$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa File: 4c7661b5-4727-3944-9cf3-442581b9861b.roa (raw, json) Hash identifier: E80/oV1lROPIkh9PNjSY3cMO95ixPXxFqmeM2K80IOw= Subject key identifier: 1C:44:BE:F3:46:CF:39:3D:89:D0:9C:CB:75:89:55:23:A7:BB:D9:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0C7B4AD9A369D9BCA2E20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 40.138.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c7:b4:ad:9a:36:9d:9b:ca:2e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=e98c2f4a-acf8-456a-8b5b-7df8f17129c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:65:2d:86:04:0d:c9:35:1e:f9:12:2c:fa:c9: 27:2a:fe:4e:66:60:c9:b9:16:ec:df:63:db:60:68: 5b:a6:5c:f8:66:ed:fb:57:de:70:5a:fd:cb:fc:29: 8c:46:38:7e:85:9e:df:eb:78:43:b5:25:9f:d7:ba: 18:80:68:03:9c:85:32:98:55:d8:17:58:33:77:dc: 0e:49:a7:0d:5a:d3:e1:84:b5:22:9b:76:d9:d9:60: 7d:b8:c9:c9:ca:89:ca:7a:11:01:73:a3:e9:d0:a5: f0:c5:78:69:d4:70:d3:a5:a2:98:1a:13:e4:4d:bb: c3:eb:0a:f5:ea:8b:b9:49:11:b6:3f:a3:4d:37:36: 25:65:30:39:58:74:f6:a4:fa:43:0a:85:7f:1d:0f: b5:fc:37:84:0f:12:22:e9:90:fa:d4:f2:e5:80:1d: 40:02:b0:3a:b7:3e:05:86:e7:a5:c7:12:0e:95:32: 1c:95:01:a7:4d:8e:41:bd:df:33:a7:bb:2c:25:34: 8a:c4:ae:2d:69:42:55:55:d3:3e:59:b7:b7:e0:e3: 74:ed:77:ac:94:a2:6b:32:d4:d4:22:80:dc:77:46: 83:62:6c:b5:67:be:d6:7b:96:cb:e9:32:72:e1:a1: dd:aa:ec:46:1c:0c:34:8e:b4:46:f5:ec:7a:69:0c: 71:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:44:BE:F3:46:CF:39:3D:89:D0:9C:CB:75:89:55:23:A7:BB:D9:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:35:3c:f1:c9:a2:eb:be:ae:92:92:5e:5b:87:c0:27:f5:40: 29:06:4c:c7:38:df:e1:c2:7c:e8:f8:30:8e:60:cd:aa:58:a3: e9:8e:58:82:08:3a:09:c2:87:d5:83:13:b0:6d:39:c8:fc:d9: ac:c8:00:88:ef:d4:8d:43:4d:c4:f2:81:4e:06:ca:27:fe:9e: 54:f2:88:72:b2:8f:a1:48:48:2f:44:9c:1d:c1:51:ec:87:97: 2d:09:d7:7d:84:33:52:47:c7:e7:10:07:fc:d0:45:f6:db:ae: 2b:cb:80:c4:8e:25:b5:f9:c4:e8:32:95:d6:e0:49:c5:b1:4c: 96:ae:7c:37:22:68:08:e9:5e:e7:7d:22:01:3d:ca:10:ce:f8: d3:0b:3c:c4:1b:eb:56:e7:67:ce:ce:a9:71:c3:4d:58:23:0a: b1:f6:9b:b5:c6:81:ea:8a:6f:af:b4:30:ea:7d:b1:09:f8:1b: 4d:11:63:cf:69:19:13:91:5a:5c:fe:f7:77:f5:17:5f:c9:dd: 96:e8:6f:85:7d:84:6e:dd:b3:d5:89:2e:5e:3f:71:16:85:2d: 69:7f:84:a3:e1:3e:6b:28:c2:f1:b3:43:2c:39:ab:85:4f:22: 12:0b:1f:16:6b:c3:67:59:a9:45:dd:13:73:65:5d:04:43:13: 62:39:e2:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMe0rZo2nZvKLiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZTk4YzJmNGEtYWNmOC00NTZhLThiNWItN2RmOGYxNzEyOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2UthgQNyTUe+RIs+sknKv5OZmDJuRbs32Pb YGhbplz4Zu37V95wWv3L/CmMRjh+hZ7f63hDtSWf17oYgGgDnIUymFXYF1gzd9wO SacNWtPhhLUim3bZ2WB9uMnJyonKehEBc6Pp0KXwxXhp1HDTpaKYGhPkTbvD6wr1 6ou5SRG2P6NNNzYlZTA5WHT2pPpDCoV/HQ+1/DeEDxIi6ZD61PLlgB1AArA6tz4F huelxxIOlTIclQGnTY5Bvd8zp7ssJTSKxK4taUJVVdM+Wbe34ON07XeslKJrMtTU IoDcd0aDYmy1Z77We5bL6TJy4aHdquxGHAw0jrRG9ex6aQxxfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxEvvNGzzk9idCcy3WJVSOnu9nVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM3NjYxYjUtNDcyNy0z OTQ0LTljZjMtNDQyNTgxYjk4NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc1PPHJouu+rpKSXluHwCf1QCkGTMc43+HCfOj4MI5gzapYo+mOWIII OgnCh9WDE7BtOcj82azIAIjv1I1DTcTygU4Gyif+nlTyiHKyj6FISC9EnB3BUeyH ly0J132EM1JHx+cQB/zQRfbbrivLgMSOJbX5xOgyldbgScWxTJaufDciaAjpXud9 IgE9yhDO+NMLPMQb61bnZ87OqXHDTVgjCrH2m7XGgeqKb6+0MOp9sQn4G00RY89p GRORWlz+93f1F1/J3Zbob4V9hG7ds9WJLl4/cRaFLWl/hKPhPmsowvGzQyw5q4VP IhILHxZrw2dZqUXdE3NlXQRDE2I54vA= -----END CERTIFICATE-----Generated at Wed Aug 6 14:18:23 2025 by rpki-client