$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9764edd2-b751-3224-9100-20d11a932c21.roa File: 9764edd2-b751-3224-9100-20d11a932c21.roa (raw, json) Hash identifier: toUQ1c+UY2P6L/Bb/JDFmyMu13dXydggfMM5Ijm+48g= Subject key identifier: A9:79:82:3E:7E:40:CC:F9:B2:E0:98:FC:CD:26:ED:DD:AE:46:F7:63 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB3861E70448EC61972791280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9764edd2-b751-3224-9100-20d11a932c21.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 40.134.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:1e:70:44:8e:c6:19:72:79:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=628a02a1-dcb7-47ef-ae9d-d707f6d9b315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:84:58:38:03:2f:06:f6:46:8a:34:6e:9c:cb: 34:45:a4:c2:68:5d:08:9f:e8:a3:91:75:6e:34:74: c4:f2:f5:99:3e:79:73:5c:17:2a:c6:cf:08:93:c2: 3a:6a:b0:11:33:82:0b:92:cc:64:58:44:1a:e2:8f: 47:5f:40:1c:0a:aa:94:13:f6:af:57:a0:21:6e:a9: 14:53:38:81:7b:e4:bd:3b:7b:b9:1a:e4:ad:38:f9: a4:93:bd:8c:54:0c:8d:2a:a0:a3:01:bc:59:13:39: 17:25:46:3b:90:71:50:b7:3f:30:fc:7d:20:8c:6f: 72:03:8b:7c:20:b0:83:38:ed:d9:78:f7:b9:f7:a4: 25:90:e4:18:ac:14:ab:ac:6e:d9:4e:36:fb:fb:8a: cf:dc:5d:d2:d2:f1:4f:31:b6:21:65:ea:f2:40:0a: e5:00:31:97:df:47:22:64:cd:be:a1:92:7d:7e:53: 20:93:8b:6c:61:d0:70:1a:da:5b:ea:39:34:e3:11: 62:e8:5c:43:e0:b8:19:09:cd:aa:f8:96:94:20:a7: b1:23:c4:59:02:74:39:ab:76:d3:84:81:5c:8d:99: 6d:75:0c:fa:98:82:ec:4f:81:9b:51:af:75:32:e7: 51:52:e1:31:b2:66:37:d7:3a:65:c3:4c:f7:28:a9: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:79:82:3E:7E:40:CC:F9:B2:E0:98:FC:CD:26:ED:DD:AE:46:F7:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9764edd2-b751-3224-9100-20d11a932c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.134.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ab:8c:e7:7f:81:f1:09:fa:3d:46:36:63:b6:42:17:b2:02: a7:b3:59:2d:5c:e1:b0:85:59:3d:5a:1c:54:24:04:b3:47:46: ed:cd:12:d8:db:77:22:8c:f6:69:57:d4:02:55:64:02:f5:55: 54:8a:93:83:01:fb:dd:38:6a:48:08:a9:a8:82:b9:7e:40:0c: a9:a3:ba:ff:f8:50:f1:0b:cd:f7:4f:0e:e1:1a:93:f4:44:ba: 34:83:a7:c3:42:80:31:b6:15:16:be:ca:26:1a:c5:7d:0d:70: 3a:f4:7f:27:7f:8e:20:0f:64:40:bb:b2:2a:11:b4:6f:73:64: d5:28:a9:dd:0a:88:e1:78:e0:b3:c9:38:9f:45:a0:a1:f9:d0: 3e:c8:aa:bc:90:71:c9:55:3e:b5:2d:5e:f5:7b:ed:cd:02:f6: 3a:e5:0f:43:60:a0:ae:c0:4a:47:93:01:12:c7:1e:4d:7e:03: 54:8a:c2:3d:6f:72:a8:43:9d:ea:d9:17:b9:ee:bc:fc:f1:bf: a4:8c:48:da:ef:a4:03:16:f0:a0:75:a9:a5:e1:77:46:c9:3b: ad:c8:55:ec:28:ea:18:3b:c4:67:1e:28:2e:95:b9:db:f7:63: 56:74:a6:30:f4:c4:49:38:b2:05:79:aa:ef:dd:a1:5e:85:ac: 55:e4:76:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhh5wRI7GGXJ5EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk NjI4YTAyYTEtZGNiNy00N2VmLWFlOWQtZDcwN2Y2ZDliMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoRYOAMvBvZGijRunMs0RaTCaF0In+ijkXVu NHTE8vWZPnlzXBcqxs8Ik8I6arARM4ILksxkWEQa4o9HX0AcCqqUE/avV6AhbqkU UziBe+S9O3u5GuStOPmkk72MVAyNKqCjAbxZEzkXJUY7kHFQtz8w/H0gjG9yA4t8 ILCDOO3ZePe596QlkOQYrBSrrG7ZTjb7+4rP3F3S0vFPMbYhZeryQArlADGX30ci ZM2+oZJ9flMgk4tsYdBwGtpb6jk04xFi6FxD4LgZCc2q+JaUIKexI8RZAnQ5q3bT hIFcjZltdQz6mILsT4GbUa91MudRUuExsmY31zplw0z3KKnHrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl5gj5+QMz5suCY/M0m7d2uRvdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTc2NGVkZDItYjc1MS0z MjI0LTkxMDAtMjBkMTFhOTMyYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESrjOd/gfEJ+j1GNmO2QheyAqezWS1c4bCFWT1aHFQkBLNHRu3NEtjb dyKM9mlX1AJVZAL1VVSKk4MB+904akgIqaiCuX5ADKmjuv/4UPELzfdPDuEak/RE ujSDp8NCgDG2FRa+yiYaxX0NcDr0fyd/jiAPZEC7sioRtG9zZNUoqd0KiOF44LPJ OJ9FoKH50D7IqryQcclVPrUtXvV77c0C9jrlD0NgoK7ASkeTARLHHk1+A1SKwj1v cqhDnerZF7nuvPzxv6SMSNrvpAMW8KB1qaXhd0bJO63IVewo6hg7xGceKC6Vudv3 Y1Z0pjD0xEk4sgV5qu/doV6FrFXkdgU= -----END CERTIFICATE-----Generated at Wed Aug 6 11:20:13 2025 by rpki-client