$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ba230e1-f21d-38fc-ba3f-7e72c5644594.roa File: 0ba230e1-f21d-38fc-ba3f-7e72c5644594.roa (raw, json) Hash identifier: NTa5L5Jf2eRMsxfi7Mb3WfjTp8r99sRzFHyQEaYUr5o= Subject key identifier: 9C:BB:38:45:B5:EF:FD:D9:3A:2C:41:B3:83:18:0A:B5:30:64:C2:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB221259528DE0069AF4726C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ba230e1-f21d-38fc-ba3f-7e72c5644594.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 40.142.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:25:95:28:de:00:69:af:47:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=c5e087bb-dfdb-49f8-8da1-7e80f0766e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d7:5d:ea:08:84:c1:a6:f6:27:a2:7d:50:57: 12:10:02:46:2b:ea:d2:a0:81:f2:6d:01:d4:cc:e1: 93:c6:46:12:e9:0d:11:37:be:bf:b3:89:d9:78:49: d9:f4:ab:b0:22:03:8c:ab:0a:3f:39:5c:d0:da:e9: 0f:77:df:3d:35:dd:10:d6:9b:ff:89:8d:81:60:ca: ae:4a:d4:d7:77:31:f2:33:d6:c7:29:b7:e9:d5:40: ca:f6:fc:b2:fb:f4:64:66:e3:4d:06:4d:d7:bf:6e: 8f:ab:65:41:38:12:46:d6:4a:e1:09:a8:a1:a8:8c: 42:d4:61:20:ca:3c:ea:b7:db:ad:86:71:92:54:72: 2d:aa:f5:78:80:00:ef:f7:80:01:c3:7a:56:14:55: 21:ed:98:db:59:81:cb:f8:50:f2:4e:56:32:41:fd: 62:89:2f:ca:63:d1:38:1d:dc:57:ea:6a:41:f5:7e: 0c:b8:b1:32:a6:5d:d8:ad:0e:b0:11:9b:31:8a:e4: f5:38:c4:eb:88:cd:f9:94:8f:04:21:d7:ab:7d:31: b6:36:68:f2:a6:4b:4e:e8:99:eb:70:3e:08:81:a1: 65:aa:ce:30:10:93:83:05:90:d8:03:fb:a7:99:52: 10:04:0d:bd:d1:07:fe:25:ba:64:c3:8e:73:c2:b0: 02:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BB:38:45:B5:EF:FD:D9:3A:2C:41:B3:83:18:0A:B5:30:64:C2:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ba230e1-f21d-38fc-ba3f-7e72c5644594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2f:21:ec:3c:34:98:1d:17:fc:21:75:f5:61:02:9f:64:38: 66:b6:62:6a:22:03:d8:df:7b:f1:15:a2:a1:fc:78:12:70:bb: b9:ec:b6:15:ad:b1:4c:81:0d:b0:36:13:3e:8d:a4:93:83:3f: ba:3d:6e:e9:80:02:10:83:af:45:7c:23:17:01:48:6a:be:54: df:e1:13:bf:26:57:fd:3d:d4:1c:ea:f9:84:9b:65:81:cf:fa: 9a:df:6b:00:f7:5e:46:7b:5c:a3:53:a8:a8:10:dd:18:f7:ec: 23:1c:5b:4b:cc:89:01:2f:f9:aa:0e:60:e9:c0:f3:50:e6:38: cf:5b:48:5a:2a:1d:cd:36:95:f6:05:32:71:30:9c:e1:52:2c: b5:aa:cc:7b:5f:f7:3c:9e:d3:63:61:2a:32:1e:31:78:c3:74: 7d:89:a5:3a:fc:63:ee:47:c2:9f:3c:a9:a0:6e:f2:80:7f:e2: f6:58:52:f0:36:bf:0a:dd:84:bd:f8:bd:43:ff:26:85:b6:31: bc:96:00:f5:88:da:90:4d:32:b5:bb:f5:3e:02:32:cd:c1:88: e3:fd:af:6f:91:83:8e:b3:ec:90:1a:20:57:b3:05:ea:8d:76: fb:80:7a:dd:5c:cd:9b:35:c2:f1:a7:2e:7f:f2:9e:13:76:b1: 76:d9:8c:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISWVKN4Aaa9HJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzVlMDg3YmItZGZkYi00OWY4LThkYTEtN2U4MGYwNzY2ZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNdd6giEwab2J6J9UFcSEAJGK+rSoIHybQHU zOGTxkYS6Q0RN76/s4nZeEnZ9KuwIgOMqwo/OVzQ2ukPd989Nd0Q1pv/iY2BYMqu StTXdzHyM9bHKbfp1UDK9vyy+/RkZuNNBk3Xv26Pq2VBOBJG1krhCaihqIxC1GEg yjzqt9uthnGSVHItqvV4gADv94ABw3pWFFUh7ZjbWYHL+FDyTlYyQf1iiS/KY9E4 HdxX6mpB9X4MuLEypl3YrQ6wEZsxiuT1OMTriM35lI8EIderfTG2NmjypktO6Jnr cD4IgaFlqs4wEJODBZDYA/unmVIQBA290Qf+Jbpkw45zwrACMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJy7OEW17/3ZOixBs4MYCrUwZMJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGJhMjMwZTEtZjIxZC0z OGZjLWJhM2YtN2U3MmM1NjQ0NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEvIew8NJgdF/whdfVhAp9kOGa2YmoiA9jfe/EVoqH8eBJwu7nsthWt sUyBDbA2Ez6NpJODP7o9bumAAhCDr0V8IxcBSGq+VN/hE78mV/091Bzq+YSbZYHP +prfawD3XkZ7XKNTqKgQ3Rj37CMcW0vMiQEv+aoOYOnA81DmOM9bSFoqHc02lfYF MnEwnOFSLLWqzHtf9zye02NhKjIeMXjDdH2JpTr8Y+5Hwp88qaBu8oB/4vZYUvA2 vwrdhL34vUP/JoW2MbyWAPWI2pBNMrW79T4CMs3BiOP9r2+Rg46z7JAaIFezBeqN dvuAet1czZs1wvGnLn/ynhN2sXbZjCY= -----END CERTIFICATE-----Generated at Wed Aug 6 14:16:26 2025 by rpki-client