$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9764edd2-b751-3224-9100-20d11a932c21.roa File: 9764edd2-b751-3224-9100-20d11a932c21.roa (raw, json) Hash identifier: UNIUbLYm4rBKr2wfeRrT12VYPD4rFrOLS7eCBBlzmX4= Subject key identifier: AD:E7:74:C9:FE:4E:21:49:80:8B:6A:AC:FF:F3:12:DF:80:94:3C:B4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B94421BC4715E846D1749A680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9764edd2-b751-3224-9100-20d11a932c21.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 40.134.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:1b:c4:71:5e:84:6d:17:49:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=b06db5fd-2cf6-4613-8198-3039220e215e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:1d:3c:07:ea:01:bb:a4:cb:85:38:27:5f: 33:72:8c:b4:10:32:dc:db:2a:ec:09:f7:cf:dc:59: 95:45:ba:5f:e5:87:cd:f1:11:8e:42:04:5a:cc:aa: 3c:78:99:37:a3:6c:ad:3b:e3:0c:39:7e:1b:50:1e: 1c:58:18:44:27:2a:c0:2a:83:1a:0e:d9:e1:6b:80: 69:0f:2a:17:fc:40:2c:87:d8:cd:d8:7d:b4:9f:1d: 56:4c:0c:70:56:39:91:78:47:d3:cb:a0:a7:72:c4: 7b:c3:98:04:1b:86:d7:62:c1:0e:4a:d1:3c:4e:17: 68:de:31:74:f4:f4:59:26:11:ad:63:08:5d:ae:59: 9e:a2:23:2d:d4:1d:fc:6a:6c:6d:af:86:54:fe:b5: a6:7c:77:85:8f:6c:61:bc:f9:aa:fd:a7:57:03:ad: c3:db:2b:4f:5e:02:f3:78:a6:f9:13:b1:3f:b6:34: 89:ae:bc:2e:90:f3:02:6a:4e:99:46:6e:f7:ea:ac: 41:71:74:e5:1c:72:87:1d:5e:d7:57:06:85:03:8a: 0b:73:4b:9c:ab:60:33:39:5f:7e:08:3c:0b:6a:e9: d8:aa:77:cc:6b:e8:32:a9:d3:03:e0:74:85:2c:25: 03:91:20:81:40:a7:7a:d0:ea:14:ac:e5:27:f7:c4: 4a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E7:74:C9:FE:4E:21:49:80:8B:6A:AC:FF:F3:12:DF:80:94:3C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9764edd2-b751-3224-9100-20d11a932c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.134.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:95:c2:d6:47:46:47:93:68:f4:dd:89:e7:0f:90:dd:a4:2d: 1b:be:4c:01:95:53:a1:4b:87:f0:ca:64:1d:0f:74:41:95:e1: d9:b0:eb:f0:c9:e1:77:b3:ce:64:fe:03:f7:c5:63:ff:d0:ab: 8a:b2:07:0f:29:a0:61:c0:e7:fa:ef:62:22:cb:94:f2:ba:45: 02:df:1f:c3:34:88:3d:4d:a4:35:2f:25:d6:53:4e:c7:37:79: ac:59:d9:9e:bd:8d:b9:ec:8e:12:63:63:4d:0c:b8:b9:97:6a: f8:5c:7f:3e:ff:5f:03:de:43:67:37:5d:ab:9e:8a:74:6f:1c: 54:aa:28:67:f4:aa:5f:24:ef:11:4a:58:d3:38:b5:0c:a6:18: d4:12:1d:8e:94:ad:c2:40:0a:77:b0:96:ca:36:96:f4:72:a1: 1b:ac:df:8e:be:a3:75:e5:54:c9:c6:b6:ee:07:c0:61:10:6d: 58:46:91:c4:9b:b6:f8:18:1f:96:12:7e:8b:4b:9f:1b:b5:61: a7:e1:df:1b:9d:b7:3a:7c:84:42:d8:3a:8b:39:63:6d:04:f0: ae:7c:5d:d3:ec:52:c2:95:cc:7b:c2:73:13:ac:8b:bf:99:02: ff:6b:61:7f:d5:7c:ae:65:47:cc:28:88:fa:92:b5:aa:30:74: 1a:ea:1a:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQhvEcV6EbRdJpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk YjA2ZGI1ZmQtMmNmNi00NjEzLTgxOTgtMzAzOTIyMGUyMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEcdPAfqAbuky4U4J18zcoy0EDLc2yrsCffP 3FmVRbpf5YfN8RGOQgRazKo8eJk3o2ytO+MMOX4bUB4cWBhEJyrAKoMaDtnha4Bp DyoX/EAsh9jN2H20nx1WTAxwVjmReEfTy6CncsR7w5gEG4bXYsEOStE8Thdo3jF0 9PRZJhGtYwhdrlmeoiMt1B38amxtr4ZU/rWmfHeFj2xhvPmq/adXA63D2ytPXgLz eKb5E7E/tjSJrrwukPMCak6ZRm736qxBcXTlHHKHHV7XVwaFA4oLc0ucq2AzOV9+ CDwLaunYqnfMa+gyqdMD4HSFLCUDkSCBQKd60OoUrOUn98RKewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3ndMn+TiFJgItqrP/zEt+AlDy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTc2NGVkZDItYjc1MS0z MjI0LTkxMDAtMjBkMTFhOTMyYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqVwtZHRkeTaPTdiecPkN2kLRu+TAGVU6FLh/DKZB0PdEGV4dmw6/DJ 4XezzmT+A/fFY//Qq4qyBw8poGHA5/rvYiLLlPK6RQLfH8M0iD1NpDUvJdZTTsc3 eaxZ2Z69jbnsjhJjY00MuLmXavhcfz7/XwPeQ2c3XaueinRvHFSqKGf0ql8k7xFK WNM4tQymGNQSHY6UrcJACnewlso2lvRyoRus346+o3XlVMnGtu4HwGEQbVhGkcSb tvgYH5YSfotLnxu1Yafh3xudtzp8hELYOos5Y20E8K58XdPsUsKVzHvCcxOsi7+Z Av9rYX/VfK5lR8woiPqStaowdBrqGh8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:44:30 2025 by rpki-client