$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7858d667-e6fa-3f96-bdaf-8712e64c5159.roa File: 7858d667-e6fa-3f96-bdaf-8712e64c5159.roa (raw, json) Hash identifier: S/ksdT3nMB61JXTNF3FO9WV5YDLg4hJxsz9yvm1YDdw= Subject key identifier: 2F:65:F4:63:E8:F4:98:27:99:20:04:A7:03:73:30:44:0C:73:2D:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC751A2DE8AFF4EF91EA7C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7858d667-e6fa-3f96-bdaf-8712e64c5159.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 40.142.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:51:a2:de:8a:ff:4e:f9:1e:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=47d5ceb4-774a-4dfd-b445-5f2132ba39b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0b:0d:41:e9:89:d2:69:ed:57:5c:73:38:73: dc:41:3e:4b:1c:0e:69:17:a5:d2:e3:bd:dd:c1:9e: 12:72:b5:4b:32:a3:41:dd:f8:12:14:e6:50:59:67: 70:96:ee:a7:e4:23:5a:1e:45:0b:e4:e1:dd:b2:ef: b9:89:a4:57:10:3a:dd:90:d7:ed:63:8f:96:a7:1f: bb:c8:b5:15:43:08:a7:0b:4f:d8:90:b3:22:04:b1: 1a:1b:1f:a1:c6:32:5d:f6:67:20:d2:20:8b:46:f5: d6:1f:0b:bc:a1:7d:bf:86:f7:44:79:86:15:6d:27: 73:06:e2:5e:7f:b6:6e:5c:36:3d:71:66:61:84:1d: 3a:59:ff:99:13:bc:71:ef:73:b8:7d:94:c6:f0:ec: 8e:c9:81:d7:95:7f:16:e0:db:01:40:4e:53:53:8e: 80:21:d3:b3:33:d9:b3:50:a4:67:60:e5:e3:b7:8c: c4:b0:0a:a7:15:6b:73:4e:2b:29:66:39:2b:ed:c7: 54:b8:40:4a:27:04:46:af:cf:68:5f:21:0c:07:ef: f9:97:6f:db:b4:24:6d:cc:e7:b0:e3:ed:a1:4c:98: 3e:3e:7a:d2:20:d7:95:6b:51:a6:6f:27:71:f7:76: 3d:25:2f:01:75:0a:a3:c0:42:1a:62:8e:72:d9:fa: ff:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:65:F4:63:E8:F4:98:27:99:20:04:A7:03:73:30:44:0C:73:2D:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7858d667-e6fa-3f96-bdaf-8712e64c5159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5c:4d:35:5a:87:64:78:77:b7:80:96:81:e3:53:95:36:1b: 39:47:96:26:9e:91:15:5e:86:26:3c:1c:dc:76:fa:2b:74:1f: ca:eb:85:0c:25:bc:44:ba:89:5d:d2:6a:29:15:cd:65:4c:37: fa:b6:ef:e3:9e:7f:73:2e:1d:23:36:77:86:c4:58:76:36:49: d4:0f:8b:33:7c:a9:4c:2d:64:82:52:2c:7b:4f:86:f0:66:db: 5c:4e:77:78:91:66:bf:b3:e3:0d:14:dc:b5:73:8c:1d:f7:e5: 11:c8:13:1c:c4:f7:1a:8c:24:da:ce:de:8e:d6:e2:06:c8:c6: 27:db:3b:66:69:22:75:e1:16:d2:8a:ce:b6:1a:7d:60:be:e7: a4:a5:11:54:1a:ca:3c:ef:6a:bd:4a:93:08:de:44:28:33:0d: 28:37:08:ce:04:7b:08:bd:30:ae:bb:39:4c:de:8e:40:78:69: 22:24:f1:b6:a7:d8:8c:e4:83:64:67:24:b0:41:bf:b4:b0:f0: b4:26:65:60:5d:87:15:63:6c:54:3f:29:0c:29:95:b7:1b:c1: 7f:12:9f:4a:ae:23:95:93:0d:85:1f:fc:65:2f:4c:25:9d:b1: e5:03:7d:73:a4:a8:f3:57:67:9f:df:22:de:25:6d:d3:3d:31: 7a:bf:c9:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1Gi3or/Tvkep8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NDdkNWNlYjQtNzc0YS00ZGZkLWI0NDUtNWYyMTMyYmEzOWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQsNQemJ0mntV1xzOHPcQT5LHA5pF6XS473d wZ4ScrVLMqNB3fgSFOZQWWdwlu6n5CNaHkUL5OHdsu+5iaRXEDrdkNftY4+Wpx+7 yLUVQwinC0/YkLMiBLEaGx+hxjJd9mcg0iCLRvXWHwu8oX2/hvdEeYYVbSdzBuJe f7ZuXDY9cWZhhB06Wf+ZE7xx73O4fZTG8OyOyYHXlX8W4NsBQE5TU46AIdOzM9mz UKRnYOXjt4zEsAqnFWtzTispZjkr7cdUuEBKJwRGr89oXyEMB+/5l2/btCRtzOew 4+2hTJg+PnrSINeVa1Gmbydx93Y9JS8BdQqjwEIaYo5y2fr/QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9l9GPo9JgnmSAEpwNzMEQMcy0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzg1OGQ2NjctZTZmYS0z Zjk2LWJkYWYtODcxMmU2NGM1MTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKI6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlcTTVah2R4d7eAloHjU5U2GzlHliaekRVehiY8HNx2+it0H8rrhQwl vES6iV3SaikVzWVMN/q27+Oef3MuHSM2d4bEWHY2SdQPizN8qUwtZIJSLHtPhvBm 21xOd3iRZr+z4w0U3LVzjB335RHIExzE9xqMJNrO3o7W4gbIxifbO2ZpInXhFtKK zrYafWC+56SlEVQayjzvar1KkwjeRCgzDSg3CM4Eewi9MK67OUzejkB4aSIk8ban 2Izkg2RnJLBBv7Sw8LQmZWBdhxVjbFQ/KQwplbcbwX8Sn0quI5WTDYUf/GUvTCWd seUDfXOkqPNXZ5/fIt4lbdM9MXq/yQg= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:45 2025 by rpki-client