$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa File: 51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa (raw, json) Hash identifier: fmxpP5SG/305FaBkpNm31Tn+xJkmkcSgvb/Ev/tUWjg= Subject key identifier: DB:4B:68:31:91:39:98:9E:31:38:05:22:A8:CE:7F:58:36:0D:C9:CF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC745129C2A99B143A42780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 40.136.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:45:12:9c:2a:99:b1:43:a4:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=420eacc3-617a-41c1-9c57-1b60f3ab72a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:7a:03:f8:82:24:d0:95:4e:e0:28:bf:1d: 9c:4f:72:12:e7:11:f6:70:6a:ac:cb:5c:a7:01:dc: 8b:3d:22:03:b0:ae:29:9d:27:c8:b5:92:81:17:4f: 16:25:38:17:60:00:e7:cf:f7:7f:11:bb:4f:ee:a5: 69:1b:68:6c:03:31:56:8e:d3:d2:2c:d7:20:d7:50: cc:f9:d0:dd:02:c9:9c:aa:be:6c:45:86:56:ce:37: 26:04:82:4b:ba:bb:7c:b2:9f:6d:a9:b2:ab:12:0b: 46:1d:c3:e0:57:e5:96:1f:93:89:46:eb:de:9a:fb: 04:a1:56:80:32:e6:43:77:87:90:88:99:ce:a4:df: cb:f2:2c:22:10:3d:33:88:f3:1b:3d:79:8a:67:1f: e0:4b:f2:ce:4c:78:22:53:6d:32:b8:5d:2d:70:8a: a1:76:2f:bd:78:3a:74:7a:ed:33:b6:86:17:3e:3a: 03:ee:23:ba:ec:93:73:79:e2:11:b0:d8:69:ea:ae: 34:15:ac:45:80:32:93:ff:06:46:f8:50:28:cb:fc: 42:68:41:e1:ee:ae:ae:4c:a5:3f:15:69:37:19:8d: 14:7e:9d:e8:b2:1b:3d:cc:8a:80:06:13:93:6b:c8: 08:29:53:70:67:ff:ef:58:0d:26:a8:2d:9d:96:21: 42:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4B:68:31:91:39:98:9E:31:38:05:22:A8:CE:7F:58:36:0D:C9:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f5:8d:2e:ca:58:4c:c4:64:e7:b8:29:55:31:39:82:fe:66: 3c:2f:f2:5a:5b:1f:8f:c2:06:5c:76:2f:25:00:a0:af:ef:f2: 23:c8:a4:b8:c3:48:e8:30:be:ed:b4:ff:3e:e4:64:d2:da:4e: 66:9e:f9:1d:7d:63:57:b7:79:ab:2a:b9:23:ab:82:97:2e:0c: 66:57:c9:f5:12:5d:8d:1c:99:0a:d4:6e:54:fc:1e:b3:8d:08: 1e:fe:cb:ff:ec:f2:75:6b:3b:17:98:12:15:ec:97:00:e9:47: ef:92:82:5e:fb:b8:fd:2f:d6:ef:ec:a2:7d:08:e1:41:fe:9c: 7b:39:75:e5:c0:00:87:72:37:77:9e:00:3d:08:d2:25:a7:28: ad:1a:bc:de:99:c6:f0:ac:3b:0b:b3:a5:1e:13:6b:b3:fd:ba: cb:c3:3a:df:72:7b:a8:6d:e7:27:06:98:28:e3:32:7f:ad:c3: d2:c8:1e:fb:18:ff:4d:00:94:d5:c5:03:67:05:6b:2d:10:78: c3:4d:1e:8d:86:39:18:98:62:56:ff:3b:3d:8a:bc:3a:7d:75: 88:05:f0:74:e9:63:a3:d1:6e:dd:f4:03:0d:25:32:08:6c:0b: 50:57:09:16:87:08:bd:8d:f1:6a:d9:96:b7:da:ee:93:96:ae: b6:5e:45:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0USnCqZsUOkJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NDIwZWFjYzMtNjE3YS00MWMxLTljNTctMWI2MGYzYWI3MmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI16A/iCJNCVTuAovx2cT3IS5xH2cGqsy1yn AdyLPSIDsK4pnSfItZKBF08WJTgXYADnz/d/EbtP7qVpG2hsAzFWjtPSLNcg11DM +dDdAsmcqr5sRYZWzjcmBIJLurt8sp9tqbKrEgtGHcPgV+WWH5OJRuvemvsEoVaA MuZDd4eQiJnOpN/L8iwiED0ziPMbPXmKZx/gS/LOTHgiU20yuF0tcIqhdi+9eDp0 eu0ztoYXPjoD7iO67JNzeeIRsNhp6q40FaxFgDKT/wZG+FAoy/xCaEHh7q6uTKU/ FWk3GY0Ufp3oshs9zIqABhOTa8gIKVNwZ//vWA0mqC2dliFCqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtLaDGROZieMTgFIqjOf1g2DcnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTFmYTcwMzYtNWRkMi0z ZjY5LTg2ZmYtN2Q5NTNiOWY2YjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD1jS7KWEzEZOe4KVUxOYL+Zjwv8lpbH4/CBlx2LyUAoK/v8iPIpLjD SOgwvu20/z7kZNLaTmae+R19Y1e3easquSOrgpcuDGZXyfUSXY0cmQrUblT8HrON CB7+y//s8nVrOxeYEhXslwDpR++Sgl77uP0v1u/son0I4UH+nHs5deXAAIdyN3ee AD0I0iWnKK0avN6ZxvCsOwuzpR4Ta7P9usvDOt9ye6ht5ycGmCjjMn+tw9LIHvsY /00AlNXFA2cFay0QeMNNHo2GORiYYlb/Oz2KvDp9dYgF8HTpY6PRbt30Aw0lMghs C1BXCRaHCL2N8WrZlrfa7pOWrrZeRVE= -----END CERTIFICATE-----Generated at Fri Oct 10 22:07:57 2025 by rpki-client