$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4bd299fc-c07e-300e-a619-efb8e0153620.roa File: 4bd299fc-c07e-300e-a619-efb8e0153620.roa (raw, json) Hash identifier: 3+xicbyOeFK07yEdqEkEL2ID3a8eY1MGyAVOwm2nxJM= Subject key identifier: FF:BF:D1:64:7D:55:F3:27:FE:2C:2D:57:37:32:60:60:31:74:14:5A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22126B3663174398E608300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4bd299fc-c07e-300e-a619-efb8e0153620.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 162.40.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:26:b3:66:31:74:39:8e:60:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=a584f4e3-76ae-4964-b960-bf3549236b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:09:69:83:2e:df:71:09:6e:aa:13:71:45:15: 96:39:59:45:66:78:57:68:38:d0:02:d1:fc:04:58: 84:a3:86:c2:52:d1:72:a6:05:e3:14:d1:5b:21:ad: 48:e1:91:23:62:b7:6e:cb:3a:49:40:17:99:71:95: 31:65:7b:35:f1:d4:62:ae:82:46:8c:3b:a6:6f:d9: 90:cb:2e:a5:7b:6c:1e:99:93:83:7b:81:8f:98:5c: bd:c0:da:06:9d:44:c9:c9:2d:fd:34:e3:a6:46:3e: 51:dd:74:0b:fe:ec:62:ce:77:51:cc:88:b7:d6:4c: 8d:d4:65:67:a2:4b:7f:fe:15:8a:48:cf:f7:e7:cf: ab:bc:dd:30:cc:35:fa:92:85:90:42:9f:6a:dc:15: 2b:65:19:d8:c8:24:b2:e9:50:c5:51:c0:d4:c5:91: 42:eb:a0:c3:55:56:e8:06:40:75:c1:be:87:99:5c: cc:ea:53:29:ea:67:43:b0:4a:a7:38:50:98:65:ad: 1c:5d:33:fb:e7:a6:1c:cf:1d:d8:de:87:55:a9:46: 73:6a:0b:d3:1c:e0:4c:f6:6b:86:3a:af:48:88:98: 8f:83:30:af:8e:4e:82:0a:48:a4:f0:91:47:69:a2: db:cb:3c:d0:19:f0:47:36:c7:71:5b:50:28:d2:49: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BF:D1:64:7D:55:F3:27:FE:2C:2D:57:37:32:60:60:31:74:14:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4bd299fc-c07e-300e-a619-efb8e0153620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:19:e5:41:68:37:cc:9b:24:39:ff:2d:09:7d:46:56:54:92: 66:57:6f:c0:29:90:cb:aa:f0:42:84:62:dc:4c:b5:b5:09:ca: 68:9b:c3:96:30:33:4c:59:33:00:cb:60:1d:ac:6f:b9:10:76: 86:9f:98:f1:96:38:ea:dc:dc:67:bf:aa:0f:5e:fd:f8:72:48: 9e:50:23:1c:61:15:77:1e:51:d5:fd:d3:e6:77:58:0d:cb:23: a4:87:73:83:05:40:2c:f3:cb:48:ab:a4:51:22:a8:f9:94:94: 95:7a:23:ee:62:9e:24:df:d9:84:40:b8:a5:05:a6:27:0e:d9: 83:e7:e8:94:88:88:08:7a:2f:de:2a:0e:ef:a6:66:b2:da:6c: 4a:22:7a:92:06:7f:91:c8:59:14:47:14:2d:4c:6a:2a:ea:88: 15:1d:a2:8d:19:4b:2e:e3:73:22:47:c0:1c:20:eb:c0:02:1b: e7:7f:d2:f5:1d:33:1b:58:ab:85:09:f8:58:5a:a1:06:0e:4d: d0:c3:12:04:cc:e8:8b:b6:a1:60:69:2c:dd:7f:a5:08:ca:04: 38:f7:1b:5e:be:67:8c:93:4d:4c:3a:3c:c5:ed:8d:01:d2:db: 4b:28:7c:7a:5a:1c:82:c6:4f:bd:1b:8e:01:7e:05:3c:a0:78: a5:aa:48:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISazZjF0OY5ggwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTU4NGY0ZTMtNzZhZS00OTY0LWI5NjAtYmYzNTQ5MjM2YjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQlpgy7fcQluqhNxRRWWOVlFZnhXaDjQAtH8 BFiEo4bCUtFypgXjFNFbIa1I4ZEjYrduyzpJQBeZcZUxZXs18dRiroJGjDumb9mQ yy6le2wemZODe4GPmFy9wNoGnUTJyS39NOOmRj5R3XQL/uxizndRzIi31kyN1GVn okt//hWKSM/358+rvN0wzDX6koWQQp9q3BUrZRnYyCSy6VDFUcDUxZFC66DDVVbo BkB1wb6HmVzM6lMp6mdDsEqnOFCYZa0cXTP756Yczx3Y3odVqUZzagvTHOBM9muG Oq9IiJiPgzCvjk6CCkik8JFHaaLbyzzQGfBHNsdxW1Ao0knLjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+/0WR9VfMn/iwtVzcyYGAxdBRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGJkMjk5ZmMtYzA3ZS0z MDBlLWE2MTktZWZiOGUwMTUzNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoiiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEZ5UFoN8ybJDn/LQl9RlZUkmZXb8ApkMuq8EKEYtxMtbUJymibw5Yw M0xZMwDLYB2sb7kQdoafmPGWOOrc3Ge/qg9e/fhySJ5QIxxhFXceUdX90+Z3WA3L I6SHc4MFQCzzy0irpFEiqPmUlJV6I+5iniTf2YRAuKUFpicO2YPn6JSIiAh6L94q Du+mZrLabEoiepIGf5HIWRRHFC1MairqiBUdoo0ZSy7jcyJHwBwg68ACG+d/0vUd MxtYq4UJ+FhaoQYOTdDDEgTM6Iu2oWBpLN1/pQjKBDj3G16+Z4yTTUw6PMXtjQHS 20sofHpaHILGT70bjgF+BTygeKWqSMg= -----END CERTIFICATE-----Generated at Thu Aug 7 03:56:09 2025 by rpki-client