$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa File: ef4fe73d-8e5b-3799-944d-41b1981f6353.roa (raw, json) Hash identifier: OkwuIODVsD+FYZiBJausi6bcAxTtTmwiEM3ZmrVV2zY= Subject key identifier: 9C:49:19:2F:27:8B:2D:9A:C0:8E:85:C7:CA:93:0F:6B:C7:BB:D4:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD3608B6A4C2ACF4E0180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 30373 IP address blocks: 40.128.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d3:60:8b:6a:4c:2a:cf:4e:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=7adc6d95-7a13-4a72-9004-b2122bd07e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ab:28:c2:7f:58:1a:e3:81:34:48:3a:fe:a7: 34:5d:75:67:f8:b9:0d:39:2b:f1:97:a1:b3:45:a6: 73:57:06:0f:22:fd:96:23:6f:32:ed:6b:2e:3f:e0: 6c:5f:12:63:8d:3e:c9:e0:e6:bf:05:ee:01:16:0b: fc:c6:e8:96:9b:f7:33:06:a3:f4:93:50:f1:f4:b4: f6:5e:bc:35:f7:3a:f6:c0:30:87:7a:33:80:06:b0: ae:ec:84:2b:e6:d8:99:ec:14:0e:1a:9b:9c:01:1f: f0:f7:8c:00:5f:53:63:fa:69:17:4c:47:50:f8:67: ee:d3:d8:fa:33:3d:57:5a:25:32:88:33:ea:61:be: 4b:ef:2d:d8:6b:83:55:ad:5a:40:da:cc:c9:02:31: ed:db:cf:be:a7:4a:8c:8d:8d:a0:38:b6:29:f0:df: 7a:5b:53:aa:94:98:91:cc:f0:80:a0:52:a1:f3:33: bb:c4:17:d7:cb:db:a1:af:91:33:56:c1:b7:ef:dc: f1:9b:0f:36:ca:c0:e2:5d:1a:cd:ec:8f:d3:9c:19: de:7f:cf:fc:1c:34:e0:00:0d:58:46:ab:aa:27:20: 91:08:a3:ff:ef:99:66:c2:66:77:63:03:16:43:97: 33:b9:de:58:27:8e:6c:e9:11:47:08:f9:0e:2c:2f: 68:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:49:19:2F:27:8B:2D:9A:C0:8E:85:C7:CA:93:0F:6B:C7:BB:D4:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.128.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:57:ae:9e:08:f4:ba:3f:e7:84:0e:ba:ee:52:85:74:ac:9b: 1d:7b:c7:bf:52:a7:b4:ea:a7:c3:9b:a6:3f:15:7c:5a:60:14: 45:28:34:d7:3f:63:95:f6:d7:7a:b7:a2:8f:31:74:2e:38:15: 33:35:69:9a:78:2b:24:5b:54:c3:89:5b:83:14:ff:c4:c7:a9: 36:65:63:f3:6a:cf:9c:3c:48:d6:a1:da:b3:af:00:9a:80:f0: 08:ea:4d:13:25:63:48:96:40:70:3a:24:56:2b:9f:cd:6b:15: 7c:cf:19:7d:d0:95:e3:4c:7e:48:8e:fc:2d:d6:6a:b9:98:14: f3:67:fe:4c:e8:3d:0e:f6:75:aa:56:64:d5:e0:54:ac:fd:18: be:0b:36:63:42:0b:41:58:80:9e:bb:eb:03:cb:60:cc:07:37: 43:ff:fe:f9:60:38:17:7d:b1:45:a6:a3:cf:93:14:63:fd:46: df:41:43:40:02:75:d4:9f:29:e5:58:35:3a:68:47:cd:fa:8d: b7:62:99:9d:c7:a9:0d:c8:04:1c:2e:5c:85:a0:f3:c4:b1:36: 54:2a:06:6a:de:d7:fa:d9:c7:14:fc:43:de:a7:2a:97:d8:51: 9e:a8:00:fa:87:3f:66:3d:51:0a:d5:c3:2e:5e:5f:1e:b7:64: 48:99:ef:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNNgi2pMKs9OAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk N2FkYzZkOTUtN2ExMy00YTcyLTkwMDQtYjIxMjJiZDA3ZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKsown9YGuOBNEg6/qc0XXVn+LkNOSvxl6Gz RaZzVwYPIv2WI28y7WsuP+BsXxJjjT7J4Oa/Be4BFgv8xuiWm/czBqP0k1Dx9LT2 Xrw19zr2wDCHejOABrCu7IQr5tiZ7BQOGpucAR/w94wAX1Nj+mkXTEdQ+Gfu09j6 Mz1XWiUyiDPqYb5L7y3Ya4NVrVpA2szJAjHt28++p0qMjY2gOLYp8N96W1OqlJiR zPCAoFKh8zO7xBfXy9uhr5EzVsG379zxmw82ysDiXRrN7I/TnBnef8/8HDTgAA1Y RquqJyCRCKP/75lmwmZ3YwMWQ5czud5YJ45s6RFHCPkOLC9o6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxJGS8niy2awI6Fx8qTD2vHu9TjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWY0ZmU3M2QtOGU1Yi0z Nzk5LTk0NGQtNDFiMTk4MWY2MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKID2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClXrp4I9Lo/54QOuu5ShXSsmx17x79Sp7Tqp8Obpj8VfFpgFEUoNNc/ Y5X213q3oo8xdC44FTM1aZp4KyRbVMOJW4MU/8THqTZlY/Nqz5w8SNah2rOvAJqA 8AjqTRMlY0iWQHA6JFYrn81rFXzPGX3QleNMfkiO/C3WarmYFPNn/kzoPQ72dapW ZNXgVKz9GL4LNmNCC0FYgJ676wPLYMwHN0P//vlgOBd9sUWmo8+TFGP9Rt9BQ0AC ddSfKeVYNTpoR836jbdimZ3HqQ3IBBwuXIWg88SxNlQqBmre1/rZxxT8Q96nKpfY UZ6oAPqHP2Y9UQrVwy5eXx63ZEiZ7/M= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:28 2025 by rpki-client