$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa File: 01a8e5f6-00d1-310c-9826-54ee0eea151a.roa (raw, json) Hash identifier: YLgR7rNuB+GJgi+krhTFu6vuH8SdLHIQ26PTG3VfEXU= Subject key identifier: 76:A5:8F:47:F8:BF:EE:57:C1:A1:5E:A2:A3:90:01:DA:3A:67:FF:57 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6690C48466C263A0424200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 40.136.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:90:c4:84:66:c2:63:a0:42:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=099f1573-3f2a-444c-9d11-9610dffb08eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:10:20:91:64:c8:77:8e:2e:7d:10:ba:6c:a3: 7e:f6:04:f9:fa:95:9b:45:45:4e:3f:be:25:68:68: d1:f6:0b:77:41:09:0d:11:b9:18:f2:b3:12:d6:36: 9f:e9:9c:a5:50:0c:7d:bf:5c:6d:3e:48:8b:32:9f: 5f:bb:16:dc:1d:ef:3b:42:82:4f:45:b7:82:da:83: 99:ca:57:d6:7e:ff:2b:74:d0:cd:51:c4:b3:39:5a: 51:59:f2:88:d2:77:0c:b7:fc:13:43:dc:77:64:63: 97:43:fc:34:ba:a8:c2:ae:21:16:4f:11:ee:3f:03: 53:36:95:93:e5:98:e5:2b:fb:da:72:91:f7:43:21: 11:a5:62:17:40:15:a2:c5:62:c8:57:60:70:ab:82: 1d:0f:39:3d:8a:b5:87:b2:80:46:ce:13:32:fa:5c: 83:26:00:6a:e4:e3:08:3a:46:86:0f:1a:fd:00:c2: 80:5e:97:b6:a0:e2:8a:aa:63:cc:30:31:3a:6a:75: ee:a0:dc:7e:57:52:ed:66:9e:2b:1d:50:e9:05:2d: 8d:38:6d:41:13:82:e6:c9:72:0b:b2:17:14:f5:55: 18:ce:21:76:bb:d6:8f:e2:50:3a:78:c4:02:0e:c6: 3a:35:1c:85:fa:6f:93:d0:f2:97:ca:c3:13:ed:04: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A5:8F:47:F8:BF:EE:57:C1:A1:5E:A2:A3:90:01:DA:3A:67:FF:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:38:b8:d7:5c:8f:59:98:bb:73:8a:0a:e2:23:19:6d:3b:73: 6a:ba:36:a3:60:55:d1:90:64:d2:49:4f:1f:e4:72:16:ae:7a: b6:c8:1c:d1:8e:83:e9:91:96:c7:eb:b2:2a:04:dd:35:85:63: 99:58:f3:ac:8d:fa:72:f7:7d:ed:28:6e:98:7c:89:0b:c8:9f: 25:6a:25:47:9e:35:6f:ee:18:1d:bf:db:d3:d8:a7:99:a6:2b: 52:c4:96:7d:d2:ff:ed:1c:33:18:0a:91:70:1a:13:5f:30:9e: 22:60:47:0c:12:0e:1c:ce:25:22:41:7a:ad:de:db:09:94:d4: d1:a4:56:ef:f0:4c:3f:6b:9e:9e:49:f5:20:34:78:a0:2b:7d: da:ff:62:4c:76:5d:ae:6d:00:8e:b9:6d:f7:5d:b2:63:69:e5: 76:b8:41:ad:ca:d5:31:4a:b7:20:d9:7d:02:da:c2:5d:7b:77: 36:b9:d5:2f:6c:00:15:35:da:43:f9:db:c8:07:87:24:80:40: a8:85:02:2d:99:34:b9:d2:ec:26:31:02:6d:c9:e2:ab:c7:9c: bf:f5:8e:df:3d:57:11:9c:8b:42:94:6e:98:39:44:cd:ee:f4: a3:c5:d0:05:13:3b:a4:14:c8:76:a3:b6:25:9d:3e:97:27:b8: 56:fa:de:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpDEhGbCY6BCQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MDk5ZjE1NzMtM2YyYS00NDRjLTlkMTEtOTYxMGRmZmIwOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRAgkWTId44ufRC6bKN+9gT5+pWbRUVOP74l aGjR9gt3QQkNEbkY8rMS1jaf6ZylUAx9v1xtPkiLMp9fuxbcHe87QoJPRbeC2oOZ ylfWfv8rdNDNUcSzOVpRWfKI0ncMt/wTQ9x3ZGOXQ/w0uqjCriEWTxHuPwNTNpWT 5ZjlK/vacpH3QyERpWIXQBWixWLIV2Bwq4IdDzk9irWHsoBGzhMy+lyDJgBq5OMI OkaGDxr9AMKAXpe2oOKKqmPMMDE6anXuoNx+V1LtZp4rHVDpBS2NOG1BE4LmyXIL shcU9VUYziF2u9aP4lA6eMQCDsY6NRyF+m+T0PKXysMT7QSUQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHalj0f4v+5XwaFeoqOQAdo6Z/9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDFhOGU1ZjYtMDBkMS0z MTBjLTk4MjYtNTRlZTBlZWExNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg4uNdcj1mYu3OKCuIjGW07c2q6NqNgVdGQZNJJTx/kchauerbIHNGO g+mRlsfrsioE3TWFY5lY86yN+nL3fe0obph8iQvInyVqJUeeNW/uGB2/29PYp5mm K1LEln3S/+0cMxgKkXAaE18wniJgRwwSDhzOJSJBeq3e2wmU1NGkVu/wTD9rnp5J 9SA0eKArfdr/Ykx2Xa5tAI65bfddsmNp5Xa4Qa3K1TFKtyDZfQLawl17dza51S9s ABU12kP528gHhySAQKiFAi2ZNLnS7CYxAm3J4qvHnL/1jt89VxGci0KUbpg5RM3u 9KPF0AUTO6QUyHajtiWdPpcnuFb63mM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:02 2025 by rpki-client