$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/188de73d-53b2-3643-8e21-e782867ebd70.roa File: 188de73d-53b2-3643-8e21-e782867ebd70.roa (raw, json) Hash identifier: D7z+FqKHxiFersgHz3P4edz8oLWG4FTzjtZrrx39adM= Subject key identifier: E2:EE:AB:CC:85:A5:D8:0D:57:9F:97:37:6B:C5:80:B1:D3:6F:DE:AE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D0609373FBB864D826A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/188de73d-53b2-3643-8e21-e782867ebd70.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 54673 IP address blocks: 40.129.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:06:09:37:3f:bb:86:4d:82:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b9ef6714-500c-4544-a57f-b6f992895f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:44:85:82:3b:ad:26:f6:f6:50:61:a8:08: 37:17:0b:3d:59:d2:4d:1a:e0:bb:d2:1f:91:ea:b6: 45:43:2b:df:c2:77:ae:63:7d:5e:ba:92:43:3d:a9: 79:3f:fc:a0:40:a0:e4:11:f0:e2:69:88:df:9f:08: 47:2b:d9:4f:8d:89:6a:cc:df:9a:19:2b:56:95:49: 3e:03:b0:69:88:94:26:d9:6e:43:64:5a:eb:15:f7: 6c:a9:27:3b:10:aa:d7:30:20:ec:20:f3:0f:10:8f: 9e:52:72:87:8d:b4:2b:03:59:5c:e4:a6:19:7d:db: d9:f3:4b:6f:3d:35:8b:2d:ac:c8:c8:f0:ef:59:d7: 29:bf:f7:9c:f6:40:86:8d:a1:92:52:2a:99:fe:e8: 0c:52:4d:fb:2b:7a:f0:27:20:f6:0c:db:7b:26:0d: d1:b4:f7:f7:18:5d:37:b5:8b:af:1c:84:d5:04:eb: 15:5a:6d:d2:fe:26:60:30:ff:c1:92:98:77:85:59: db:63:8c:19:88:fb:1c:76:ca:d6:29:f2:f8:e1:4f: 05:13:46:a1:78:ca:3a:27:c2:69:5c:a3:bc:5e:81: 55:55:61:ad:c4:86:03:2e:4d:fc:95:88:fb:ad:3e: 13:bc:6f:38:5f:77:52:8a:52:b9:f6:e2:33:f9:aa: 01:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EE:AB:CC:85:A5:D8:0D:57:9F:97:37:6B:C5:80:B1:D3:6F:DE:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/188de73d-53b2-3643-8e21-e782867ebd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.129.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:eb:da:33:d4:b1:99:9a:c8:cd:e7:d2:ff:e0:04:f5:72:3e: 12:48:d8:fa:bf:69:38:37:d4:0a:34:8f:d3:b4:e5:68:a4:d9: 15:22:3f:96:e4:4b:b2:47:db:98:3d:85:1a:e4:a3:00:25:b4: 83:d8:69:d4:6c:3f:31:04:5f:57:26:f6:65:71:dc:fa:7b:f3: a6:7e:2f:aa:60:74:53:82:66:4b:a6:ec:21:36:b6:8c:24:01: fe:46:de:31:f7:d4:72:00:3b:e2:23:a0:75:1e:c5:ea:5d:e9: 43:50:a2:9f:8a:56:9a:4c:7d:36:8b:11:0a:9e:9f:45:12:56: aa:fe:0c:1f:7c:7e:80:03:10:ca:b5:fd:81:a1:e3:09:05:b4: ef:01:93:b2:e0:80:ac:a4:c8:f4:59:28:d8:2c:c6:eb:e0:34: d2:33:ba:24:99:a7:2b:64:6f:a0:72:ee:7e:62:93:4e:31:50: 33:bb:0a:9d:2e:16:85:7d:ae:8d:e3:ba:7e:f6:d8:c5:e0:70: 69:45:6c:ea:72:72:b8:7c:53:5d:44:f9:5c:55:4b:72:b6:4d: a2:31:69:f1:f1:cf:b7:43:7b:3b:a0:f1:67:99:44:6f:9e:5b: b3:ff:02:1d:67:f1:da:c3:7c:4d:85:a1:04:86:82:02:82:71: 42:e2:c7:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQYJNz+7hk2CagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YjllZjY3MTQtNTAwYy00NTQ0LWE1N2YtYjZmOTkyODk1ZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRlEhYI7rSb29lBhqAg3Fws9WdJNGuC70h+R 6rZFQyvfwneuY31eupJDPal5P/ygQKDkEfDiaYjfnwhHK9lPjYlqzN+aGStWlUk+ A7BpiJQm2W5DZFrrFfdsqSc7EKrXMCDsIPMPEI+eUnKHjbQrA1lc5KYZfdvZ80tv PTWLLazIyPDvWdcpv/ec9kCGjaGSUiqZ/ugMUk37K3rwJyD2DNt7Jg3RtPf3GF03 tYuvHITVBOsVWm3S/iZgMP/Bkph3hVnbY4wZiPscdsrWKfL44U8FE0aheMo6J8Jp XKO8XoFVVWGtxIYDLk38lYj7rT4TvG84X3dSilK59uIz+aoBQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLuq8yFpdgNV5+XN2vFgLHTb96uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTg4ZGU3M2QtNTNiMi0z NjQzLThlMjEtZTc4Mjg2N2ViZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIG+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALr2jPUsZmayM3n0v/gBPVyPhJI2Pq/aTg31Ao0j9O05Wik2RUiP5bk S7JH25g9hRrkowAltIPYadRsPzEEX1cm9mVx3Pp786Z+L6pgdFOCZkum7CE2towk Af5G3jH31HIAO+IjoHUexepd6UNQop+KVppMfTaLEQqen0USVqr+DB98foADEMq1 /YGh4wkFtO8Bk7LggKykyPRZKNgsxuvgNNIzuiSZpytkb6By7n5ik04xUDO7Cp0u FoV9ro3jun722MXgcGlFbOpycrh8U11E+VxVS3K2TaIxafHxz7dDezug8WeZRG+e W7P/Ah1n8drDfE2FoQSGggKCcULix9k= -----END CERTIFICATE-----Generated at Fri Oct 10 20:04:13 2025 by rpki-client