$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43d95524-887b-382a-8ae5-3e8ab501b4bd.roa File: 43d95524-887b-382a-8ae5-3e8ab501b4bd.roa (raw, json) Hash identifier: 3G2nWyY8nqQExFaUT2i8x6xnN+hPMsXgwMxbFGASEh0= Subject key identifier: 3C:89:DA:9C:F6:8E:8B:A1:34:27:7F:29:45:5C:8A:6B:CF:F4:89:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95AA278BE1F33DDCA8F39700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43d95524-887b-382a-8ae5-3e8ab501b4bd.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 40.138.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:27:8b:e1:f3:3d:dc:a8:f3:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=718656bf-16d5-4d89-903f-4c35ff2bc770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8d:82:32:85:56:05:ec:b1:19:f4:d8:dc:6e: 92:95:cd:9c:51:2a:0d:11:40:8f:ee:0c:67:f2:7c: ac:ed:3d:92:ed:e2:28:3c:35:c7:88:c1:71:49:82: 4d:e9:35:ed:d8:d6:e3:01:c0:51:a3:b3:c9:51:f8: f0:dc:48:9a:79:bf:12:f4:31:9a:66:ef:a4:59:f7: 10:d1:d4:3e:96:27:22:00:56:ed:dd:8e:7e:b7:9e: 96:3a:78:ea:1b:37:54:c5:0f:62:66:d5:d2:c4:76: f7:ce:5a:fc:cf:4c:f5:4b:48:9e:21:54:18:64:87: f6:a5:22:ba:b3:3e:89:57:93:41:f4:df:8d:bc:82: 7f:87:06:4c:52:c5:5a:fb:59:0c:5b:89:44:48:1b: a0:2b:08:94:08:7b:b5:2b:ca:8d:39:d2:0d:51:72: a3:55:42:c6:fd:3a:a7:7d:e7:9d:ca:80:ff:10:c4: 4f:b3:e9:a2:c9:aa:c1:2b:b6:47:e1:46:53:1f:ca: 70:40:75:cc:34:bb:59:67:fd:f0:f0:4a:4d:5f:f6: 9b:73:78:f2:3c:99:17:3a:b6:a6:0c:2c:b2:02:f5: 16:09:24:dd:d4:f6:75:8a:9c:6f:0c:d6:5b:60:41: 0b:2c:69:cb:59:3d:6d:f6:32:df:b6:b1:47:e1:93: b9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:89:DA:9C:F6:8E:8B:A1:34:27:7F:29:45:5C:8A:6B:CF:F4:89:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43d95524-887b-382a-8ae5-3e8ab501b4bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7f:4d:b4:6a:33:87:db:ad:2d:aa:0b:1b:25:52:4c:63:9a: d1:98:f0:73:cf:94:57:73:5f:34:d0:14:fc:45:e3:7e:d6:40: 60:13:e7:17:bd:a2:bc:03:1f:f5:4e:a3:fe:62:74:0f:bb:ed: 17:95:2c:2c:26:20:07:3e:74:9a:7c:04:cc:a9:0a:a2:b8:f9: a9:bd:f5:eb:a5:e0:30:44:a0:00:41:2b:61:96:28:76:47:30: 5e:2e:6a:bc:e5:1c:3e:93:c6:83:ee:56:d8:27:64:a9:17:64: de:50:0c:fb:25:58:99:04:8f:70:01:13:65:57:87:86:06:03: 46:3a:2d:60:01:cc:9e:00:33:47:b0:df:06:80:e7:90:50:d4: c1:15:dc:af:03:ff:31:a3:d3:5e:c5:59:50:f7:d0:f5:fb:8e: 8b:fe:a8:c8:c8:d0:04:02:73:e7:5f:ca:15:67:e6:c8:89:70: 15:4e:65:91:73:12:ed:41:95:71:88:c4:e9:c3:0d:07:26:4e: 64:a8:3f:97:96:0a:35:32:f5:6f:01:d9:12:6e:d3:a7:7a:c0: 4b:b5:78:d2:b8:a9:65:6a:72:9d:13:a2:4d:4c:49:81:23:f4: 5c:2c:bc:a9:13:62:15:23:74:51:92:0f:c7:e9:59:51:fc:42: ec:7f:79:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqieL4fM93KjzlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzE4NjU2YmYtMTZkNS00ZDg5LTkwM2YtNGMzNWZmMmJjNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo2CMoVWBeyxGfTY3G6Slc2cUSoNEUCP7gxn 8nys7T2S7eIoPDXHiMFxSYJN6TXt2NbjAcBRo7PJUfjw3Eiaeb8S9DGaZu+kWfcQ 0dQ+liciAFbt3Y5+t56WOnjqGzdUxQ9iZtXSxHb3zlr8z0z1S0ieIVQYZIf2pSK6 sz6JV5NB9N+NvIJ/hwZMUsVa+1kMW4lESBugKwiUCHu1K8qNOdINUXKjVULG/Tqn feedyoD/EMRPs+miyarBK7ZH4UZTH8pwQHXMNLtZZ/3w8EpNX/abc3jyPJkXOram DCyyAvUWCSTd1PZ1ipxvDNZbYEELLGnLWT1t9jLftrFH4ZO5uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyJ2pz2jouhNCd/KUVcimvP9IkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDNkOTU1MjQtODg3Yi0z ODJhLThhZTUtM2U4YWI1MDFiNGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR/TbRqM4fbrS2qCxslUkxjmtGY8HPPlFdzXzTQFPxF437WQGAT5xe9 orwDH/VOo/5idA+77ReVLCwmIAc+dJp8BMypCqK4+am99eul4DBEoABBK2GWKHZH MF4uarzlHD6TxoPuVtgnZKkXZN5QDPslWJkEj3ABE2VXh4YGA0Y6LWABzJ4AM0ew 3waA55BQ1MEV3K8D/zGj017FWVD30PX7jov+qMjI0AQCc+dfyhVn5siJcBVOZZFz Eu1BlXGIxOnDDQcmTmSoP5eWCjUy9W8B2RJu06d6wEu1eNK4qWVqcp0Tok1MSYEj 9FwsvKkTYhUjdFGSD8fpWVH8Qux/eWo= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:32 2025 by rpki-client