$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0866f524-d9d4-3406-8c4b-94f6c357db6e.roa File: 0866f524-d9d4-3406-8c4b-94f6c357db6e.roa (raw, json) Hash identifier: M0BLXbJXZuAvTiUFo1n5VjWm8Ml0n08RtTPjso/gt4g= Subject key identifier: DE:51:60:29:E6:E1:A5:07:52:2B:45:99:FC:28:ED:5E:20:82:7C:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD5CD3F309BC5E3EB3580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0866f524-d9d4-3406-8c4b-94f6c357db6e.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 393278 IP address blocks: 40.136.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d5:cd:3f:30:9b:c5:e3:eb:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3923ccb4-9a5e-498e-8601-ce82aa3a1393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:24:05:25:1a:6d:b2:3b:64:b8:d9:60:4e: f7:d9:f6:f5:a0:a2:d2:c8:fd:cc:2f:d0:99:49:ef: 7d:36:6f:8c:6a:e4:7e:81:ed:b7:4d:08:64:07:a4: 22:df:a2:3d:70:cc:d8:48:bc:bd:e7:28:3f:4a:84: c9:8a:b0:e7:4b:ff:64:be:37:cb:47:42:6c:0e:73: fb:af:e0:53:b5:4a:a1:5e:b4:b3:e4:56:6d:e4:8a: ff:23:d8:11:91:ac:83:97:8c:9a:09:d7:73:9e:74: 5b:9b:a6:7e:b3:c8:7b:79:b5:98:c9:64:a3:7b:3a: 15:cc:0f:70:13:2f:36:0f:5a:8e:0b:c2:f6:a4:12: a8:1e:f6:a0:96:03:e5:83:09:80:95:f4:b6:4e:f5: d7:91:bf:55:95:ad:5c:a3:65:76:c4:aa:1a:b3:36: 11:a3:f4:fb:54:44:81:cf:2a:5a:ad:80:f3:f9:60: 28:41:f2:96:59:9a:94:b3:0b:cd:8b:05:47:10:92: 4f:aa:37:d4:57:59:b0:e5:45:cf:1f:6a:e5:3c:03: 1d:ed:23:7c:73:6a:1f:b3:9b:70:74:91:c7:72:6b: 20:67:a4:dd:bd:46:10:ad:c8:f0:d9:4c:32:5b:ea: 74:d8:6c:b9:8d:87:c6:1c:a5:3e:d4:9d:2e:e6:64: 5a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:51:60:29:E6:E1:A5:07:52:2B:45:99:FC:28:ED:5E:20:82:7C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0866f524-d9d4-3406-8c4b-94f6c357db6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d7:87:37:80:0f:cc:70:e8:9a:70:57:12:56:68:8f:04:e8: ce:7b:d5:33:2f:92:c2:72:1a:64:a9:1b:3d:a6:4e:a5:18:b2: 33:07:60:5e:81:3a:21:e1:59:af:70:11:c8:cf:68:17:3e:77: fa:dc:0a:a8:31:4c:a5:88:20:04:9a:2c:71:0e:b1:53:ec:cc: 9b:bb:8e:fc:ef:15:aa:f0:85:83:74:e2:25:e6:21:fd:3d:4f: 92:bc:4e:b8:ee:0d:87:aa:e9:45:72:7c:6f:57:67:50:60:f8: 25:08:0c:c7:f3:62:79:94:7f:af:05:5b:1b:43:5c:b3:5e:e3: 69:99:d3:12:4c:7d:58:c6:af:8a:53:63:55:56:2d:ee:5e:87: af:d4:3f:aa:58:e2:43:7c:3a:58:23:4d:24:be:26:5b:5b:67: d2:b6:4b:6d:72:c2:ee:53:11:a0:8c:b1:f6:77:15:28:4a:85: b8:5c:15:b0:a1:f4:09:5d:8e:ad:12:1d:fa:79:c7:b3:e6:a8: d1:10:46:3f:00:34:3a:cf:4c:dc:9d:11:20:57:b2:68:c1:62: df:79:f3:10:65:f5:26:c6:8c:61:1a:d7:fd:9f:78:d7:3a:16: 3f:60:00:01:59:4d:bf:78:8f:83:1d:d0:08:b2:4b:ba:3e:bf: d2:20:00:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNXNPzCbxePrNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MzkyM2NjYjQtOWE1ZS00OThlLTg2MDEtY2U4MmFhM2ExMzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCgkBSUabbI7ZLjZYE732fb1oKLSyP3ML9CZ Se99Nm+MauR+ge23TQhkB6Qi36I9cMzYSLy95yg/SoTJirDnS/9kvjfLR0JsDnP7 r+BTtUqhXrSz5FZt5Ir/I9gRkayDl4yaCddznnRbm6Z+s8h7ebWYyWSjezoVzA9w Ey82D1qOC8L2pBKoHvaglgPlgwmAlfS2TvXXkb9Vla1co2V2xKoaszYRo/T7VESB zyparYDz+WAoQfKWWZqUswvNiwVHEJJPqjfUV1mw5UXPH2rlPAMd7SN8c2ofs5tw dJHHcmsgZ6TdvUYQrcjw2UwyW+p02Gy5jYfGHKU+1J0u5mRaKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5RYCnm4aUHUitFmfwo7V4ggnwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDg2NmY1MjQtZDlkNC0z NDA2LThjNGItOTRmNmMzNTdkYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPXhzeAD8xw6JpwVxJWaI8E6M571TMvksJyGmSpGz2mTqUYsjMHYF6B OiHhWa9wEcjPaBc+d/rcCqgxTKWIIASaLHEOsVPszJu7jvzvFarwhYN04iXmIf09 T5K8TrjuDYeq6UVyfG9XZ1Bg+CUIDMfzYnmUf68FWxtDXLNe42mZ0xJMfVjGr4pT Y1VWLe5eh6/UP6pY4kN8OlgjTSS+JltbZ9K2S21ywu5TEaCMsfZ3FShKhbhcFbCh 9Aldjq0SHfp5x7PmqNEQRj8ANDrPTNydESBXsmjBYt958xBl9SbGjGEa1/2feNc6 Fj9gAAFZTb94j4Md0AiyS7o+v9IgAEY= -----END CERTIFICATE-----Generated at Fri Oct 10 20:06:36 2025 by rpki-client