$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c416a0e-c8a9-327d-8ca0-fc562292becf.roa File: 1c416a0e-c8a9-327d-8ca0-fc562292becf.roa (raw, json) Hash identifier: Wpwa41Tmetz0lXO2xqk49sWXSkIcm9EJhkiX6vcECs8= Subject key identifier: E5:CF:57:6C:DB:0B:FA:16:19:42:23:FF:08:18:55:31:1A:DF:FC:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9E96469ECFAC0A1102F03400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c416a0e-c8a9-327d-8ca0-fc562292becf.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 40.129.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:46:9e:cf:ac:0a:11:02:f0:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=6d114381-dc16-4a37-b12f-fed3a669d7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5c:a4:42:a9:cd:d3:c6:e8:5e:6b:df:11:8c: 46:c1:3a:ea:4f:75:7d:a6:db:cb:13:10:86:70:e6: 95:8d:33:1e:5a:51:47:f2:9c:ed:6d:9a:90:b6:27: f1:62:b9:b9:f3:16:b6:6f:ef:3e:69:63:b2:8b:46: 8f:30:66:4d:52:a6:a9:a4:7b:0e:8e:f3:8f:83:c1: c9:31:a8:42:e0:03:5f:e2:bb:23:64:cd:db:9f:7d: 27:83:00:41:b4:01:6d:c6:91:b1:6e:3b:1f:a4:ac: de:1c:29:c4:48:16:da:8e:cb:dd:bc:ff:91:05:b5: b5:e4:9c:34:d5:e8:23:65:a6:18:49:1b:d7:30:6a: e4:cd:b4:22:59:ec:39:f3:87:9c:c2:25:5a:6e:d8: be:b3:b5:2c:9a:21:3f:84:44:a7:94:a9:a7:fb:fb: 85:7c:d2:12:34:ed:da:62:ca:6b:ec:92:91:7a:a0: bb:59:d0:03:d0:7d:fc:24:b5:4a:47:85:01:7c:cc: 6b:98:99:89:97:a5:93:0a:79:2a:ad:08:37:1e:b5: 43:22:ae:7a:66:4c:64:96:88:df:d3:84:01:d5:de: dc:ed:66:7f:60:cb:7e:4f:75:75:15:fe:18:6a:7e: be:d7:67:cb:8f:45:19:d3:ae:c9:2c:40:9a:d9:ea: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CF:57:6C:DB:0B:FA:16:19:42:23:FF:08:18:55:31:1A:DF:FC:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c416a0e-c8a9-327d-8ca0-fc562292becf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.129.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:77:d5:32:5f:66:6c:89:bc:b9:7b:34:9d:d4:e1:17:d0:62: 2d:d9:b3:4f:b0:c9:9a:27:d4:3b:b8:80:85:9c:af:38:ff:7a: d1:58:20:6b:5b:ff:49:65:f4:07:61:9a:39:72:5a:e4:ec:ba: 75:3f:a1:9a:e8:ab:3b:0f:3b:73:f2:af:24:7a:97:e3:71:0f: 9c:d2:4f:b8:d6:f4:21:83:ba:55:e6:6b:13:17:48:0e:1a:d7: 7e:ae:11:46:89:af:84:83:7f:da:2c:2a:b8:f1:c1:28:ef:b0: 67:a8:a9:6e:0a:3c:d8:e1:dc:05:60:e7:45:44:3a:9c:c1:45: c4:63:67:12:7b:46:57:7e:7c:47:04:50:cc:8b:0a:21:5f:bb: dd:ff:c7:17:c7:6c:8a:a5:27:1a:f5:61:58:03:9d:61:cf:f9: 16:2d:26:6c:19:d9:de:d7:46:03:83:f9:21:8a:7b:ce:d6:13: a6:68:ce:ca:18:91:88:9c:fd:3a:77:12:b3:bd:d7:3a:b7:06: 19:f8:5f:43:95:1e:bb:6f:1a:5d:ba:a1:98:ee:bc:39:34:51: 2b:89:b7:a8:ca:ba:cc:01:f9:2a:c1:ec:be:dd:4f:92:67:3a: 70:dd:4b:a5:de:38:8d:d3:7b:6d:34:cc:df:51:ac:b1:83:98: 2a:86:09:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelkaez6wKEQLwNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NmQxMTQzODEtZGMxNi00YTM3LWIxMmYtZmVkM2E2NjlkN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFykQqnN08boXmvfEYxGwTrqT3V9ptvLExCG cOaVjTMeWlFH8pztbZqQtifxYrm58xa2b+8+aWOyi0aPMGZNUqappHsOjvOPg8HJ MahC4ANf4rsjZM3bn30ngwBBtAFtxpGxbjsfpKzeHCnESBbajsvdvP+RBbW15Jw0 1egjZaYYSRvXMGrkzbQiWew584ecwiVabti+s7UsmiE/hESnlKmn+/uFfNISNO3a Yspr7JKReqC7WdAD0H38JLVKR4UBfMxrmJmJl6WTCnkqrQg3HrVDIq56Zkxklojf 04QB1d7c7WZ/YMt+T3V1Ff4Yan6+12fLj0UZ067JLECa2epeNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXPV2zbC/oWGUIj/wgYVTEa3/yCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWM0MTZhMGUtYzhhOS0z MjdkLThjYTAtZmM1NjIyOTJiZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIGPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ31TJfZmyJvLl7NJ3U4RfQYi3Zs0+wyZon1Du4gIWcrzj/etFYIGtb /0ll9AdhmjlyWuTsunU/oZroqzsPO3PyryR6l+NxD5zST7jW9CGDulXmaxMXSA4a 136uEUaJr4SDf9osKrjxwSjvsGeoqW4KPNjh3AVg50VEOpzBRcRjZxJ7Rld+fEcE UMyLCiFfu93/xxfHbIqlJxr1YVgDnWHP+RYtJmwZ2d7XRgOD+SGKe87WE6ZozsoY kYic/Tp3ErO91zq3Bhn4X0OVHrtvGl26oZjuvDk0USuJt6jKuswB+SrB7L7dT5Jn OnDdS6XeOI3Te200zN9RrLGDmCqGCZA= -----END CERTIFICATE-----Generated at Wed Aug 6 10:18:54 2025 by rpki-client