$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2faa07cc-1db6-3283-8aec-82ce46bb6ea7.roa File: 2faa07cc-1db6-3283-8aec-82ce46bb6ea7.roa (raw, json) Hash identifier: NqnOVFJYQzMPbPS4EpLUZwulvjWHrFVgKYSrxxzH4XE= Subject key identifier: 44:8F:25:22:43:AE:27:DE:30:68:05:4E:CD:13:1F:36:62:5C:09:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A1099D07116783034E4150 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2faa07cc-1db6-3283-8aec-82ce46bb6ea7.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 62895 IP address blocks: 40.140.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a1:09:9d:07:11:67:83:03:4e:41:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=5590e7b9-575f-4483-b369-99c58e3af270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:87:0b:0a:05:7a:29:e1:55:bd:b5:cc:75:02: 7c:b1:0f:7a:a9:00:67:00:18:b3:c9:31:bc:b3:79: 31:2b:30:83:f8:ab:24:a2:4d:fa:cb:4c:82:15:80: 38:38:19:6c:bc:88:0d:f5:d6:b0:b6:88:3a:24:f1: f4:a7:86:b4:33:f8:8d:1e:13:30:99:99:28:96:e1: 86:d0:fb:99:29:c4:c0:c1:4d:2c:c8:f2:4a:05:97: 25:75:39:a8:d4:94:c5:bd:d5:47:f2:4d:cf:88:74: 92:13:5e:c4:f0:0d:d9:d0:91:aa:a4:16:b3:64:b6: b9:f3:c8:f9:79:24:85:f6:f8:00:5c:9a:4f:00:99: 1f:d5:e4:f0:f5:0d:34:5c:05:ed:8c:ed:e8:5c:ee: 2d:e7:45:64:52:86:99:0a:ba:66:9d:17:87:b4:20: 3b:c6:0a:74:c1:d2:71:1c:60:d8:87:0f:81:ba:0f: b9:5c:33:72:3c:32:fd:f4:3c:9e:4a:78:37:80:a4: c8:7d:b0:27:ed:cd:f2:9a:83:32:91:58:23:52:38: a3:35:bd:24:4d:16:9a:58:be:ed:cf:c2:b4:15:c5: 5e:89:79:af:0c:bb:68:11:7d:a2:73:61:94:27:67: 1e:f5:95:a3:d6:30:28:a0:7d:b4:53:ad:3e:ac:e5: 60:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8F:25:22:43:AE:27:DE:30:68:05:4E:CD:13:1F:36:62:5C:09:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2faa07cc-1db6-3283-8aec-82ce46bb6ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.140.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ab:42:02:c6:8f:91:8e:35:e7:e6:f4:5c:58:70:0f:e6:b2: 11:48:ef:28:ef:b8:ec:73:99:a2:d4:f3:f9:e6:c8:74:cb:b8: 9e:f5:c4:f1:a8:2a:9e:95:49:16:38:38:50:3d:56:9a:16:2d: 9b:da:bb:ee:8b:2d:1c:a6:eb:a0:51:6a:9f:da:62:5f:55:95: 10:47:36:62:4c:e6:51:b0:62:f0:9c:7b:c7:87:ee:a5:77:83: e8:b2:ea:07:38:c1:fb:4a:47:2a:a1:0b:a7:49:32:0b:ad:6e: 50:79:c0:e3:48:3c:ad:ed:19:91:26:ae:d9:8c:c1:23:c5:bc: f9:68:e6:0b:d5:10:09:72:7e:7e:28:36:f4:e7:ee:7a:b2:ec: 59:8c:e8:f8:29:7e:ff:d1:7d:5c:73:8f:95:d1:b3:20:65:fe: 07:b5:35:8f:b5:a5:fa:68:30:0e:53:6c:01:25:f3:56:60:80: 0a:d1:3e:8b:54:44:71:0b:73:5e:35:bb:cd:bb:ce:e3:f7:bf: 9c:a5:77:0c:71:59:ec:5f:3e:fb:d6:ea:67:d6:c3:ea:4a:dd: f5:73:7e:98:b7:7b:10:63:e0:22:7c:97:20:49:77:9f:3e:68: f3:d5:f1:eb:8a:16:fb:e3:03:6a:df:b3:ff:fc:a4:df:d4:6b: ad:2c:e6:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoQmdBxFngwNOQVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NTU5MGU3YjktNTc1Zi00NDgzLWIzNjktOTljNThlM2FmMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYcLCgV6KeFVvbXMdQJ8sQ96qQBnABizyTG8 s3kxKzCD+Kskok36y0yCFYA4OBlsvIgN9dawtog6JPH0p4a0M/iNHhMwmZkoluGG 0PuZKcTAwU0syPJKBZcldTmo1JTFvdVH8k3PiHSSE17E8A3Z0JGqpBazZLa588j5 eSSF9vgAXJpPAJkf1eTw9Q00XAXtjO3oXO4t50VkUoaZCrpmnReHtCA7xgp0wdJx HGDYhw+Bug+5XDNyPDL99DyeSng3gKTIfbAn7c3ymoMykVgjUjijNb0kTRaaWL7t z8K0FcVeiXmvDLtoEX2ic2GUJ2ce9ZWj1jAooH20U60+rOVgoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESPJSJDrifeMGgFTs0THzZiXAnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmZhYTA3Y2MtMWRiNi0z MjgzLThhZWMtODJjZTQ2YmI2ZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGrQgLGj5GONefm9FxYcA/mshFI7yjvuOxzmaLU8/nmyHTLuJ71xPGo Kp6VSRY4OFA9VpoWLZvau+6LLRym66BRap/aYl9VlRBHNmJM5lGwYvCce8eH7qV3 g+iy6gc4wftKRyqhC6dJMgutblB5wONIPK3tGZEmrtmMwSPFvPlo5gvVEAlyfn4o NvTn7nqy7FmM6Pgpfv/RfVxzj5XRsyBl/ge1NY+1pfpoMA5TbAEl81ZggArRPotU RHELc141u827zuP3v5yldwxxWexfPvvW6mfWw+pK3fVzfpi3exBj4CJ8lyBJd58+ aPPV8euKFvvjA2rfs//8pN/Ua60s5kU= -----END CERTIFICATE-----Generated at Thu Aug 7 04:05:22 2025 by rpki-client