$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa File: aa969370-7f24-3b6a-8011-acd3cfea4b49.roa (raw, json) Hash identifier: 7Vk1eJHeiiolLGyteynzBnBRnlvMjLZsA23B9ri5MdI= Subject key identifier: 42:51:93:7A:65:AA:03:8B:82:94:8A:2A:25:18:B8:5F:06:74:B6:BB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0F54854BA8538C8715140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 40.142.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f5:48:54:ba:85:38:c8:71:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=aeecae4d-1deb-423e-8021-3dbae84430c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ec:f0:8e:6c:d2:87:32:58:16:75:5c:11:68: 9f:2f:08:22:eb:bb:6b:ee:35:a8:d9:e1:c0:c5:65: 96:52:d7:98:1f:02:55:fe:f0:ba:50:e9:21:56:94: c7:b0:5b:3e:96:39:fa:e0:51:dd:72:16:f9:71:24: ff:3a:fd:ad:3c:33:b6:d3:87:9d:59:3c:6e:05:2b: 82:a6:3e:8a:fb:9a:8f:dd:3c:70:98:5d:9a:7b:f8: 45:de:ae:5c:2c:fe:01:62:65:48:b0:c2:60:2a:d5: 56:17:9f:f8:5b:2a:65:1b:30:f8:8c:2a:a2:fa:fb: 17:9d:1f:ff:6f:c3:a1:19:55:45:2a:a7:06:81:3e: 86:d5:15:02:6c:08:63:b3:e1:0f:62:83:77:1a:c4: 61:ee:42:9d:de:7a:ff:84:bc:69:b5:50:7b:17:57: 5b:20:91:f7:ef:af:30:50:ca:f7:36:e4:34:5b:73: 59:7d:c8:a7:f9:57:e8:2e:9c:15:9f:14:31:ab:22: 3c:02:75:1b:42:86:d3:b5:2d:da:69:e6:22:43:03: cf:ce:f7:48:06:24:ca:55:c4:5c:ff:b4:59:8e:5a: 64:41:a5:62:82:5f:fa:30:23:43:4e:cd:67:38:7b: bf:6e:52:8c:30:d2:49:5c:65:e0:91:df:0b:d3:99: dd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:51:93:7A:65:AA:03:8B:82:94:8A:2A:25:18:B8:5F:06:74:B6:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:98:08:a6:51:2a:87:80:6f:95:c6:ba:8c:1c:29:20:99:09: a6:80:0f:ce:ec:2c:c6:42:8d:7e:d2:4f:6b:28:b3:94:52:ab: 50:c2:dd:9d:e1:3c:30:0f:f8:95:21:bc:fe:6e:b8:e3:17:b0: 59:52:1e:20:cf:c1:15:44:fa:79:75:f8:44:6d:10:54:03:cd: 6e:a0:f0:d5:75:c5:18:e0:ec:75:c1:bb:ef:83:88:8b:f4:72: 17:d4:cc:cb:4f:fc:bf:7f:61:3d:37:95:78:bc:94:b6:58:1d: e4:30:a7:5e:99:66:73:64:da:e2:b5:c3:91:0a:d6:93:f8:37: 78:c3:da:4b:40:71:43:08:a9:78:e8:12:d6:ed:38:cc:72:4c: 12:34:5f:7d:3c:03:b8:b2:9b:15:fc:05:87:4d:f9:a4:15:d4: 39:69:25:43:be:b3:78:eb:ab:b4:69:cb:60:d4:9d:cf:86:2b: d0:80:09:41:cf:a0:0a:f5:3c:98:ec:ad:93:74:0e:f6:26:41: 71:58:00:4e:59:17:05:c2:f6:22:b8:d3:64:c5:d2:7a:7a:7c: 3d:de:c3:f2:ae:a9:94:23:36:db:aa:5e:ca:42:1c:82:e9:82: 1b:21:55:f4:dd:3e:07:58:c2:31:7f:60:74:17:a0:b3:c1:78: 2a:3f:e8:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPVIVLqFOMhxUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YWVlY2FlNGQtMWRlYi00MjNlLTgwMjEtM2RiYWU4NDQzMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiezwjmzShzJYFnVcEWifLwgi67tr7jWo2eHA xWWWUteYHwJV/vC6UOkhVpTHsFs+ljn64FHdchb5cST/Ov2tPDO204edWTxuBSuC pj6K+5qP3TxwmF2ae/hF3q5cLP4BYmVIsMJgKtVWF5/4WyplGzD4jCqi+vsXnR// b8OhGVVFKqcGgT6G1RUCbAhjs+EPYoN3GsRh7kKd3nr/hLxptVB7F1dbIJH3768w UMr3NuQ0W3NZfcin+VfoLpwVnxQxqyI8AnUbQobTtS3aaeYiQwPPzvdIBiTKVcRc /7RZjlpkQaVigl/6MCNDTs1nOHu/blKMMNJJXGXgkd8L05nd3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJRk3plqgOLgpSKKiUYuF8GdLa7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWE5NjkzNzAtN2YyNC0z YjZhLTgwMTEtYWNkM2NmZWE0YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKI6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSYCKZRKoeAb5XGuowcKSCZCaaAD87sLMZCjX7ST2sos5RSq1DC3Z3h PDAP+JUhvP5uuOMXsFlSHiDPwRVE+nl1+ERtEFQDzW6g8NV1xRjg7HXBu++DiIv0 chfUzMtP/L9/YT03lXi8lLZYHeQwp16ZZnNk2uK1w5EK1pP4N3jD2ktAcUMIqXjo EtbtOMxyTBI0X308A7iymxX8BYdN+aQV1DlpJUO+s3jrq7Rpy2DUnc+GK9CACUHP oAr1PJjsrZN0DvYmQXFYAE5ZFwXC9iK402TF0np6fD3ew/KuqZQjNtuqXspCHILp ghshVfTdPgdYwjF/YHQXoLPBeCo/6Hw= -----END CERTIFICATE-----Generated at Fri Aug 8 10:12:56 2025 by rpki-client