$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6b092898-0af3-37bf-a57a-8b128e0e8bdc.roa File: 6b092898-0af3-37bf-a57a-8b128e0e8bdc.roa (raw, json) Hash identifier: gIn5mjgzI9MTF8AJhZtZ4iQtIopkT80VwtXBZJXjWI4= Subject key identifier: C6:4E:62:A0:33:1B:6F:49:DD:AB:CD:50:F2:B7:27:D6:26:E1:E8:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF02A656E0C41299E0780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6b092898-0af3-37bf-a57a-8b128e0e8bdc.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 40.132.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f0:2a:65:6e:0c:41:29:9e:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=883b5808-2033-4c7d-a354-1d8d75ded502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:67:47:68:13:f5:ae:43:17:ab:e2:32:d0:2d: f7:3b:a5:20:a6:10:58:2f:d4:cb:bd:b2:5e:19:b3: 1b:ef:a9:ee:2b:fc:f2:a7:47:b4:57:ec:21:0f:7f: 8e:91:27:e0:c4:88:eb:22:07:d8:3e:27:58:25:2a: 7a:48:09:29:0c:0b:4b:73:67:7c:df:1f:1b:ff:04: fd:67:f8:f5:c7:5b:43:2f:1d:9d:46:fd:26:29:31: a1:9f:c6:8f:30:c9:63:ea:d3:d0:73:f6:58:36:a0: 7d:63:31:9c:c3:af:ae:d0:86:cb:3c:a4:fd:38:16: 65:92:89:8b:43:5b:c5:67:87:e6:ed:e4:a4:c3:5e: 7f:47:25:18:9a:39:61:c9:ea:75:66:d4:8c:25:0e: a9:8b:98:bc:4f:db:88:9d:ab:db:8c:69:06:cd:95: 4a:0d:6c:60:44:de:c0:0f:ed:b1:4c:66:b5:ef:78: 4b:d0:97:3d:98:74:b2:d8:04:28:2e:81:8e:7b:c0: 43:40:71:cb:f4:7e:55:e0:a5:bc:3a:e2:9c:af:f4: 91:75:20:55:ad:a4:ec:32:f4:ce:01:04:95:ec:ae: f2:43:45:9c:4e:93:a0:da:cd:62:67:d8:9c:e9:7b: 27:cb:ed:70:f1:e1:cf:a1:80:c5:8c:29:06:05:24: c3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4E:62:A0:33:1B:6F:49:DD:AB:CD:50:F2:B7:27:D6:26:E1:E8:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6b092898-0af3-37bf-a57a-8b128e0e8bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.132.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e2:f7:2f:fd:3f:a9:ba:17:2a:87:4a:2d:28:be:39:74:6f: f7:4e:9c:3c:0d:03:de:cd:8a:44:a9:84:9d:f4:50:13:d9:fc: c6:2f:83:5c:df:3d:37:8b:df:06:c4:7e:81:38:ed:e8:c0:1b: 1d:aa:0a:38:93:35:aa:e6:7a:3c:9a:40:5e:32:ec:80:a3:55: 04:f9:92:71:cb:33:f5:7f:88:b4:c3:96:52:ae:d9:79:d3:bf: 0b:b4:0c:ca:48:a1:2f:cb:bd:ba:d4:87:71:ec:58:34:ef:9b: 93:d6:ab:f8:87:4e:9b:bc:a9:0f:b7:02:fa:d7:8f:61:54:77: d8:77:44:31:60:7e:89:ac:b6:83:e9:80:aa:f6:cc:e3:0c:bb: 4d:f2:f7:cb:82:12:f6:1f:62:06:dd:01:22:0d:94:19:14:c4: c2:13:a4:c3:0e:4e:ff:11:11:01:45:bb:19:44:ab:5b:7a:af: d1:f2:6e:0a:41:cc:f2:8c:91:f3:ea:ea:3c:3e:ad:10:76:47: c6:7a:c0:1e:22:cb:cd:e7:fd:d2:42:2e:9e:df:be:c6:ac:b9: 84:6f:b6:ec:ee:9c:0b:aa:48:03:8f:6e:7a:07:ab:b4:d7:d3: b1:29:d2:9b:ad:87:4b:e8:5d:ba:9f:5f:2c:9c:7a:42:95:cc: 2c:2a:7c:51 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtxXPAqZW4MQSmeB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODgzYjU4MDgtMjAzMy00YzdkLWEzNTQtMWQ4ZDc1ZGVkNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWdHaBP1rkMXq+Iy0C33O6UgphBYL9TLvbJe GbMb76nuK/zyp0e0V+whD3+OkSfgxIjrIgfYPidYJSp6SAkpDAtLc2d83x8b/wT9 Z/j1x1tDLx2dRv0mKTGhn8aPMMlj6tPQc/ZYNqB9YzGcw6+u0IbLPKT9OBZlkomL Q1vFZ4fm7eSkw15/RyUYmjlhyep1ZtSMJQ6pi5i8T9uInavbjGkGzZVKDWxgRN7A D+2xTGa173hL0Jc9mHSy2AQoLoGOe8BDQHHL9H5V4KW8OuKcr/SRdSBVraTsMvTO AQSV7K7yQ0WcTpOg2s1iZ9ic6Xsny+1w8eHPoYDFjCkGBSTDoQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMZOYqAzG29J3avNUPK3J9Ym4eiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmIwOTI4OTgtMGFmMy0z N2JmLWE1N2EtOGIxMjhlMGU4YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKIQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlOL3L/0/qboXKodKLSi+OXRv906cPA0D3s2KRKmEnfRQE9n8xi+DXN89 N4vfBsR+gTjt6MAbHaoKOJM1quZ6PJpAXjLsgKNVBPmSccsz9X+ItMOWUq7ZedO/ C7QMykihL8u9utSHcexYNO+bk9ar+IdOm7ypD7cC+tePYVR32HdEMWB+iay2g+mA qvbM4wy7TfL3y4IS9h9iBt0BIg2UGRTEwhOkww5O/xERAUW7GUSrW3qv0fJuCkHM 8oyR8+rqPD6tEHZHxnrAHiLLzef90kIunt++xqy5hG+27O6cC6pIA49uegertNfT sSnSm62HS+hdup9fLJx6QpXMLCp8UQ== -----END CERTIFICATE-----Generated at Sat Oct 11 00:10:19 2025 by rpki-client