$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa File: 64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa (raw, json) Hash identifier: kgpoOwdfWiB6iZ+SQpX3ErN2AR2bJQsaTceDCgHOMHY= Subject key identifier: 76:46:87:87:6F:EA:C3:CB:66:91:6B:B5:C5:1D:03:4E:14:F6:E6:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6688C588913E153A7D4000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 40.137.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:88:c5:88:91:3e:15:3a:7d:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=2c56d65a-3e85-4780-9b36-763742479b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4a:e9:62:47:8b:c3:e9:bf:84:8b:9f:2f:41: 05:29:96:1d:ae:9f:a4:92:cc:70:0e:01:7c:b3:2d: 87:59:8a:1b:82:f7:c1:61:bd:72:8e:03:b9:5d:3d: 65:d7:8b:4e:15:83:cf:4b:6a:b1:85:cc:80:93:16: d9:6e:90:df:24:b5:73:23:7c:5e:5e:00:a7:d2:f5: 02:72:08:9b:b3:cb:56:13:28:9d:f7:82:83:24:52: f8:d3:8e:45:14:ce:4e:b3:08:32:65:f8:6c:17:7a: c2:e7:44:6b:f3:14:fe:61:04:c0:1d:68:bf:4b:bd: c9:18:8c:ff:fa:60:bb:f4:17:72:07:9f:7c:d4:fb: d9:ad:82:51:b2:a3:22:6e:bb:41:f3:78:3d:f1:e3: 3e:d1:ea:7e:b4:7b:cf:4e:03:20:ff:3b:f7:26:34: 47:64:38:a0:14:4c:54:cd:f3:ae:cc:06:58:5a:11: 67:56:99:6b:72:77:54:b0:8e:48:42:f5:4c:66:8e: c7:07:3c:4f:8c:5e:80:df:d8:c7:d8:b5:74:52:3c: 6c:e7:1a:e0:6d:62:69:87:17:bf:01:fe:5d:8c:3f: 8d:64:54:b0:8a:b0:1d:d6:48:e8:06:29:55:04:29: a5:82:e2:f1:4e:83:52:4a:9d:55:70:d3:7e:b0:fe: a1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:46:87:87:6F:EA:C3:CB:66:91:6B:B5:C5:1D:03:4E:14:F6:E6:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.137.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:70:68:17:39:a7:b4:4f:97:47:df:a3:dc:1f:40:3f:eb:f7: ac:55:2e:29:1c:3e:d2:08:9a:1b:41:bd:fb:37:76:7a:7c:59: f5:2b:e7:f4:2d:24:61:32:cf:3b:31:91:a7:5c:cc:00:07:a9: 28:c8:28:5d:3e:73:30:ea:f7:ad:78:fc:43:38:61:a7:1a:44: 9b:27:49:99:2b:4b:94:00:fa:cc:1c:00:72:19:65:64:47:70: 74:e0:cc:68:33:e0:35:95:df:77:dc:fc:5e:1b:0a:af:a2:3c: 1c:1c:72:4c:93:ae:21:5a:7c:40:e0:82:c9:78:5c:3a:d1:8a: c0:6b:0a:39:16:6f:c5:c2:fd:f5:ad:e8:2c:db:0c:01:3b:7c: 3a:2a:ff:88:7f:0c:16:24:ab:a5:10:ec:cb:40:bd:b8:7b:e0: 40:34:72:9d:0d:91:d2:a3:d6:62:14:d0:51:d9:ff:dd:56:46: 99:d1:82:5e:08:db:83:94:4b:1a:61:0b:d7:6a:95:e5:41:ad: 69:03:c2:54:cc:38:20:77:bb:8b:35:cf:00:b1:9f:26:fd:2d: 07:f2:61:4e:cb:af:24:ec:71:6f:e0:63:f0:54:c4:7a:5d:82: 71:b5:9f:9d:af:12:1a:30:36:e1:1a:7a:d6:57:f0:61:1e:7f: 45:de:ed:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZojFiJE+FTp9QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MmM1NmQ2NWEtM2U4NS00NzgwLTliMzYtNzYzNzQyNDc5YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokrpYkeLw+m/hIufL0EFKZYdrp+kksxwDgF8 sy2HWYobgvfBYb1yjgO5XT1l14tOFYPPS2qxhcyAkxbZbpDfJLVzI3xeXgCn0vUC cgibs8tWEyid94KDJFL4045FFM5OswgyZfhsF3rC50Rr8xT+YQTAHWi/S73JGIz/ +mC79BdyB5981PvZrYJRsqMibrtB83g98eM+0ep+tHvPTgMg/zv3JjRHZDigFExU zfOuzAZYWhFnVplrcndUsI5IQvVMZo7HBzxPjF6A39jH2LV0Ujxs5xrgbWJphxe/ Af5djD+NZFSwirAd1kjoBilVBCmlguLxToNSSp1VcNN+sP6hxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZGh4dv6sPLZpFrtcUdA04U9uYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRkOTllZWYtYzBjNC0z YmRiLWJiMDUtNDNlNzMxOWE1ZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKIkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZwaBc5p7RPl0ffo9wfQD/r96xVLikcPtIImhtBvfs3dnp8WfUr5/Qt JGEyzzsxkadczAAHqSjIKF0+czDq9614/EM4YacaRJsnSZkrS5QA+swcAHIZZWRH cHTgzGgz4DWV33fc/F4bCq+iPBwcckyTriFafEDggsl4XDrRisBrCjkWb8XC/fWt 6CzbDAE7fDoq/4h/DBYkq6UQ7MtAvbh74EA0cp0NkdKj1mIU0FHZ/91WRpnRgl4I 24OUSxphC9dqleVBrWkDwlTMOCB3u4s1zwCxnyb9LQfyYU7LryTscW/gY/BUxHpd gnG1n52vEhowNuEaetZX8GEef0Xe7U4= -----END CERTIFICATE-----Generated at Sat Aug 23 17:27:53 2025 by rpki-client