$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa File: ef4fe73d-8e5b-3799-944d-41b1981f6353.roa (raw, json) Hash identifier: Dfo2V23yijGtNLmoEupBVFdhioHSS5FzpRHJJHirMhg= Subject key identifier: BD:99:54:E4:44:FD:80:F8:24:F3:09:F0:50:88:F3:2A:CD:A2:0A:00 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D9FE4E2D1AC506E3B980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 30373 IP address blocks: 40.128.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d9:fe:4e:2d:1a:c5:06:e3:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=f54d3a58-4471-4507-9adc-6b5182743f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1a:7b:21:1e:81:ea:be:38:c3:1a:64:82:df: e0:56:6e:92:53:8a:52:84:f0:fa:fa:f4:98:42:f3: bd:b9:e6:f2:d4:11:78:d9:99:ae:88:cf:2e:53:00: 56:16:c1:9f:77:ac:92:01:5d:62:23:07:cc:71:2d: da:72:10:82:c0:f4:99:77:78:4b:16:07:a1:d4:4c: 69:2d:83:25:a8:8d:f9:18:5e:dc:b5:e2:9d:eb:35: 84:6e:6e:e8:20:ef:60:50:f4:68:81:5d:a1:02:d6: 3f:f0:2d:7b:60:4d:c3:76:f5:29:69:43:12:d3:11: f2:62:c1:a4:8e:98:80:f8:39:0a:38:9f:ab:03:1b: e0:30:a1:d4:cc:94:74:07:43:8f:84:fc:1b:65:56: 97:75:82:54:a3:79:93:bb:3a:67:5c:68:ee:9e:dc: 49:51:5b:09:a9:15:98:d1:81:d1:4a:1f:50:91:f3: fa:f4:5e:7a:9d:32:b7:36:4c:c0:a7:95:70:ff:cf: c4:ff:bb:a3:b4:d5:4f:d6:82:63:e7:3f:45:80:b8: b3:5d:a6:2b:f2:d1:53:de:39:b6:73:ff:64:ab:d0: 63:e2:91:15:5a:f5:ff:92:9c:da:84:de:da:5b:a0: 67:cf:00:ee:77:8b:5e:0c:21:f3:13:1a:25:7e:05: c3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:99:54:E4:44:FD:80:F8:24:F3:09:F0:50:88:F3:2A:CD:A2:0A:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.128.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:97:3f:a5:1a:c6:92:15:08:c2:3f:b2:c1:ac:76:90:ca:a0: 01:c0:0d:05:2c:55:cb:e3:43:23:11:f7:df:76:8e:de:0c:37: fe:5a:c4:79:12:fe:31:ba:01:1a:1c:65:16:4a:ac:5f:85:83: d5:9a:12:af:80:8f:0c:31:07:b4:24:6c:66:05:ee:b6:50:3b: 88:f3:66:cd:1d:74:fc:3b:0b:89:61:02:19:04:c9:40:07:c9: 7a:6a:0d:1c:a3:c6:de:a0:02:6a:5a:ac:87:1d:61:c0:2e:92: a4:90:9d:11:80:b5:75:2b:3f:32:53:75:13:80:0a:2e:d6:af: e0:eb:e9:81:e0:10:7b:ac:bb:ac:70:18:c2:2e:d4:8f:c1:46: 11:66:c2:ae:f6:07:de:b9:9d:e0:28:74:9e:47:3e:61:c4:16: e0:d3:d9:35:dd:81:7e:da:86:46:01:ab:7c:83:7a:3c:7c:d1: 52:ed:56:00:b6:c9:be:b7:c8:a6:de:67:03:e4:b7:3c:38:5f: 90:a9:58:ba:f1:12:59:15:3d:dc:4e:c5:9a:8a:e6:ec:04:0b: d5:23:95:17:05:e4:8f:04:48:ef:23:cd:69:b7:9a:1f:0b:64: 81:9e:b8:eb:00:1b:a3:0b:01:ad:c1:74:c2:fd:58:1a:15:60: bd:25:fe:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNn+Ti0axQbjuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZjU0ZDNhNTgtNDQ3MS00NTA3LTlhZGMtNmI1MTgyNzQzZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBp7IR6B6r44wxpkgt/gVm6SU4pShPD6+vSY QvO9ueby1BF42ZmuiM8uUwBWFsGfd6ySAV1iIwfMcS3achCCwPSZd3hLFgeh1Exp LYMlqI35GF7cteKd6zWEbm7oIO9gUPRogV2hAtY/8C17YE3DdvUpaUMS0xHyYsGk jpiA+DkKOJ+rAxvgMKHUzJR0B0OPhPwbZVaXdYJUo3mTuzpnXGjuntxJUVsJqRWY 0YHRSh9QkfP69F56nTK3NkzAp5Vw/8/E/7ujtNVP1oJj5z9FgLizXaYr8tFT3jm2 c/9kq9Bj4pEVWvX/kpzahN7aW6BnzwDud4teDCHzExolfgXDgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2ZVORE/YD4JPMJ8FCI8yrNogoAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWY0ZmU3M2QtOGU1Yi0z Nzk5LTk0NGQtNDFiMTk4MWY2MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKID2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCXP6UaxpIVCMI/ssGsdpDKoAHADQUsVcvjQyMR9992jt4MN/5axHkS /jG6ARocZRZKrF+Fg9WaEq+AjwwxB7QkbGYF7rZQO4jzZs0ddPw7C4lhAhkEyUAH yXpqDRyjxt6gAmparIcdYcAukqSQnRGAtXUrPzJTdROACi7Wr+Dr6YHgEHusu6xw GMIu1I/BRhFmwq72B965neAodJ5HPmHEFuDT2TXdgX7ahkYBq3yDejx80VLtVgC2 yb63yKbeZwPktzw4X5CpWLrxElkVPdxOxZqK5uwEC9UjlRcF5I8ESO8jzWm3mh8L ZIGeuOsAG6MLAa3BdML9WBoVYL0l/jY= -----END CERTIFICATE-----Generated at Thu Aug 7 01:20:31 2025 by rpki-client