$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce712daa-5c39-35a6-8573-f31e51558203.roa File: ce712daa-5c39-35a6-8573-f31e51558203.roa (raw, json) Hash identifier: aIMinUilOFh+WjxUZm1vTLkdjEe417xf2YTkPDSyDac= Subject key identifier: 04:96:DB:83:AB:2E:42:F2:CD:E9:97:E4:A1:D4:1C:68:C0:00:0A:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF009DB17E3B4F1D28580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce712daa-5c39-35a6-8573-f31e51558203.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 40.128.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f0:09:db:17:e3:b4:f1:d2:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=f92daf79-bec8-457c-8f3e-c5ebb8253097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:c7:88:be:d9:37:a1:a4:ca:1d:94:f4:47: ec:85:bc:9b:24:ad:ef:22:04:89:5b:4d:b2:de:3b: b4:af:14:3d:bb:a8:73:52:75:91:61:81:78:f1:82: 62:09:1f:72:2c:87:55:20:a5:ac:ee:06:32:11:16: e8:22:3e:87:4e:ff:5b:81:70:e5:21:de:9d:a4:9d: ff:05:10:08:6b:72:79:90:e7:50:f5:26:53:7c:89: 0e:6e:e2:40:74:bd:c5:3b:6f:3c:ee:48:9d:da:40: 89:43:7f:2a:b6:b7:47:c5:f8:1f:5e:ba:e9:c1:d9: de:96:26:15:90:a9:55:e1:f5:99:f7:11:11:35:0a: dd:3b:74:10:3e:56:62:ee:4b:77:5d:33:47:18:07: 51:39:40:fa:2d:49:b6:7e:35:7c:8d:6d:59:f4:6f: 5d:c5:6a:a9:58:96:5a:78:54:1e:69:4f:56:8a:2b: 4c:27:15:e6:a7:a2:98:8b:ab:b2:a3:31:23:45:56: a8:75:83:a0:93:97:4c:a3:02:34:04:34:6d:80:4a: f0:0f:28:da:ae:5b:c5:14:17:cf:60:48:5e:08:60: 0e:2e:0d:00:7d:cb:ee:d4:9d:2f:50:4a:eb:8c:68: 74:35:70:c5:d2:44:f7:5a:c3:69:65:89:75:b0:33: 80:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:96:DB:83:AB:2E:42:F2:CD:E9:97:E4:A1:D4:1C:68:C0:00:0A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce712daa-5c39-35a6-8573-f31e51558203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.128.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9a:d0:0f:3d:63:a2:04:44:b1:6e:34:0a:22:15:b1:f2:d9: a7:c0:68:ae:f6:8e:d8:d8:8d:b7:d0:dd:54:4f:17:3e:e2:7a: c4:a4:2f:63:2d:48:ae:bf:88:7b:98:a0:5b:5d:e5:43:91:1e: e4:de:90:16:25:48:bf:b8:95:65:0e:e7:3c:89:68:75:e2:28: 70:b0:64:95:4b:1f:15:4f:ff:f1:26:9a:35:d8:3e:8a:f8:2b: d9:72:63:24:35:32:5d:11:f2:c5:8a:f5:1b:71:39:58:5d:7a: 49:fa:db:0d:95:93:df:a6:1c:8d:f0:de:c6:83:78:b2:02:6c: 98:64:22:32:96:10:48:89:bb:39:82:8d:8f:9b:0c:cc:06:86: 07:6e:a9:91:df:21:4d:c8:92:25:d6:c1:2f:e6:c8:c0:6b:3a: f5:f6:06:8e:07:24:f2:2b:6f:1c:96:d8:41:54:a8:92:fa:8d: 02:c6:d0:29:2e:d9:14:48:4e:82:ca:f4:f0:7d:18:0f:aa:36: 72:f5:cd:b6:8e:e7:4d:64:2c:a6:9a:3b:5d:b0:ea:d7:c7:93: 60:b8:53:73:5b:db:ec:fc:f7:65:e6:e9:2d:88:62:e9:bc:a6: fa:a0:03:27:39:fc:3d:ef:b7:4e:ac:13:d1:aa:d9:d2:ea:a2: ae:d2:3f:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPAJ2xfjtPHShYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZjkyZGFmNzktYmVjOC00NTdjLThmM2UtYzVlYmI4MjUzMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB7HiL7ZN6Gkyh2U9EfshbybJK3vIgSJW02y 3ju0rxQ9u6hzUnWRYYF48YJiCR9yLIdVIKWs7gYyERboIj6HTv9bgXDlId6dpJ3/ BRAIa3J5kOdQ9SZTfIkObuJAdL3FO2887kid2kCJQ38qtrdHxfgfXrrpwdneliYV kKlV4fWZ9xERNQrdO3QQPlZi7kt3XTNHGAdROUD6LUm2fjV8jW1Z9G9dxWqpWJZa eFQeaU9WiitMJxXmp6KYi6uyozEjRVaodYOgk5dMowI0BDRtgErwDyjarlvFFBfP YEheCGAOLg0Afcvu1J0vUErrjGh0NXDF0kT3WsNpZYl1sDOAoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASW24OrLkLyzemX5KHUHGjAAApBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2U3MTJkYWEtNWMzOS0z NWE2LTg1NzMtZjMxZTUxNTU4MjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIB1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKa0A89Y6IERLFuNAoiFbHy2afAaK72jtjYjbfQ3VRPFz7iesSkL2Mt SK6/iHuYoFtd5UORHuTekBYlSL+4lWUO5zyJaHXiKHCwZJVLHxVP//EmmjXYPor4 K9lyYyQ1Ml0R8sWK9RtxOVhdekn62w2Vk9+mHI3w3saDeLICbJhkIjKWEEiJuzmC jY+bDMwGhgduqZHfIU3IkiXWwS/myMBrOvX2Bo4HJPIrbxyW2EFUqJL6jQLG0Cku 2RRIToLK9PB9GA+qNnL1zbaO501kLKaaO12w6tfHk2C4U3Nb2+z892Xm6S2IYum8 pvqgAyc5/D3vt06sE9Gq2dLqoq7SP3w= -----END CERTIFICATE-----Generated at Fri Oct 10 22:09:59 2025 by rpki-client