$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa File: 3bfe9669-f1d3-319b-899b-0dc919583329.roa (raw, json) Hash identifier: r11X6WHAwI8R/VAE0VLug+3knKDxEoTxbBMzjtKm2zQ= Subject key identifier: 2E:EF:3C:64:DA:2F:8C:1D:58:71:6B:A2:06:BB:74:3E:84:23:DE:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F538A289B8018ADB5B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 40.142.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f5:38:a2:89:b8:01:8a:db:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=15b04042-bb3b-4238-982a-d31a0f2db7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:7a:b5:75:5d:c7:e3:9c:eb:38:72:27:11: a8:ad:71:89:0c:e5:c7:8d:a8:76:45:4f:6a:a9:a0: b2:2f:d6:6b:42:ab:57:c9:72:0e:8d:23:dd:0f:7f: c7:d6:8e:cf:3a:32:83:15:ed:45:0a:8b:b5:4f:29: d2:e1:54:e9:b5:58:e9:9b:f3:cf:76:42:73:51:a2: 0b:ce:6b:38:33:61:3d:d2:78:41:fd:48:18:91:57: 72:bf:fd:47:37:0c:8c:45:d8:3a:b8:a1:70:a4:c3: 64:7e:54:3f:bb:22:e1:a6:6e:22:39:c6:11:c4:07: 00:2d:e0:4d:e0:f0:93:a9:6f:f5:62:99:29:40:0b: 42:77:74:ba:76:32:5d:b0:48:45:b4:31:42:02:44: 01:1e:92:48:80:8c:86:f6:15:88:ee:8e:3c:54:0d: 85:f2:c5:9b:aa:6d:19:76:3a:fa:3e:e6:68:8b:31: 67:4d:d9:8f:c9:56:79:23:f3:a9:31:e5:d6:43:76: 8d:21:08:bb:bd:cf:80:6e:b0:b8:4c:23:0b:ce:43: f3:59:f7:e1:a6:3e:d7:3d:a1:17:4b:d9:13:2e:dc: 76:17:9c:a8:8b:e1:7f:c6:3f:33:1f:83:42:05:2f: 1c:a8:f7:fc:4e:69:26:b7:db:94:2d:b7:a2:17:a5: 02:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EF:3C:64:DA:2F:8C:1D:58:71:6B:A2:06:BB:74:3E:84:23:DE:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:0a:39:fb:1d:fb:07:3d:ca:26:cc:4c:a4:e0:00:19:2d:6c: 26:41:bb:6a:2d:73:06:a7:d9:e3:ca:a0:76:5b:8c:18:95:f6: d5:b3:38:67:db:83:47:59:a1:3f:fe:11:7c:1a:22:e8:d6:ee: 8e:58:f8:46:97:b9:1e:5e:a9:c2:68:59:c0:4b:92:68:67:9b: a2:86:2f:d6:1b:d7:85:e2:b7:9e:2c:06:e7:89:2a:1d:cc:52: 62:72:57:c1:c6:7e:ba:45:73:be:44:20:bd:41:a9:c9:39:2e: 47:37:08:ea:38:31:ba:b8:9c:1c:68:57:98:91:56:9f:24:09: 30:03:48:80:f9:0d:e7:1a:36:d7:ce:36:ca:8f:a7:8b:9d:da: de:8a:8b:c5:19:f4:3f:c9:a8:32:28:d8:d6:e4:a2:2d:9b:57: 07:6c:2e:3d:ea:8c:49:06:e5:d7:66:88:69:00:d1:8e:e2:92: 68:0b:0e:c6:23:9c:f8:93:af:80:1e:51:47:7a:48:b0:71:64: ef:1b:f2:89:4b:64:cc:45:06:d7:31:ac:9d:ec:f4:6f:fb:b6: a0:33:9d:35:42:f5:8e:85:6d:9d:d6:8d:cd:f0:07:a6:75:49: c2:7a:dd:0c:bd:5c:cd:34:d7:e0:61:2e:8a:4d:d9:d0:a4:d0: 0a:f0:7c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPU4oom4AYrbW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MTViMDQwNDItYmIzYi00MjM4LTk4MmEtZDMxYTBmMmRiN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCt6tXVdx+Oc6zhyJxGorXGJDOXHjah2RU9q qaCyL9ZrQqtXyXIOjSPdD3/H1o7POjKDFe1FCou1TynS4VTptVjpm/PPdkJzUaIL zms4M2E90nhB/UgYkVdyv/1HNwyMRdg6uKFwpMNkflQ/uyLhpm4iOcYRxAcALeBN 4PCTqW/1YpkpQAtCd3S6djJdsEhFtDFCAkQBHpJIgIyG9hWI7o48VA2F8sWbqm0Z djr6PuZoizFnTdmPyVZ5I/OpMeXWQ3aNIQi7vc+AbrC4TCMLzkPzWffhpj7XPaEX S9kTLtx2F5yoi+F/xj8zH4NCBS8cqPf8Tmkmt9uULbeiF6UCGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7vPGTaL4wdWHFroga7dD6EI95PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JmZTk2NjktZjFkMy0z MTliLTg5OWItMGRjOTE5NTgzMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkKOfsd+wc9yibMTKTgABktbCZBu2otcwan2ePKoHZbjBiV9tWzOGfb g0dZoT/+EXwaIujW7o5Y+EaXuR5eqcJoWcBLkmhnm6KGL9Yb14Xit54sBueJKh3M UmJyV8HGfrpFc75EIL1Bqck5Lkc3COo4Mbq4nBxoV5iRVp8kCTADSID5DecaNtfO NsqPp4ud2t6Ki8UZ9D/JqDIo2Nbkoi2bVwdsLj3qjEkG5ddmiGkA0Y7ikmgLDsYj nPiTr4AeUUd6SLBxZO8b8olLZMxFBtcxrJ3s9G/7tqAznTVC9Y6FbZ3Wjc3wB6Z1 ScJ63Qy9XM001+BhLopN2dCk0ArwfDQ= -----END CERTIFICATE-----Generated at Thu Aug 7 02:10:41 2025 by rpki-client