$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3e6d056-6220-3e3f-b4e7-a511d6fe62af.roa File: e3e6d056-6220-3e3f-b4e7-a511d6fe62af.roa (raw, json) Hash identifier: nxCnU4uoA9/DI8fhO+x24lypSs/KcECORkUb/ju6Msg= Subject key identifier: BC:1E:B8:37:FD:12:69:0C:6A:71:B0:48:54:28:61:F1:C1:0D:BA:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CBFCA18CE1F0833A865C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3e6d056-6220-3e3f-b4e7-a511d6fe62af.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 40.139.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:bf:ca:18:ce:1f:08:33:a8:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=4a36028d-48cd-4e49-9725-778126b85c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:4f:1c:78:d8:17:55:4b:c1:3d:bd:a6:6f: 81:2a:c4:17:aa:a2:85:c3:dd:c1:06:e0:5b:8f:76: cf:c7:43:3f:4d:ab:84:26:20:6c:5d:44:3c:b9:4c: 61:8c:7a:cf:dd:ef:a5:78:f6:3e:23:98:7b:33:75: b3:92:79:6f:1d:19:83:0c:a2:3e:17:00:ab:f0:10: 1b:1c:d8:c5:a7:94:25:2b:f4:85:7e:98:a4:8f:17: 1e:67:b3:97:2a:99:8e:40:4b:7c:09:a1:70:ff:f3: d1:ca:9f:09:04:d3:3d:11:9f:fb:84:e3:b0:2c:7d: 22:9d:f8:ae:59:98:62:0c:9f:88:c7:a2:dc:8a:7d: 0d:91:24:ac:a2:2b:b6:ab:3d:48:b5:99:8d:4a:ab: 42:d6:cb:e8:aa:77:be:7e:bc:f6:9d:5f:a8:91:6d: 6a:d1:a0:8c:a1:17:f6:0f:b8:43:9c:78:30:3e:da: 6f:79:e5:2c:a2:88:ca:88:cc:ef:76:f3:03:a1:f2: 3a:37:95:3d:be:d9:3c:3e:91:33:d3:b3:72:c5:3a: 3c:c2:7f:21:29:e1:70:c6:ab:13:06:2b:44:28:37: aa:1a:c7:89:d9:8b:27:e7:f9:c5:39:bb:97:70:06: 97:75:0a:93:23:cc:08:d6:48:5a:76:be:2b:65:ed: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1E:B8:37:FD:12:69:0C:6A:71:B0:48:54:28:61:F1:C1:0D:BA:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3e6d056-6220-3e3f-b4e7-a511d6fe62af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.139.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:0f:77:92:5e:50:ac:d4:f0:e3:15:5c:14:c7:d2:80:f8:2c: fc:d6:43:89:3e:a2:cc:4d:21:2f:15:58:16:72:bb:03:91:43: e4:b3:69:1f:f5:a7:bd:f9:a6:9c:18:f5:96:a5:72:09:71:8f: 8a:fe:2e:14:a0:87:bc:22:db:e8:80:0c:68:1f:d1:e8:6c:a1: ed:b6:cb:72:81:8e:07:8e:a4:49:c0:e3:09:96:d3:e5:7a:dc: 00:ab:57:22:06:30:f0:2f:4a:bf:73:5d:8e:c6:f6:41:cc:e7: 67:ae:de:6d:da:31:1d:70:95:d5:54:9f:b3:38:b6:61:33:10: 87:79:c5:6c:05:75:b4:8e:3c:76:04:ff:ee:49:9b:c8:0e:80: 63:97:14:31:2e:77:48:60:0a:43:88:98:83:e3:77:a2:63:79: c2:8c:41:23:82:53:76:2d:27:fd:07:91:d2:64:22:5b:e0:1e: 3c:74:c3:8e:1e:ed:bf:09:f2:66:c8:ec:29:b7:cf:cf:2e:57: 7d:ce:62:f9:48:4b:ea:9f:fe:fc:cc:ee:9f:93:bc:d9:21:76: 05:b7:db:5b:d5:87:ec:b9:1d:cb:e5:00:62:3b:36:5b:f9:ad: e9:e1:b9:58:59:a5:fb:31:6d:3a:41:d1:75:93:84:4b:fc:9f: f7:91:e2:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXL/KGM4fCDOoZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NGEzNjAyOGQtNDhjZC00ZTQ5LTk3MjUtNzc4MTI2Yjg1YzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGlPHHjYF1VLwT29pm+BKsQXqqKFw93BBuBb j3bPx0M/TauEJiBsXUQ8uUxhjHrP3e+lePY+I5h7M3WzknlvHRmDDKI+FwCr8BAb HNjFp5QlK/SFfpikjxceZ7OXKpmOQEt8CaFw//PRyp8JBNM9EZ/7hOOwLH0infiu WZhiDJ+Ix6Lcin0NkSSsoiu2qz1ItZmNSqtC1svoqne+frz2nV+okW1q0aCMoRf2 D7hDnHgwPtpveeUsoojKiMzvdvMDofI6N5U9vtk8PpEz07NyxTo8wn8hKeFwxqsT BitEKDeqGseJ2Ysn5/nFObuXcAaXdQqTI8wI1khadr4rZe14UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLweuDf9EmkManGwSFQoYfHBDbo6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTNlNmQwNTYtNjIyMC0z ZTNmLWI0ZTctYTUxMWQ2ZmU2MmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0Pd5JeUKzU8OMVXBTH0oD4LPzWQ4k+osxNIS8VWBZyuwORQ+SzaR/1 p735ppwY9Zalcglxj4r+LhSgh7wi2+iADGgf0ehsoe22y3KBjgeOpEnA4wmW0+V6 3ACrVyIGMPAvSr9zXY7G9kHM52eu3m3aMR1wldVUn7M4tmEzEId5xWwFdbSOPHYE /+5Jm8gOgGOXFDEud0hgCkOImIPjd6JjecKMQSOCU3YtJ/0HkdJkIlvgHjx0w44e 7b8J8mbI7Cm3z88uV33OYvlIS+qf/vzM7p+TvNkhdgW321vVh+y5HcvlAGI7Nlv5 renhuVhZpfsxbTpB0XWThEv8n/eR4pA= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:18 2025 by rpki-client