$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe0bef8a-bdac-3f7f-8501-306b6388c917.roa File: fe0bef8a-bdac-3f7f-8501-306b6388c917.roa (raw, json) Hash identifier: gLgyyvDt/HHupzeB/HvWWyVi4ReykSa20e5L53zYm/M= Subject key identifier: B8:10:56:3E:0A:3D:56:95:08:C0:6A:4B:69:BC:3A:2E:3D:70:A4:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95A88B74D1826C9F8280E060 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe0bef8a-bdac-3f7f-8501-306b6388c917.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 40.136.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:8b:74:d1:82:6c:9f:82:80:e0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f0bc4101-55a6-4151-9873-e96e6b514c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7c:93:b1:f0:b5:7b:fe:3e:07:70:4a:b5:22: 71:04:8f:30:1e:4c:84:bf:92:36:92:3a:2d:21:fe: 4d:eb:83:9c:99:34:bb:ca:4e:ef:77:42:f3:a2:86: 35:03:e2:8a:fe:36:94:93:e0:b2:35:fa:f1:e2:52: 91:cc:d1:83:5e:13:e7:78:2b:48:1e:d2:ea:2f:3e: c6:7e:89:f9:53:d5:e7:4e:42:11:6c:0e:58:17:20: d1:56:ac:76:41:6e:84:e0:7d:98:62:e7:45:d9:c1: 87:4e:fe:68:27:33:bd:cf:0f:fb:e0:4c:14:ad:bf: f0:56:45:e6:d9:84:d0:24:d2:92:9a:a0:b6:4b:05: 90:87:ed:08:6c:00:d5:30:0b:6f:28:3e:74:98:83: cb:77:47:2d:3a:71:0f:2a:59:7d:44:03:49:95:d0: 15:d4:dd:17:9d:d3:c5:21:81:d4:bd:be:f2:70:10: 99:35:76:ce:e4:db:c8:9b:ba:0f:ed:29:4b:8c:3f: 57:a9:0a:21:ee:70:84:6b:54:cf:7b:b9:cf:39:c4: 97:8b:13:9d:99:ad:79:8a:56:21:07:d2:de:40:e2: fe:91:ba:21:d9:65:f0:6c:c6:db:9d:45:99:ae:fb: bd:c1:a0:66:d4:4b:ff:71:04:48:2b:d6:5d:ab:28: e4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:10:56:3E:0A:3D:56:95:08:C0:6A:4B:69:BC:3A:2E:3D:70:A4:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe0bef8a-bdac-3f7f-8501-306b6388c917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f8:3c:9e:bb:8d:d5:7e:f3:a8:c8:ce:b4:cc:1d:0b:bf:77: 2a:2d:45:1c:b5:08:60:de:9c:10:d5:5f:74:a0:99:b4:1a:54: 18:76:9a:81:a5:c4:31:f0:e0:e4:01:25:2a:12:3d:6d:02:1c: 02:03:99:0c:24:cc:7e:51:e5:6b:11:25:ad:15:64:23:a6:65: 51:f0:02:df:f7:f1:67:6c:34:8d:b4:58:5d:fe:09:b7:e9:fa: 72:19:57:b3:71:97:3c:e1:c5:c1:0c:50:d8:e0:a0:c5:66:4b: cd:e5:12:16:34:6f:0e:6c:70:d2:b8:aa:05:e8:5d:37:1b:12: 8f:a0:fe:89:fe:c2:3d:ab:a2:10:a4:40:85:4b:14:23:80:db: ad:f6:04:0d:ac:15:5a:f1:16:11:05:16:5b:43:7b:f7:4c:2a: a9:5c:24:54:70:c5:17:68:e3:e3:19:67:4f:cd:2a:b3:b9:94: d6:1f:ec:ab:ef:cd:0d:ad:e9:5e:ab:c6:33:70:97:6f:fd:6c: fd:b1:f5:d6:b8:5e:94:4b:5a:e5:7d:35:9d:52:4b:f7:69:34: 15:14:3a:29:e9:96:dd:e7:5c:1f:40:de:c4:e0:3b:76:1a:d4: 79:82:f3:20:00:01:e8:9e:68:da:bd:b8:78:5e:84:d4:d6:26: fd:23:e2:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqIt00YJsn4KA4GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjBiYzQxMDEtNTVhNi00MTUxLTk4NzMtZTk2ZTZiNTE0YzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXyTsfC1e/4+B3BKtSJxBI8wHkyEv5I2kjot If5N64OcmTS7yk7vd0LzooY1A+KK/jaUk+CyNfrx4lKRzNGDXhPneCtIHtLqLz7G fon5U9XnTkIRbA5YFyDRVqx2QW6E4H2YYudF2cGHTv5oJzO9zw/74EwUrb/wVkXm 2YTQJNKSmqC2SwWQh+0IbADVMAtvKD50mIPLd0ctOnEPKll9RANJldAV1N0XndPF IYHUvb7ycBCZNXbO5NvIm7oP7SlLjD9XqQoh7nCEa1TPe7nPOcSXixOdma15ilYh B9LeQOL+kboh2WXwbMbbnUWZrvu9waBm1Ev/cQRIK9ZdqyjkiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgQVj4KPVaVCMBqS2m8Oi49cKQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmUwYmVmOGEtYmRhYy0z ZjdmLTg1MDEtMzA2YjYzODhjOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKIioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE74PJ67jdV+86jIzrTMHQu/dyotRRy1CGDenBDVX3SgmbQaVBh2moGl xDHw4OQBJSoSPW0CHAIDmQwkzH5R5WsRJa0VZCOmZVHwAt/38WdsNI20WF3+Cbfp +nIZV7NxlzzhxcEMUNjgoMVmS83lEhY0bw5scNK4qgXoXTcbEo+g/on+wj2rohCk QIVLFCOA2632BA2sFVrxFhEFFltDe/dMKqlcJFRwxRdo4+MZZ0/NKrO5lNYf7Kvv zQ2t6V6rxjNwl2/9bP2x9da4XpRLWuV9NZ1SS/dpNBUUOinplt3nXB9A3sTgO3Ya 1HmC8yAAAeieaNq9uHhehNTWJv0j4rA= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:16 2025 by rpki-client