$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa File: 757bd253-cf95-3776-a157-b88b50e26f1b.roa (raw, json) Hash identifier: mhINoi3DxfcUPlQJ4L/eApbeF3lWHJgPdcyZeXi5zO4= Subject key identifier: 61:28:31:D0:C4:08:94:6C:99:E3:41:4B:0E:33:C8:8F:9C:46:52:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F50CAF563B296EEBDB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 40.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f5:0c:af:56:3b:29:6e:eb:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=e85198e4-a4ec-4672-9468-da1453faa50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:63:6a:f6:c4:f2:be:49:3f:11:5d:f8:43: 93:0b:5f:fc:2e:94:7c:5f:2c:5a:a5:86:23:0b:f5: e2:a8:a7:01:8f:c5:5a:0b:7e:64:c4:04:0b:02:50: 33:5f:29:00:cc:1f:7e:80:bb:04:fc:e0:8b:b3:2e: ff:80:4a:b7:ea:7d:7b:e2:7e:8d:85:99:5a:ac:31: 9e:87:f0:6d:e4:5b:81:ad:03:d6:8c:99:d5:42:ce: 00:5f:ed:eb:1c:fe:e8:f6:be:89:9e:57:87:dc:ae: 87:9d:10:f1:00:29:49:e3:1e:53:84:f0:9a:a2:28: 1c:02:4a:c7:b0:19:92:92:b8:8f:3e:b3:86:2a:47: c7:c8:5a:7e:c3:7b:a5:d4:12:78:23:0d:d6:b4:a4: 7b:8e:9c:5e:3f:97:07:94:31:a7:d3:04:cf:43:78: 9f:1e:37:46:f0:e9:18:86:60:77:fc:61:a9:09:df: 2d:90:4a:96:38:20:8f:b9:48:d9:1f:19:32:6c:ee: 51:34:a7:52:b3:33:01:e2:8b:89:20:ab:50:eb:b5: b1:c9:7f:10:af:66:a9:78:fd:7d:26:0c:17:e3:bb: b0:d3:8b:5b:df:3f:69:c5:c2:b6:f3:53:c4:e5:7e: 78:be:da:6d:7e:eb:b8:3c:38:72:c3:fb:45:09:4b: 8f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:28:31:D0:C4:08:94:6C:99:E3:41:4B:0E:33:C8:8F:9C:46:52:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:da:49:01:72:fb:65:5f:2d:66:b7:00:a5:b7:44:6e:33:76: a4:95:f4:6d:aa:2c:77:eb:46:8d:6b:fb:2f:e0:8f:be:ab:1c: 19:9a:f4:45:f5:92:37:e1:3e:6a:9b:d5:38:35:0e:47:50:48: 0c:64:a0:9f:ab:7e:34:41:59:2f:84:7c:8b:f6:28:50:6c:e8: 04:49:f3:3c:41:f8:93:6a:3b:d3:ef:58:22:a9:12:6d:ce:b6: 82:72:b9:10:c0:97:8f:4b:70:6e:5c:f0:b0:65:54:da:1e:ec: f5:1b:18:14:2e:4e:d7:17:5a:9c:8b:75:db:98:69:7e:3e:c4: 60:c3:33:8d:e5:1f:30:51:7e:db:fb:5f:72:e8:5c:f4:3b:bc: 2f:a7:29:04:97:cf:a2:8c:3d:4d:41:dc:85:70:03:ec:3c:04: d9:8e:18:5b:d8:a1:4c:35:cf:19:84:e8:7c:6c:2b:70:d7:e6: b2:9e:23:d2:64:73:ea:df:13:45:05:aa:d7:9e:e8:2e:b8:90: cb:3a:4b:d4:33:6d:7a:ce:19:46:67:f3:6b:31:80:c2:a5:72: d9:db:66:96:eb:ed:cd:1b:4d:87:ea:04:1e:2e:a4:f8:9b:6c: d0:5c:a0:7d:bd:b4:68:fa:0f:ca:d9:a8:cb:9f:c1:01:32:a2: ea:13:b1:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPUMr1Y7KW7r24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZTg1MTk4ZTQtYTRlYy00NjcyLTk0NjgtZGExNDUzZmFhNTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozpjavbE8r5JPxFd+EOTC1/8LpR8XyxapYYj C/XiqKcBj8VaC35kxAQLAlAzXykAzB9+gLsE/OCLsy7/gEq36n174n6NhZlarDGe h/Bt5FuBrQPWjJnVQs4AX+3rHP7o9r6JnleH3K6HnRDxAClJ4x5ThPCaoigcAkrH sBmSkriPPrOGKkfHyFp+w3ul1BJ4Iw3WtKR7jpxeP5cHlDGn0wTPQ3ifHjdG8OkY hmB3/GGpCd8tkEqWOCCPuUjZHxkybO5RNKdSszMB4ouJIKtQ67WxyX8Qr2apeP19 JgwX47uw04tb3z9pxcK281PE5X54vtptfuu4PDhyw/tFCUuPRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEoMdDECJRsmeNBSw4zyI+cRlIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzU3YmQyNTMtY2Y5NS0z Nzc2LWExNTctYjg4YjUwZTI2ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDaSQFy+2VfLWa3AKW3RG4zdqSV9G2qLHfrRo1r+y/gj76rHBma9EX1 kjfhPmqb1Tg1DkdQSAxkoJ+rfjRBWS+EfIv2KFBs6ARJ8zxB+JNqO9PvWCKpEm3O toJyuRDAl49LcG5c8LBlVNoe7PUbGBQuTtcXWpyLdduYaX4+xGDDM43lHzBRftv7 X3LoXPQ7vC+nKQSXz6KMPU1B3IVwA+w8BNmOGFvYoUw1zxmE6HxsK3DX5rKeI9Jk c+rfE0UFqtee6C64kMs6S9QzbXrOGUZn82sxgMKlctnbZpbr7c0bTYfqBB4upPib bNBcoH29tGj6D8rZqMufwQEyouoTsa8= -----END CERTIFICATE-----Generated at Wed Aug 6 11:12:07 2025 by rpki-client