$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8e446b0-1d4b-36b0-9205-38cb59066015.roa File: a8e446b0-1d4b-36b0-9205-38cb59066015.roa (raw, json) Hash identifier: V39hI/1I7Bn4E2erHNcymJ2KC/K5B2QaIqkNvdRmmh4= Subject key identifier: 52:ED:64:A4:CC:6D:21:99:89:79:91:B5:D2:60:57:66:66:9F:71:4E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B5762EAB496AFDE58AF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8e446b0-1d4b-36b0-9205-38cb59066015.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 40.142.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:57:62:ea:b4:96:af:de:58:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=318f44d9-fdc7-4faf-b23f-040e9252d114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:51:d9:21:41:5f:8e:9d:1b:a3:91:d6:dc: e4:4c:68:96:11:8b:a9:ae:e2:ff:63:05:bb:39:33: a5:5e:24:6e:f1:8d:fc:d9:90:eb:4f:a5:a1:92:d3: e4:6e:7a:c0:6d:f2:46:74:59:30:e7:5d:d6:43:af: 60:8a:a4:90:cb:c2:f3:b2:53:22:6e:13:0d:bf:3d: 04:fe:37:d9:38:8c:e2:27:05:71:22:cd:09:9c:82: 49:f3:6c:44:61:c9:81:ab:3b:2e:11:68:4e:de:4f: eb:9c:02:21:bb:18:40:ba:d6:fd:31:0e:36:41:e0: 6a:76:3f:01:59:da:81:12:37:93:18:e1:66:6c:c1: 9e:bf:c8:40:8b:82:d0:91:76:88:8b:d1:8c:9b:42: a9:b1:ca:17:c2:6d:e9:c2:b7:5b:48:35:b4:b1:e7: d6:98:c4:11:81:66:19:82:a1:7b:a0:79:ae:42:c1: 7d:a4:86:2b:98:8e:06:f1:fa:4b:4e:68:60:c7:b5: 6a:7b:1f:82:9f:34:1c:47:f9:d9:41:2c:d2:0a:93: bd:fa:24:26:23:0d:d3:0e:5a:10:06:67:9a:76:7d: bd:81:34:d1:a5:ad:14:46:8e:1f:f1:12:a8:b8:e2: 47:04:14:53:a1:97:c0:d0:82:76:87:56:57:08:ef: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:ED:64:A4:CC:6D:21:99:89:79:91:B5:D2:60:57:66:66:9F:71:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8e446b0-1d4b-36b0-9205-38cb59066015.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:42:74:8b:48:18:d4:d6:55:e3:c1:30:10:34:9f:01:3e:3b: 9c:82:93:4c:a0:d5:b3:1e:7e:d1:07:98:55:f6:23:0e:51:2d: b9:a2:16:d2:b5:8b:9d:ac:e0:78:50:89:f8:b5:97:5e:cc:05: 2b:fb:14:c2:33:49:80:30:46:d3:50:70:e1:28:b8:2e:fb:99: 40:e0:02:4a:31:65:f8:48:db:80:71:d0:41:b0:94:ca:b2:e5: 02:36:45:c1:8d:b5:25:bf:84:df:45:b4:e3:b4:69:83:33:3f: 17:c8:e3:38:bb:4c:2a:6e:dd:7d:08:1d:26:e2:8d:ff:67:da: 7a:73:b1:e7:24:2c:f6:af:87:cc:ff:a9:ab:c6:99:b8:b0:66: fc:3d:59:3e:8c:15:48:ba:3f:76:88:60:f0:ea:95:69:71:53: 96:9f:24:68:be:12:26:79:9a:07:56:a2:01:2a:7e:67:b6:5a: ae:e2:05:a9:58:b6:9a:52:ab:2e:f0:0d:e6:1b:59:bb:8f:e7: 9a:b1:96:6b:f8:e9:f9:7a:8e:84:fe:71:56:85:d5:75:8b:08: de:af:91:d1:9e:de:73:39:52:15:72:03:a9:77:ff:5d:51:d5: 73:69:e0:ee:4b:33:fc:9f:0e:72:0a:0d:6c:32:77:86:6c:51: 30:fc:4d:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1di6rSWr95YrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MzE4ZjQ0ZDktZmRjNy00ZmFmLWIyM2YtMDQwZTkyNTJkMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3RR2SFBX46dG6OR1tzkTGiWEYupruL/YwW7 OTOlXiRu8Y382ZDrT6WhktPkbnrAbfJGdFkw513WQ69giqSQy8LzslMibhMNvz0E /jfZOIziJwVxIs0JnIJJ82xEYcmBqzsuEWhO3k/rnAIhuxhAutb9MQ42QeBqdj8B WdqBEjeTGOFmbMGev8hAi4LQkXaIi9GMm0KpscoXwm3pwrdbSDW0sefWmMQRgWYZ gqF7oHmuQsF9pIYrmI4G8fpLTmhgx7Vqex+CnzQcR/nZQSzSCpO9+iQmIw3TDloQ Bmeadn29gTTRpa0URo4f8RKouOJHBBRToZfA0IJ2h1ZXCO/axwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLtZKTMbSGZiXmRtdJgV2Zmn3FOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYThlNDQ2YjAtMWQ0Yi0z NmIwLTkyMDUtMzhjYjU5MDY2MDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRCdItIGNTWVePBMBA0nwE+O5yCk0yg1bMeftEHmFX2Iw5RLbmiFtK1 i52s4HhQifi1l17MBSv7FMIzSYAwRtNQcOEouC77mUDgAkoxZfhI24Bx0EGwlMqy 5QI2RcGNtSW/hN9FtOO0aYMzPxfI4zi7TCpu3X0IHSbijf9n2npzseckLPavh8z/ qavGmbiwZvw9WT6MFUi6P3aIYPDqlWlxU5afJGi+EiZ5mgdWogEqfme2Wq7iBalY tppSqy7wDeYbWbuP55qxlmv46fl6joT+cVaF1XWLCN6vkdGe3nM5UhVyA6l3/11R 1XNp4O5LM/yfDnIKDWwyd4ZsUTD8Tcg= -----END CERTIFICATE-----Generated at Wed Aug 6 14:23:13 2025 by rpki-client