$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de489e93-9e7d-3cda-8126-d8c859ae8754.roa File: de489e93-9e7d-3cda-8126-d8c859ae8754.roa (raw, json) Hash identifier: azftxMxWRbHMFs/M3iqy0teQZX53u7K8I1cMyDk4r7c= Subject key identifier: DD:88:7D:B4:C0:A1:39:F8:0B:DE:11:A4:68:CE:E3:8B:57:50:C2:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0DCDCCEB029FEBA5AB6E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de489e93-9e7d-3cda-8126-d8c859ae8754.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 40.142.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:dc:dc:ce:b0:29:fe:ba:5a:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=843bbec7-386f-48fc-9b4b-d822ee7e8f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ff:b3:c2:a0:09:81:2d:5f:f7:ca:f6:da:59: 8a:5a:73:fe:4b:05:9e:17:78:48:46:66:ce:c3:a4: ca:66:25:ca:b8:f7:4d:c9:d6:80:62:7f:3b:e1:f9: 0b:68:f4:81:8e:0a:6b:f2:24:af:3b:6c:c3:36:a6: ac:e6:2f:71:90:a0:13:14:d5:bf:67:5f:a1:57:7f: 48:4c:0c:eb:20:1f:c8:c1:bc:d1:39:bf:54:af:29: 72:8c:74:7b:2e:c6:1e:52:96:3b:82:6c:48:e0:f1: 64:e8:fc:53:2a:4a:86:24:67:9d:f7:20:43:00:4e: 39:14:77:f1:1d:ee:4a:58:08:7e:40:31:68:b4:9c: 9d:72:c8:c9:f6:0d:3b:60:21:ab:dd:4c:f6:4f:28: a4:36:b3:ea:af:4d:52:e3:c4:db:f4:ed:16:f4:d9: e3:ea:7c:ca:2d:90:1a:da:f4:12:de:77:c8:44:51: 8f:54:57:6f:4b:af:f4:55:51:c5:b6:ef:d4:c0:6e: 69:53:b1:a2:ff:6e:a5:b9:d3:33:d3:5b:e7:10:2b: 52:9e:89:8a:94:91:7d:bb:02:52:b0:38:bf:23:25: 1b:2a:e0:67:f0:ca:e8:13:69:ea:a7:14:3e:20:26: be:a8:39:3e:2d:df:c4:22:5a:39:71:8b:52:d4:0b: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:88:7D:B4:C0:A1:39:F8:0B:DE:11:A4:68:CE:E3:8B:57:50:C2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de489e93-9e7d-3cda-8126-d8c859ae8754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:cb:ab:cf:c5:69:ed:80:fc:ea:95:5c:94:56:ab:5c:b2:70: b3:e0:26:50:86:fe:89:05:b8:8c:5f:9f:fb:13:11:3b:d1:f3: b0:4a:02:aa:58:f6:c9:d4:7b:e3:c3:37:57:b6:76:f5:66:db: 12:43:c2:40:76:76:4f:d5:ce:81:75:90:44:c5:f9:45:a8:6f: e6:01:41:03:eb:17:e4:4d:7c:ce:62:10:ba:d1:13:30:06:db: aa:0e:6f:b6:bd:5a:0a:fb:bd:81:5b:e9:2c:16:55:4b:dc:bd: fa:66:a9:3f:ae:b8:96:05:43:8e:6b:03:6d:30:91:5c:8f:b4: 5e:f9:c8:38:9d:24:50:5f:41:47:ab:7e:25:dd:ed:57:47:5a: b5:bf:4e:9e:cb:89:a2:30:61:c5:1d:28:7f:79:97:48:1e:dd: 71:26:bc:61:ad:6f:31:71:fd:49:e7:7a:20:12:c2:17:0a:9e: 82:9d:93:4e:73:3b:ba:18:37:b2:8e:71:47:36:f4:6c:10:8d: 87:c3:24:ef:c6:e2:27:82:c8:33:be:c5:38:4f:60:8a:6f:15: f6:3a:5b:a1:b7:80:20:db:9a:18:29:21:76:6e:76:27:3c:bc: d9:94:6a:b9:9e:35:30:ca:7c:32:f2:c2:20:a8:1d:44:67:ee: 41:f1:bc:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNzczrAp/rpatuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ODQzYmJlYzctMzg2Zi00OGZjLTliNGItZDgyMmVlN2U4Zjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP+zwqAJgS1f98r22lmKWnP+SwWeF3hIRmbO w6TKZiXKuPdNydaAYn874fkLaPSBjgpr8iSvO2zDNqas5i9xkKATFNW/Z1+hV39I TAzrIB/IwbzROb9UrylyjHR7LsYeUpY7gmxI4PFk6PxTKkqGJGed9yBDAE45FHfx He5KWAh+QDFotJydcsjJ9g07YCGr3Uz2TyikNrPqr01S48Tb9O0W9Nnj6nzKLZAa 2vQS3nfIRFGPVFdvS6/0VVHFtu/UwG5pU7Gi/26ludMz01vnECtSnomKlJF9uwJS sDi/IyUbKuBn8MroE2nqpxQ+ICa+qDk+Ld/EIlo5cYtS1AvMkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2IfbTAoTn4C94RpGjO44tXUMLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGU0ODllOTMtOWU3ZC0z Y2RhLTgxMjYtZDhjODU5YWU4NzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI7IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInLq8/Fae2A/OqVXJRWq1yycLPgJlCG/okFuIxfn/sTETvR87BKAqpY 9snUe+PDN1e2dvVm2xJDwkB2dk/VzoF1kETF+UWob+YBQQPrF+RNfM5iELrREzAG 26oOb7a9Wgr7vYFb6SwWVUvcvfpmqT+uuJYFQ45rA20wkVyPtF75yDidJFBfQUer fiXd7VdHWrW/Tp7LiaIwYcUdKH95l0ge3XEmvGGtbzFx/UnneiASwhcKnoKdk05z O7oYN7KOcUc29GwQjYfDJO/G4ieCyDO+xThPYIpvFfY6W6G3gCDbmhgpIXZudic8 vNmUarmeNTDKfDLywiCoHURn7kHxvG0= -----END CERTIFICATE-----Generated at Wed Aug 6 14:16:50 2025 by rpki-client