$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b9a44d4-54c8-3092-840c-6fcab6cfad42.roa File: 5b9a44d4-54c8-3092-840c-6fcab6cfad42.roa (raw, json) Hash identifier: 7jtzbax9XyEiE/ieUbM/ZcnEu818fCJfLCVyjkRyTSE= Subject key identifier: 80:1F:58:7A:62:80:C4:D5:23:79:99:D1:CC:C4:38:02:6E:0C:CB:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95AA279B1064AFCEC071D100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b9a44d4-54c8-3092-840c-6fcab6cfad42.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 40.138.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:27:9b:10:64:af:ce:c0:71:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f15765e4-9016-4df5-a146-ba0f7410d761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:f6:64:0b:77:64:6f:08:5f:f7:e8:37:80: b6:a5:14:c6:a9:3d:cb:fb:b7:87:67:6a:29:a2:96: d3:46:e0:bf:99:c8:8e:db:3f:e9:78:d1:b2:cd:88: ed:47:c9:0f:49:08:c3:a5:f2:e2:d7:32:aa:8d:f2: a5:ae:4f:96:8e:55:72:07:ae:3f:d2:55:ee:5e:9d: f9:02:9a:9f:89:29:b1:96:6d:dd:4f:9a:2a:8c:16: c9:8c:e7:af:09:a1:ad:e3:00:c3:f0:81:98:98:15: e8:36:63:cf:4b:c7:e7:46:dc:4a:ab:3e:01:33:02: cb:31:de:5d:fe:16:ed:0d:26:6e:5e:72:e7:32:69: 8f:97:c5:a5:c0:63:2d:71:df:81:c8:bc:98:2b:0f: f8:8d:a1:dd:e1:cb:66:ac:0f:dc:20:74:fd:8f:86: c5:ac:41:60:d9:26:df:80:1d:a8:ed:9a:12:cc:9d: 57:4f:e8:1e:9e:8f:3e:3b:b5:74:9f:29:1e:5c:cb: b2:19:3d:aa:22:5f:0d:45:d2:c3:a3:38:1f:55:a2: 28:58:93:39:0f:c7:42:92:46:55:61:48:76:69:64: 1a:df:dd:8f:19:e7:30:7e:5a:ab:e3:97:f1:a6:cc: f5:58:99:3c:f8:42:9e:67:10:24:53:56:f9:a2:f8: f6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1F:58:7A:62:80:C4:D5:23:79:99:D1:CC:C4:38:02:6E:0C:CB:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b9a44d4-54c8-3092-840c-6fcab6cfad42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2b:77:86:82:6d:06:fd:09:7b:e1:fa:c0:1e:3d:bf:c2:54: 90:5d:df:6b:37:9d:9f:94:af:88:14:6a:4e:b0:e1:54:da:fa: 53:d1:97:c4:e8:44:95:e7:6c:a1:77:ca:e1:4f:4c:de:fb:5c: 0c:6b:d6:b0:9d:08:9c:11:b0:ac:20:3e:3f:78:a1:e0:65:59: ba:cb:7e:de:db:71:93:a4:db:34:4f:fd:2f:df:32:96:24:ef: 11:4c:05:03:ff:6f:3b:9d:f1:c6:5b:88:29:8a:c1:13:dd:6e: b7:59:32:ec:4c:48:6e:95:4d:bc:01:43:ce:83:d9:7b:3f:d0: 68:47:1d:78:98:82:0f:cd:c5:57:6f:79:1a:76:32:78:6d:d6: dd:8f:8d:2d:7a:21:24:68:ac:85:02:54:72:f9:cf:8f:a2:f6: 4a:9f:35:03:62:63:ca:4e:a6:36:81:51:cf:e8:31:35:0d:4a: 7d:6d:1e:dc:db:05:e4:73:d4:16:e0:99:9e:bb:f7:c1:bb:f0: 5f:12:83:a9:71:15:12:63:d0:b3:c3:7e:05:2f:b8:fc:4b:0a: 1d:30:8c:db:94:9b:c2:24:a7:26:00:0d:19:2f:27:3b:45:97: 10:19:ed:20:3f:eb:b9:f2:88:05:a7:70:41:cc:00:6b:26:dc: 43:af:aa:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqiebEGSvzsBx0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjE1NzY1ZTQtOTAxNi00ZGY1LWExNDYtYmEwZjc0MTBkNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM/2ZAt3ZG8IX/foN4C2pRTGqT3L+7eHZ2op opbTRuC/mciO2z/peNGyzYjtR8kPSQjDpfLi1zKqjfKlrk+WjlVyB64/0lXuXp35 ApqfiSmxlm3dT5oqjBbJjOevCaGt4wDD8IGYmBXoNmPPS8fnRtxKqz4BMwLLMd5d /hbtDSZuXnLnMmmPl8WlwGMtcd+ByLyYKw/4jaHd4ctmrA/cIHT9j4bFrEFg2Sbf gB2o7ZoSzJ1XT+geno8+O7V0nykeXMuyGT2qIl8NRdLDozgfVaIoWJM5D8dCkkZV YUh2aWQa392PGecwflqr45fxpsz1WJk8+EKeZxAkU1b5ovj2fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAfWHpigMTVI3mZ0czEOAJuDMsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWI5YTQ0ZDQtNTRjOC0z MDkyLTg0MGMtNmZjYWI2Y2ZhZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKIo4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABord4aCbQb9CXvh+sAePb/CVJBd32s3nZ+Ur4gUak6w4VTa+lPRl8To RJXnbKF3yuFPTN77XAxr1rCdCJwRsKwgPj94oeBlWbrLft7bcZOk2zRP/S/fMpYk 7xFMBQP/bzud8cZbiCmKwRPdbrdZMuxMSG6VTbwBQ86D2Xs/0GhHHXiYgg/NxVdv eRp2Mnht1t2PjS16ISRorIUCVHL5z4+i9kqfNQNiY8pOpjaBUc/oMTUNSn1tHtzb BeRz1BbgmZ6798G78F8Sg6lxFRJj0LPDfgUvuPxLCh0wjNuUm8IkpyYADRkvJztF lxAZ7SA/67nyiAWncEHMAGsm3EOvqgA= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:29 2025 by rpki-client