$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa File: 1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa (raw, json) Hash identifier: O0Lje4ci8NV72jjPxopIpXzKxiJ2oHHItDoODG8FNaQ= Subject key identifier: 14:EE:F7:A4:4F:7D:2B:3A:B0:45:02:DC:B0:0E:E0:6F:EE:5C:86:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB221710355F5EC90948055E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 40.136.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:71:03:55:f5:ec:90:94:80:55:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=481508a9-5a60-4875-8e43-c26358d763c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:2c:3a:c2:b1:fe:e6:13:67:b3:5b:c5:ca: e8:ea:ee:76:83:e9:c7:da:b7:e5:24:af:c5:b9:d8: 86:b6:50:36:c2:65:93:1f:2d:7c:ff:b3:a6:d7:de: 49:28:52:3e:7f:9b:1d:a2:2c:23:b3:d5:7a:b1:f2: 74:15:bf:e6:af:dd:38:6a:66:02:ae:db:f2:f1:23: f3:f9:20:6d:cc:e4:9f:dd:88:b8:99:02:73:93:6b: c4:96:1d:fb:9b:20:ff:92:ff:35:ca:9d:a2:4c:e9: 47:a4:b9:ab:d4:33:3a:0f:d9:60:75:68:ea:01:58: b6:85:36:13:4e:43:e6:0c:c9:ba:69:f3:49:0c:f9: be:d3:0f:08:cd:9d:ba:4b:ec:69:4c:af:45:d5:e1: 75:3c:e4:4e:f4:d9:d6:9c:db:27:f6:cc:ff:00:7c: 8f:c9:52:30:89:89:c2:62:86:dd:5e:8f:a8:8f:2a: 10:08:08:4d:26:36:ca:f2:fb:92:2b:81:a7:50:6a: 1c:95:04:6f:b9:35:a4:1d:81:d6:eb:32:63:6d:05: 92:fe:08:d0:70:0f:e7:a9:39:08:0e:a1:89:47:39: c5:69:82:6c:0f:73:f2:b6:f4:a1:2d:25:41:4e:0f: 31:83:8f:f1:16:2e:4c:9a:83:7b:e9:f9:b4:a6:19: 96:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EE:F7:A4:4F:7D:2B:3A:B0:45:02:DC:B0:0E:E0:6F:EE:5C:86:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:aa:1b:bc:c4:86:d6:bc:2a:bd:69:b8:ad:c9:d9:d9:79:65: ae:bb:dd:4e:91:16:c7:9a:56:f1:c2:25:e2:19:e2:45:4c:79: c5:a8:77:5d:7f:fa:14:16:d6:e7:7a:81:b3:61:d1:fc:81:48: 28:18:d8:11:e6:62:34:f0:86:ad:e1:d5:e3:6d:b2:9a:4b:08: b5:46:af:32:ce:42:0a:ea:4f:3d:bd:e1:af:0f:bd:fa:25:2e: b8:03:72:35:9e:4d:bd:12:95:8c:96:16:15:fb:30:0a:0f:2b: de:9a:f5:8e:1c:28:f5:8e:4d:8d:2e:d4:a4:f2:db:22:52:c6: 83:81:72:8b:1f:ca:6c:62:f0:de:c3:a6:07:79:26:ae:23:9a: 7b:af:5f:d3:7a:b1:ec:70:f4:54:8b:32:50:dc:9d:9b:8e:2c: 62:b4:10:7c:cd:f3:3e:a8:e0:60:40:56:f3:e6:99:67:54:d2: 4b:f2:ae:eb:7e:a6:15:0e:9c:d0:a7:5a:6c:54:93:a8:a8:dc: 91:8e:40:82:69:f6:c5:88:af:c7:f7:44:9b:b9:56:d9:7d:f1: b1:f5:51:15:08:76:51:a1:e0:3d:53:00:5f:67:37:2e:c3:2b: be:8e:d6:35:5e:7e:99:45:d8:b7:1d:97:86:c2:b1:2b:99:c8: bf:e6:5d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXEDVfXskJSAVeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDgxNTA4YTktNWE2MC00ODc1LThlNDMtYzI2MzU4ZDc2M2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr98sOsKx/uYTZ7Nbxcro6u52g+nH2rflJK/F udiGtlA2wmWTHy18/7Om195JKFI+f5sdoiwjs9V6sfJ0Fb/mr904amYCrtvy8SPz +SBtzOSf3Yi4mQJzk2vElh37myD/kv81yp2iTOlHpLmr1DM6D9lgdWjqAVi2hTYT TkPmDMm6afNJDPm+0w8IzZ26S+xpTK9F1eF1PORO9NnWnNsn9sz/AHyPyVIwiYnC YobdXo+ojyoQCAhNJjbK8vuSK4GnUGoclQRvuTWkHYHW6zJjbQWS/gjQcA/nqTkI DqGJRznFaYJsD3PytvShLSVBTg8xg4/xFi5MmoN76fm0phmW3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTu96RPfSs6sEUC3LAO4G/uXIb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWE0YjAxNmEtMmNhOC0z ZmY3LWI5ZmEtZTA4NzVhZWFmOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqqG7zEhta8Kr1puK3J2dl5Za673U6RFseaVvHCJeIZ4kVMecWod11/ +hQW1ud6gbNh0fyBSCgY2BHmYjTwhq3h1eNtsppLCLVGrzLOQgrqTz294a8Pvfol LrgDcjWeTb0SlYyWFhX7MAoPK96a9Y4cKPWOTY0u1KTy2yJSxoOBcosfymxi8N7D pgd5Jq4jmnuvX9N6sexw9FSLMlDcnZuOLGK0EHzN8z6o4GBAVvPmmWdU0kvyrut+ phUOnNCnWmxUk6io3JGOQIJp9sWIr8f3RJu5Vtl98bH1URUIdlGh4D1TAF9nNy7D K76O1jVefplF2Lcdl4bCsSuZyL/mXTI= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:51 2025 by rpki-client