$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92e339d6-05de-3159-8a66-900e304399a9.roa File: 92e339d6-05de-3159-8a66-900e304399a9.roa (raw, json) Hash identifier: pw/WnMxxA9tOZBgvTf2WTkWssqIq1aEI/Jhu1uhBDC0= Subject key identifier: 4E:E1:81:D5:58:6A:B8:83:97:BF:1F:08:CD:9D:77:95:F2:B9:0C:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C48E863C976520B847F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92e339d6-05de-3159-8a66-900e304399a9.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 162.40.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:48:e8:63:c9:76:52:0b:84:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=85ffc836-cdd2-47fa-bfdd-aab43ececfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:95:d6:73:68:7d:df:ac:1c:ed:95:7e:fd: 3c:93:5c:bb:95:d7:57:10:3f:a9:97:c1:0d:f9:72: cb:9b:16:f2:49:ec:4a:fe:1a:f8:bf:a4:60:26:16: af:44:96:c5:d6:e6:62:67:ff:e9:da:f9:08:50:74: df:90:57:43:a3:ab:2f:bf:af:8f:ca:d9:1f:3a:dc: 85:2d:89:3a:b0:02:c3:55:b9:60:dd:de:36:c8:b2: 7b:fc:1b:18:82:de:aa:c1:f2:81:29:84:68:41:3f: 4b:16:3e:09:45:72:90:5f:e1:6d:e3:23:b1:c6:d8: 81:8b:77:4a:38:b8:eb:9b:24:d6:cc:3e:50:d7:d9: 10:b0:4d:62:65:a4:41:31:3e:67:8c:93:c6:0a:25: de:5f:fa:f8:9c:95:7a:a1:ef:5d:72:9b:8e:c7:ba: e8:99:1e:95:e3:c0:48:05:51:b6:59:8b:af:69:85: 41:96:59:a7:9b:fd:0f:88:e2:e5:b1:a1:87:88:4e: 9b:ad:1a:b4:da:20:bb:1b:33:02:9f:dc:e9:d5:52: 91:c7:ab:91:0f:01:d7:b8:b3:7c:0d:dd:0b:f9:93: 8b:3f:71:6a:a7:15:49:6e:14:ed:c8:f3:a8:43:42: 08:7e:aa:be:b0:58:04:27:c3:d5:e5:bd:b5:ee:3f: 45:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E1:81:D5:58:6A:B8:83:97:BF:1F:08:CD:9D:77:95:F2:B9:0C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92e339d6-05de-3159-8a66-900e304399a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e2:a7:10:a9:5e:11:c9:bd:4d:a8:dd:69:55:24:9d:d8:31: 8d:3c:df:7e:8c:22:b0:3d:e0:d7:d8:a1:ff:4f:c8:e0:9c:99: 41:b6:34:2a:c2:6f:85:4f:f6:88:db:81:65:9d:73:44:7e:91: 4b:58:45:f1:75:78:9c:91:cc:94:bf:8e:b4:d4:8b:74:20:54: 30:4d:f5:c8:8e:40:c6:e2:28:9d:f3:5f:d4:fd:a1:cc:d9:f8: 8a:40:be:35:d0:94:7b:a9:b8:15:f3:2e:1b:80:84:a5:dd:1d: a6:84:e5:6e:9a:70:8d:c5:e9:d4:5e:59:dd:3f:67:fc:42:46: 34:e0:14:ca:71:38:f9:cc:23:01:4a:b9:00:64:c6:13:95:53: 8b:7a:4e:42:86:a7:3e:67:41:46:54:6e:c6:eb:17:4d:83:a2: 85:61:e5:3a:79:a1:ee:76:fc:5c:91:6a:a3:2d:d3:25:3a:4e: c1:18:be:e2:91:28:08:12:0c:3e:9b:f5:90:d1:8c:27:b8:64: cc:6d:ac:b5:d1:d3:39:5f:46:6b:21:7e:e2:93:80:d1:cc:31: 5f:81:d9:28:e0:cb:ff:5a:1b:25:78:4c:e3:7c:65:ce:80:9e: c0:1d:4a:09:b3:d4:84:be:78:ad:88:a8:60:2d:2a:5d:34:e2: c8:33:b4:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEjoY8l2UguEfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ODVmZmM4MzYtY2RkMi00N2ZhLWJmZGQtYWFiNDNlY2VjZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBSV1nNofd+sHO2Vfv08k1y7lddXED+pl8EN +XLLmxbySexK/hr4v6RgJhavRJbF1uZiZ//p2vkIUHTfkFdDo6svv6+PytkfOtyF LYk6sALDVblg3d42yLJ7/BsYgt6qwfKBKYRoQT9LFj4JRXKQX+Ft4yOxxtiBi3dK OLjrmyTWzD5Q19kQsE1iZaRBMT5njJPGCiXeX/r4nJV6oe9dcpuOx7romR6V48BI BVG2WYuvaYVBllmnm/0PiOLlsaGHiE6brRq02iC7GzMCn9zp1VKRx6uRDwHXuLN8 Dd0L+ZOLP3FqpxVJbhTtyPOoQ0IIfqq+sFgEJ8PV5b217j9FHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7hgdVYariDl78fCM2dd5XyuQyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTJlMzM5ZDYtMDVkZS0z MTU5LThhNjYtOTAwZTMwNDM5OWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoigoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7ipxCpXhHJvU2o3WlVJJ3YMY08336MIrA94NfYof9PyOCcmUG2NCrC b4VP9ojbgWWdc0R+kUtYRfF1eJyRzJS/jrTUi3QgVDBN9ciOQMbiKJ3zX9T9oczZ +IpAvjXQlHupuBXzLhuAhKXdHaaE5W6acI3F6dReWd0/Z/xCRjTgFMpxOPnMIwFK uQBkxhOVU4t6TkKGpz5nQUZUbsbrF02DooVh5Tp5oe52/FyRaqMt0yU6TsEYvuKR KAgSDD6b9ZDRjCe4ZMxtrLXR0zlfRmshfuKTgNHMMV+B2Sjgy/9aGyV4TON8Zc6A nsAdSgmz1IS+eK2IqGAtKl004sgztJw= -----END CERTIFICATE-----Generated at Fri Oct 10 17:54:46 2025 by rpki-client