$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/030d9054-3788-368e-bdb2-e988acaf43e2.roa File: 030d9054-3788-368e-bdb2-e988acaf43e2.roa (raw, json) Hash identifier: CkHj/8Uw/CMaWIaqHMBqJIWeWg4IN+J6k1+yWfCH5BI= Subject key identifier: 65:B8:E3:43:5F:06:F4:D3:03:29:DE:A7:EC:70:5A:2D:26:90:CA:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0C8000CDD7771E3FB5980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/030d9054-3788-368e-bdb2-e988acaf43e2.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 40.139.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c8:00:0c:dd:77:71:e3:fb:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=ee38a955-c8f9-415f-90ec-66022bf4b244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:a3:b9:6f:16:8c:74:4c:90:ec:9d:99:ca: 30:3e:84:bb:48:3a:7c:4a:12:3e:56:7d:b9:56:ac: 80:4d:9f:7f:7e:c0:4d:29:02:fd:e1:cb:3a:51:03: ff:bf:e0:21:60:67:c6:41:61:d8:67:d7:11:0f:a2: 9a:83:ea:fc:2f:1a:86:0d:77:d6:a3:fd:48:85:c2: d1:14:10:c9:5a:c3:f5:b4:13:5f:58:a8:34:58:d7: 76:30:e8:f1:a5:c4:23:be:d0:3d:fd:1b:b1:fd:fc: 45:d1:64:03:c8:50:a3:b0:16:10:b3:59:cd:ba:8a: b6:cb:12:e5:ac:56:80:00:31:b4:20:38:74:5b:95: ee:82:bc:39:a0:f7:35:ab:b8:0b:e6:7a:73:84:c3: cb:4f:e0:d2:e8:4f:fa:79:fa:c0:b5:6c:27:7c:80: 99:66:88:54:cd:07:11:b3:b7:15:92:86:38:91:d5: 94:27:0f:6e:c0:74:0d:8a:c2:87:73:07:9c:c6:23: fe:bc:07:0f:78:d3:16:1d:78:da:e6:b9:6a:17:65: 52:84:10:ed:fb:3f:57:6d:e2:bc:c3:31:67:9f:11: 63:d8:1a:7a:c0:5f:ac:b0:76:65:53:98:6d:3c:5e: 79:4f:7c:44:84:75:7c:1a:34:a5:41:29:8e:af:0a: 35:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B8:E3:43:5F:06:F4:D3:03:29:DE:A7:EC:70:5A:2D:26:90:CA:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/030d9054-3788-368e-bdb2-e988acaf43e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.139.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:de:8e:58:2c:80:1f:35:e6:78:5f:12:e4:fe:71:2e:7a:bf: 51:d4:c5:f1:df:f5:5b:5d:dd:bf:74:d1:cd:e3:89:26:19:5e: 11:b0:d4:65:78:1e:ca:30:93:6f:36:52:69:31:ee:82:3f:9a: 51:e7:b6:5b:ee:49:75:73:fa:5b:b7:7b:95:bc:ab:f1:09:32: 04:65:55:2e:f5:53:4a:1b:30:59:2c:e5:b7:e3:5c:b8:fe:f9: 31:a7:b5:df:56:5d:9f:b9:1c:12:14:9b:2b:2f:d7:36:23:ba: f7:44:08:f5:ac:eb:87:89:7a:ca:af:be:12:63:9c:63:17:2f: d3:50:dc:af:a4:8b:ce:ac:db:9f:3a:05:17:4d:c3:b0:34:b2: 73:b1:1a:b1:99:37:c2:b8:87:92:5e:55:17:16:fe:1d:a1:be: a9:a2:f8:ce:61:b9:58:ef:ad:ec:ad:96:e8:92:ad:9d:d6:09: be:07:86:78:5d:d6:37:b7:bb:26:a7:d9:78:b5:f3:cf:59:15: b6:01:f4:0b:a4:42:6b:a7:73:ae:47:6e:93:ca:c7:ca:7c:80: 81:f6:14:48:14:d1:ee:f2:8f:da:45:41:5f:0e:0a:38:c1:42: c0:35:51:c5:f8:4d:b3:32:f5:d1:6c:d4:f8:ca:54:e7:b4:f4: bc:bd:30:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMgADN13ceP7WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZWUzOGE5NTUtYzhmOS00MTVmLTkwZWMtNjYwMjJiZjRiMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh+juW8WjHRMkOydmcowPoS7SDp8ShI+Vn25 VqyATZ9/fsBNKQL94cs6UQP/v+AhYGfGQWHYZ9cRD6Kag+r8LxqGDXfWo/1IhcLR FBDJWsP1tBNfWKg0WNd2MOjxpcQjvtA9/Rux/fxF0WQDyFCjsBYQs1nNuoq2yxLl rFaAADG0IDh0W5Xugrw5oPc1q7gL5npzhMPLT+DS6E/6efrAtWwnfICZZohUzQcR s7cVkoY4kdWUJw9uwHQNisKHcwecxiP+vAcPeNMWHXja5rlqF2VShBDt+z9XbeK8 wzFnnxFj2Bp6wF+ssHZlU5htPF55T3xEhHV8GjSlQSmOrwo1/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGW440NfBvTTAynep+xwWi0mkMqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDMwZDkwNTQtMzc4OC0z NjhlLWJkYjItZTk4OGFjYWY0M2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIvRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLejlgsgB815nhfEuT+cS56v1HUxfHf9Vtd3b900c3jiSYZXhGw1GV4 Hsowk282Umkx7oI/mlHntlvuSXVz+lu3e5W8q/EJMgRlVS71U0obMFks5bfjXLj+ +TGntd9WXZ+5HBIUmysv1zYjuvdECPWs64eJesqvvhJjnGMXL9NQ3K+ki86s2586 BRdNw7A0snOxGrGZN8K4h5JeVRcW/h2hvqmi+M5huVjvreytluiSrZ3WCb4Hhnhd 1je3uyan2Xi1889ZFbYB9AukQmunc65HbpPKx8p8gIH2FEgU0e7yj9pFQV8OCjjB QsA1UcX4TbMy9dFs1PjKVOe09Ly9MJ8= -----END CERTIFICATE-----Generated at Sat Aug 9 02:49:58 2025 by rpki-client