$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa File: 757bd253-cf95-3776-a157-b88b50e26f1b.roa (raw, json) Hash identifier: l+svsSKMmRj+fVzShOJ4YD9fh+Zlr5asMucUb6Il5/w= Subject key identifier: 04:C7:6F:61:60:4F:64:2B:A5:EF:7C:EB:CA:0F:31:98:55:70:3F:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF049D6DC953C62435600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 40.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f0:49:d6:dc:95:3c:62:43:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ad9cdd1e-cf8f-488d-b6a4-0bcdd23ccaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6b:d6:92:ca:85:61:dd:54:9a:cf:35:78:48: f6:8f:ae:4e:b3:87:df:75:28:64:44:7d:d4:53:43: 2a:ef:c8:c8:bb:25:d4:f8:7f:ec:4a:55:c3:26:69: ca:dd:48:e6:ff:2a:0d:23:67:1a:23:3b:dd:5d:54: 37:01:dc:7f:c1:bc:b1:6b:1b:f2:64:66:b5:97:fc: dd:81:9c:2c:00:35:c6:ee:d8:97:de:7e:55:be:5d: f5:00:b6:b4:75:c6:92:eb:38:00:35:b3:12:b0:bd: 63:a3:8e:71:d8:ce:58:03:2e:40:8f:3d:77:1e:85: 82:35:3d:b2:d7:e5:a6:26:af:40:fe:2d:84:88:40: 2d:8a:ff:d6:e9:da:76:d9:9e:52:5e:e7:5c:1e:ba: b4:79:25:47:e5:f0:9d:51:62:11:c9:1c:e1:49:07: 98:19:30:73:95:e6:76:04:0d:9d:d0:64:4e:ed:10: 50:95:33:1d:19:d8:08:93:bf:ba:7d:4a:63:65:a1: 2b:37:9d:25:20:43:1a:41:de:3d:a3:5b:84:01:9d: 12:99:3e:38:f7:d9:f6:a3:9a:b6:34:23:b1:40:0f: 3e:ba:1a:de:a6:33:36:2f:9c:03:90:7f:15:33:3c: b5:6a:d5:4b:e3:4d:33:4b:3e:0c:8c:5d:5b:a2:15: 6d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C7:6F:61:60:4F:64:2B:A5:EF:7C:EB:CA:0F:31:98:55:70:3F:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:14:37:60:83:4a:36:23:bd:99:44:68:db:dc:34:10:81:48: fc:58:69:9b:45:ad:e5:a7:8f:59:02:78:41:a6:18:98:1c:75: 6a:a1:2d:79:c5:cc:a8:78:6f:7b:75:87:60:89:93:2b:af:09: 6d:3d:66:d4:51:36:fe:e5:ea:35:0c:08:cd:85:a8:71:9e:82: 80:c3:be:81:0e:c8:76:26:15:31:46:6b:d8:3f:d1:a3:dd:3a: 75:2d:26:f3:92:9d:03:6e:2a:fc:47:73:d4:63:5e:09:7c:a1: b8:aa:92:24:95:5a:8e:bb:76:6b:28:f6:4c:76:d0:35:68:f2: 17:06:e1:6a:39:0f:0c:01:fa:7e:f6:76:1e:14:fd:6d:15:27: 17:0e:a4:72:0c:8f:8b:86:f8:d6:af:b1:b6:18:a5:64:41:c9: 52:89:a7:f5:3c:7d:5c:e5:b9:cf:1e:45:b0:3b:a9:fc:b7:3c: 68:56:0e:72:18:c5:d3:22:41:89:36:80:69:a4:f9:02:55:79: 6d:63:08:19:f7:d0:05:ad:0a:4e:58:27:2b:85:25:0f:8f:1a: c3:62:cb:1d:85:99:73:18:00:cf:c4:77:22:cf:b5:f0:6c:e7: ea:65:da:cc:ab:51:66:23:c3:5c:90:ca:be:b1:17:b3:37:4f: 8a:fc:13:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPBJ1tyVPGJDVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YWQ5Y2RkMWUtY2Y4Zi00ODhkLWI2YTQtMGJjZGQyM2NjYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmvWksqFYd1Ums81eEj2j65Os4ffdShkRH3U U0Mq78jIuyXU+H/sSlXDJmnK3Ujm/yoNI2caIzvdXVQ3Adx/wbyxaxvyZGa1l/zd gZwsADXG7tiX3n5Vvl31ALa0dcaS6zgANbMSsL1jo45x2M5YAy5Ajz13HoWCNT2y 1+WmJq9A/i2EiEAtiv/W6dp22Z5SXudcHrq0eSVH5fCdUWIRyRzhSQeYGTBzleZ2 BA2d0GRO7RBQlTMdGdgIk7+6fUpjZaErN50lIEMaQd49o1uEAZ0SmT4499n2o5q2 NCOxQA8+uhrepjM2L5wDkH8VMzy1atVL400zSz4MjF1bohVtlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATHb2FgT2Qrpe9868oPMZhVcD9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzU3YmQyNTMtY2Y5NS0z Nzc2LWExNTctYjg4YjUwZTI2ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoUN2CDSjYjvZlEaNvcNBCBSPxYaZtFreWnj1kCeEGmGJgcdWqhLXnF zKh4b3t1h2CJkyuvCW09ZtRRNv7l6jUMCM2FqHGegoDDvoEOyHYmFTFGa9g/0aPd OnUtJvOSnQNuKvxHc9RjXgl8obiqkiSVWo67dmso9kx20DVo8hcG4Wo5DwwB+n72 dh4U/W0VJxcOpHIMj4uG+NavsbYYpWRByVKJp/U8fVzluc8eRbA7qfy3PGhWDnIY xdMiQYk2gGmk+QJVeW1jCBn30AWtCk5YJyuFJQ+PGsNiyx2FmXMYAM/EdyLPtfBs 5+pl2syrUWYjw1yQyr6xF7M3T4r8E0M= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:45 2025 by rpki-client