$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa File: d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa (raw, json) Hash identifier: bYiJ8dW2D1U7ah2qBgcyOHxZ1Bsl1ELcnErj78XPx/o= Subject key identifier: BE:10:06:9D:3E:F0:82:BF:88:FB:2A:BF:B2:7C:6B:57:1D:7F:BD:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B970CFBC7EF2DFC72F76BD900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 40.142.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:fb:c7:ef:2d:fc:72:f7:6b:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=4c60a83d-7810-4179-b0f9-42f1e7112ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:09:4f:a9:11:0e:fb:84:3a:b9:d0:2b:09:c4: 75:88:e4:89:26:93:7c:31:e8:54:b8:7c:d8:5d:96: 25:7d:9a:1e:a8:c1:df:ca:49:54:02:16:f1:37:b2: 26:55:e4:4a:c1:c5:cf:ac:b5:21:ad:65:8c:a5:2c: 15:9a:d3:fa:c4:47:96:13:30:ed:00:a1:66:61:5c: 78:b6:80:ff:e4:1d:c3:9a:a4:59:cc:a5:52:e5:ec: 52:f6:08:db:24:48:b2:78:bc:ad:ee:05:b6:01:4b: b8:76:36:07:72:11:b0:7e:fd:7d:22:f5:f4:f5:64: ce:e3:4f:92:fa:45:22:4d:85:31:23:79:d0:55:9c: dd:04:64:a1:05:41:e1:6a:2e:f2:76:66:69:14:b7: 72:c3:77:5c:3d:95:f6:6c:65:1a:e5:9a:7d:6b:20: 95:34:c5:e3:44:c6:6f:6f:d2:7f:35:f4:42:5f:63: dc:27:c3:5e:de:df:d3:38:ed:8f:cd:42:1f:bd:80: 57:3b:94:98:86:27:2f:61:29:31:b8:8e:68:ad:36: e2:94:84:b1:f0:7e:bc:68:ae:37:6d:53:f1:30:0e: 1a:b4:d3:3c:58:a1:82:4a:a3:35:e8:02:3b:b5:fd: d9:dd:3b:d5:89:3b:8a:72:c1:93:b9:bd:c8:9c:61: 2a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:10:06:9D:3E:F0:82:BF:88:FB:2A:BF:B2:7C:6B:57:1D:7F:BD:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:9e:6e:73:18:32:b3:be:8f:2d:b6:e0:ef:ee:bd:e4:f6:c9: 28:39:58:c9:2e:bb:69:74:14:2c:e8:00:45:84:12:64:34:ae: ee:5d:d0:35:f6:4e:b1:cf:81:c8:8d:22:8d:44:06:e3:00:c2: d1:53:9a:c4:c2:39:f9:c3:aa:b6:ed:d6:a6:ba:6e:2a:21:fb: 3a:bf:b9:fc:88:5f:fa:45:73:31:43:36:d7:e1:46:dc:40:90: 21:cb:f9:43:71:7c:17:b9:80:a5:5c:8e:71:64:b5:d3:00:32: 5a:d0:59:92:1e:01:c1:8c:db:3a:a9:a0:0a:27:b0:b7:c0:61: 13:74:bb:d6:34:08:4c:c0:f9:fc:c5:10:75:1c:66:6b:71:2a: c1:fe:9a:42:bf:ab:bf:b8:8f:ac:e8:4a:d8:e1:c2:a7:6c:e5: 60:5e:dc:bc:59:e8:bd:16:5c:61:ea:9e:37:c1:44:07:05:b3: 39:98:10:1b:74:fc:10:af:5c:73:07:71:e5:de:20:40:e5:74: 08:06:92:2d:b0:18:56:89:8a:00:a2:a1:09:8d:fa:30:06:2a: 01:54:fe:b0:9e:65:8e:73:5f:bc:2f:b2:65:9d:39:e4:bd:aa: 1c:9d:39:f3:74:6e:7b:4e:5d:ae:4c:da:e2:18:2d:ba:ed:cc: 86:2a:a1:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPvH7y38cvdr2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NGM2MGE4M2QtNzgxMC00MTc5LWIwZjktNDJmMWU3MTEyZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlglPqREO+4Q6udArCcR1iOSJJpN8MehUuHzY XZYlfZoeqMHfyklUAhbxN7ImVeRKwcXPrLUhrWWMpSwVmtP6xEeWEzDtAKFmYVx4 toD/5B3DmqRZzKVS5exS9gjbJEiyeLyt7gW2AUu4djYHchGwfv19IvX09WTO40+S +kUiTYUxI3nQVZzdBGShBUHhai7ydmZpFLdyw3dcPZX2bGUa5Zp9ayCVNMXjRMZv b9J/NfRCX2PcJ8Ne3t/TOO2PzUIfvYBXO5SYhicvYSkxuI5orTbilISx8H68aK43 bVPxMA4atNM8WKGCSqM16AI7tf3Z3TvViTuKcsGTub3InGEqKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4QBp0+8IK/iPsqv7J8a1cdf72TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFjM2Y3OWQtMjU3Yi0z MGRiLWIxZTUtZjU1ZWIzYjFlZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKI7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaebnMYMrO+jy224O/uveT2ySg5WMkuu2l0FCzoAEWEEmQ0ru5d0DX2 TrHPgciNIo1EBuMAwtFTmsTCOfnDqrbt1qa6bioh+zq/ufyIX/pFczFDNtfhRtxA kCHL+UNxfBe5gKVcjnFktdMAMlrQWZIeAcGM2zqpoAonsLfAYRN0u9Y0CEzA+fzF EHUcZmtxKsH+mkK/q7+4j6zoStjhwqds5WBe3LxZ6L0WXGHqnjfBRAcFszmYEBt0 /BCvXHMHceXeIEDldAgGki2wGFaJigCioQmN+jAGKgFU/rCeZY5zX7wvsmWdOeS9 qhydOfN0bntOXa5M2uIYLbrtzIYqoWg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:15 2025 by rpki-client