$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64eab06a-7ceb-3420-94b9-b229128b9869.roa File: 64eab06a-7ceb-3420-94b9-b229128b9869.roa (raw, json) Hash identifier: R68sTfmake5RUCC75VZewKG2lkv3uqhn1uuNDRP3snc= Subject key identifier: A6:39:09:20:8E:ED:2D:92:75:C9:BC:68:5E:F1:8A:F3:4A:26:7B:AD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CBFA6E33DAAFF382DA200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64eab06a-7ceb-3420-94b9-b229128b9869.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 40.138.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:bf:a6:e3:3d:aa:ff:38:2d:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ccdeb0a9-d236-4b9c-8824-bac5408e4c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cf:ae:5c:9f:9c:f6:dd:61:04:1a:34:11:7c: 1f:89:49:48:fd:0d:bf:f0:06:56:3e:6c:9f:be:e3: 3b:53:f4:5d:65:a8:78:5a:fa:e2:a2:c6:74:b2:f7: 6e:62:97:cf:9d:f3:8e:dd:7e:c5:9b:5e:ad:65:16: dc:d4:f8:70:2b:31:1f:69:cc:1f:10:a0:ce:e6:7f: 1d:e9:bc:dc:da:60:30:d1:bb:e0:a0:c8:b5:3b:64: 78:0c:44:6b:8c:4a:49:82:7f:71:d7:b6:f2:af:05: 9e:f1:01:2f:79:a1:d3:cb:bd:a7:c5:44:41:5f:55: b3:cb:da:27:b1:91:8b:90:75:6e:95:7b:d3:05:b5: 60:b4:63:6b:fb:13:37:90:77:38:5e:01:69:b4:30: 98:31:cb:4c:93:39:74:b1:1a:9f:84:1e:cb:e8:c2: f2:95:48:8f:3e:31:a6:c7:78:af:62:35:8f:65:0c: f2:d5:4f:e4:55:11:cd:10:2e:41:c2:10:b6:64:9a: ed:d8:4c:78:6c:7b:e1:ca:b0:4d:98:9a:17:41:38: a8:bd:e8:bf:8e:0c:f2:5b:3d:1a:a4:c0:98:ca:15: ed:c1:b5:a4:26:7f:db:d0:ab:0d:84:3b:2d:43:ba: c3:95:e9:4b:4f:b2:91:d6:de:f4:38:84:b4:99:33: 20:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:39:09:20:8E:ED:2D:92:75:C9:BC:68:5E:F1:8A:F3:4A:26:7B:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64eab06a-7ceb-3420-94b9-b229128b9869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b4:10:eb:5f:fb:69:65:11:a0:b3:da:28:07:22:a0:48:a3: 4e:54:56:f1:7a:7f:2a:36:3d:db:51:7a:2f:6f:30:ed:d6:46: 10:02:72:a9:fc:da:61:83:0e:60:0b:a1:4a:1a:d8:a5:28:52: 40:33:95:a7:30:85:96:b7:ea:a0:de:af:8b:2c:9b:a0:d1:47: cb:65:b9:9d:53:b2:08:0a:4e:44:20:0d:8f:01:b5:6b:af:e3: 39:7a:4e:14:50:4b:d8:89:3c:fc:22:2e:87:91:a4:27:41:3a: 1f:78:e6:fa:a9:4c:01:a6:56:71:ba:63:d2:1d:da:37:0e:f9: 8d:99:76:59:df:03:d8:cf:34:57:a4:ca:5b:ec:a8:cc:c8:c3: 9e:b9:d6:33:ed:01:ca:5f:2d:c4:1b:29:d0:58:96:1d:f0:e0: a7:78:62:30:12:8a:2d:68:c7:2c:da:9c:5b:29:6e:ea:b0:84: ff:f0:ea:45:23:10:39:ee:51:0d:df:48:9c:cc:df:e9:6f:2c: 8b:31:84:e1:22:57:7e:14:7c:77:c4:74:a9:0c:b2:6b:45:a2: 42:9d:0e:94:50:9a:7e:dd:32:52:3a:d4:26:6e:bf:12:b6:8d: 9f:53:88:16:58:2b:b6:9f:ae:36:46:b6:bc:95:c6:4d:21:7a: fb:a0:6e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXL+m4z2q/zgtogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk Y2NkZWIwYTktZDIzNi00YjljLTg4MjQtYmFjNTQwOGU0YzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs+uXJ+c9t1hBBo0EXwfiUlI/Q2/8AZWPmyf vuM7U/RdZah4WvriosZ0svduYpfPnfOO3X7Fm16tZRbc1PhwKzEfacwfEKDO5n8d 6bzc2mAw0bvgoMi1O2R4DERrjEpJgn9x17byrwWe8QEveaHTy72nxURBX1Wzy9on sZGLkHVulXvTBbVgtGNr+xM3kHc4XgFptDCYMctMkzl0sRqfhB7L6MLylUiPPjGm x3ivYjWPZQzy1U/kVRHNEC5BwhC2ZJrt2Ex4bHvhyrBNmJoXQTiovei/jgzyWz0a pMCYyhXtwbWkJn/b0KsNhDstQ7rDlelLT7KR1t70OIS0mTMgXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKY5CSCO7S2Sdcm8aF7xivNKJnutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRlYWIwNmEtN2NlYi0z NDIwLTk0YjktYjIyOTEyOGI5ODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa0EOtf+2llEaCz2igHIqBIo05UVvF6fyo2PdtRei9vMO3WRhACcqn8 2mGDDmALoUoa2KUoUkAzlacwhZa36qDer4ssm6DRR8tluZ1TsggKTkQgDY8BtWuv 4zl6ThRQS9iJPPwiLoeRpCdBOh945vqpTAGmVnG6Y9Id2jcO+Y2ZdlnfA9jPNFek ylvsqMzIw5651jPtAcpfLcQbKdBYlh3w4Kd4YjASii1oxyzanFspbuqwhP/w6kUj EDnuUQ3fSJzM3+lvLIsxhOEiV34UfHfEdKkMsmtFokKdDpRQmn7dMlI61CZuvxK2 jZ9TiBZYK7afrjZGtryVxk0hevugbuI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:44 2025 by rpki-client