$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa File: f642a687-a386-3ce5-8205-1067458f0238.roa (raw, json) Hash identifier: nQZ9kB8NA+vSNZrU7d8CjVPI/iIL/J79UxQiVRP2/h0= Subject key identifier: 26:6D:25:9E:EA:70:BB:7C:F4:37:60:38:FE:2E:80:DE:72:A6:AA:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22171634E96471FC0DC5800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 40.142.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:71:63:4e:96:47:1f:c0:dc:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=e2baee8c-9eae-4cb0-918f-1a31ee0fd9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c1:ad:49:51:d6:67:90:7a:7c:3f:4c:65:3b: 57:5d:73:ea:cf:16:7d:a0:21:54:65:41:58:ff:d5: be:cf:b0:21:c4:60:34:dc:f5:0e:23:71:52:cb:6a: 3a:44:55:db:b6:7f:42:5a:b8:6f:3e:67:c8:8f:00: 45:e6:d7:72:25:83:f0:b4:94:25:76:3b:6b:fa:17: 6f:33:79:bd:b0:ad:1f:28:60:25:01:04:e0:a4:a8: f3:5b:18:36:f5:74:61:7f:54:00:78:f0:93:5d:93: b8:98:7c:85:f4:b5:37:d5:ec:16:4e:25:66:94:e7: 0c:42:21:51:ea:36:05:9b:2b:eb:ec:65:58:3e:08: 84:4e:e6:b7:57:8d:29:12:5a:3d:48:70:d2:28:6c: 4b:bd:ae:72:71:b3:41:c3:2b:b8:dd:d7:cb:ff:b3: 8f:98:e2:77:c2:c8:50:8a:a1:ed:6f:a8:0f:31:cb: c8:ed:4e:d9:db:b5:a7:31:2d:94:52:4e:84:33:0e: e5:44:aa:9c:73:7f:14:52:7c:90:41:d5:1c:db:c3: 29:f1:4e:85:c5:f4:57:e0:d9:60:df:38:82:c5:ac: 3c:e3:9b:70:cc:96:7f:24:c0:82:6a:1f:63:64:dd: d8:c0:21:19:b1:ae:75:93:e4:51:9a:e8:81:0f:fd: f0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6D:25:9E:EA:70:BB:7C:F4:37:60:38:FE:2E:80:DE:72:A6:AA:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5d:e3:7a:89:a6:98:74:5e:1c:27:8e:3f:fc:3f:d5:f4:f6: b5:15:11:2b:31:13:e1:14:61:68:73:36:f1:49:34:3a:1f:c9: a4:90:72:9b:b0:5f:b1:de:6e:be:12:34:2d:4c:17:b8:dd:13: 24:48:49:da:25:af:1a:07:65:0a:bf:9b:fc:0e:29:53:3c:dc: d2:44:16:61:7c:67:43:f1:02:bc:e6:b5:ad:ff:7a:21:44:8d: 33:9c:f5:01:ee:86:c1:1e:e6:40:06:d0:c6:2e:eb:72:43:70: b3:a7:7a:ad:85:32:7d:39:4c:fa:52:b2:1d:16:32:b0:0f:95: 2e:0d:5f:74:13:e6:2a:39:bd:1a:df:5d:8d:db:68:9a:e1:21: 41:90:85:11:36:d2:71:ca:8e:96:0f:40:a2:0f:a2:c3:9d:7b: 4e:5b:46:8d:e4:b7:c4:aa:03:99:73:c7:14:79:00:27:d3:24: 7c:88:b9:cf:c5:c1:b6:99:60:d8:8f:6c:64:3a:ba:17:25:60: 69:3a:76:60:2a:03:46:2c:2a:00:33:fb:36:49:80:ff:4d:b4: 47:4c:94:82:97:ba:98:c0:1d:76:02:ac:85:66:87:f5:82:6e: c5:09:91:87:4f:ad:8c:ce:74:e9:d2:9a:fe:ee:07:09:a2:84: b9:9c:6b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXFjTpZHH8DcWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTJiYWVlOGMtOWVhZS00Y2IwLTkxOGYtMWEzMWVlMGZkOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMGtSVHWZ5B6fD9MZTtXXXPqzxZ9oCFUZUFY /9W+z7AhxGA03PUOI3FSy2o6RFXbtn9CWrhvPmfIjwBF5tdyJYPwtJQldjtr+hdv M3m9sK0fKGAlAQTgpKjzWxg29XRhf1QAePCTXZO4mHyF9LU31ewWTiVmlOcMQiFR 6jYFmyvr7GVYPgiETua3V40pElo9SHDSKGxLva5ycbNBwyu43dfL/7OPmOJ3wshQ iqHtb6gPMcvI7U7Z27WnMS2UUk6EMw7lRKqcc38UUnyQQdUc28Mp8U6FxfRX4Nlg 3ziCxaw845twzJZ/JMCCah9jZN3YwCEZsa51k+RRmuiBD/3wkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZtJZ7qcLt89DdgOP4ugN5ypqpPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjY0MmE2ODctYTM4Ni0z Y2U1LTgyMDUtMTA2NzQ1OGYwMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKI6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5d43qJpph0Xhwnjj/8P9X09rUVESsxE+EUYWhzNvFJNDofyaSQcpuw X7Hebr4SNC1MF7jdEyRISdolrxoHZQq/m/wOKVM83NJEFmF8Z0PxArzmta3/eiFE jTOc9QHuhsEe5kAG0MYu63JDcLOneq2FMn05TPpSsh0WMrAPlS4NX3QT5io5vRrf XY3baJrhIUGQhRE20nHKjpYPQKIPosOde05bRo3kt8SqA5lzxxR5ACfTJHyIuc/F wbaZYNiPbGQ6uhclYGk6dmAqA0YsKgAz+zZJgP9NtEdMlIKXupjAHXYCrIVmh/WC bsUJkYdPrYzOdOnSmv7uBwmihLmca34= -----END CERTIFICATE-----Generated at Sat Aug 9 10:44:10 2025 by rpki-client