9c:72:6c:ea:70:fd:bb:a6:af:aa:1e:98: db:91:83:ee:86:10:0f:33:7b:c1:d5:4e:a8:d9:96:63:11:1c: c7:ed:f4:7b:f6:d7:8f:90:b7:d6:e7:7c:be:f9:83:32:80:c6: 29:7b:e2:42:b8:36:55:1f:d8:14:ea:f1:e4:60:4e:f4:ba:30: e5:59:66:a3:22:d6:69:9b:0b:f1:59:4a:c7:aa:f2:06:f9:ed: 20:e5:00:62:0c:6c:4b:09:42:9b:ec:e0:ea:45:70:bd:be:ce: f1:51:16:48:49:77:35:b8:43:3c:86:60:f3:1f:e7:df:bb:52: d1:a3:bd:b2:36:81:49:91:63:7f:36:c0:1e:fd:20:ed:da:0d: 79:d7:a4:c7:c6:a6:a9:43:98:fb:47:31:50:b3:53:df:36:fa: 5f:5f:60:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfYFlI7uKrKY3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk Y2FlMWJmNmYtZjJjNC00NjUwLTlkZmEtYzVkMjQ0ZGMyM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HV0NaIWfIHqifxEraaNB2hXurztW3p3VO6T 54As0XUaV+Emwg3MpLhD1+haIffS2/+BOJs07MGABOvpK1fBUwz2H8gP0pleun0s pgzgWsCJF//Blth5DyaXZIS1YfQTjeU+K6V4Zs7Bs2ddPq5er8cOzJ1wA547unho WIHJIayRgyURu7rGejUvPBPr7FKZAETrwsFTjOqGrltIzYS9C66DA2qBoKWkhU1T BxvHuyMAy7kpiah0gxqIzZbNl8DiOmda7f2yTcBnxUZHu7nhdvwvGQuOpeU+1dcG DRuMWsEMZTpZu44ErLzUbi0zS1NRSl5a8KkIDkha9omq22/NvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYZIOBfk0vWKDIAu4b2XbfSocHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDdjZDA5YWItODJmZC0z MmExLWJmNWYtMzk5M2I0MzZiYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7vG7sOJjLHFSHs6Gtu8SJ7yMpv6bEk+r9+38EiAZEclI9t4qAqa2O8 1C1MW6IN5hbYHJFc70SB9fg35G+ak1IwZddIHA6V4+z6Os1sechmeXtarWbXWdUi v+nlKKqVapxybOpw/bumr6oemNuRg+6GEA8ze8HVTqjZlmMRHMft9Hv214+Qt9bn fL75gzKAxil74kK4NlUf2BTq8eRgTvS6MOVZZqMi1mmbC/FZSseq8gb57SDlAGIM bEsJQpvs4OpFcL2+zvFRFkhJdzW4QzyGYPMf59+7UtGjvbI2gUmRY382wB79IO3a DXnXpMfGpqlDmPtHMVCzU982+l9fYDE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:47:17 2025 by rpki-client