$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65e5ca1-7e43-3fef-8917-73c4ef4f52f3.roa File: a65e5ca1-7e43-3fef-8917-73c4ef4f52f3.roa (raw, json) Hash identifier: o0Hwf2/9TZuauNgvOd7d3BadH7sK2cuKiS8ARUVPjC0= Subject key identifier: 21:C6:9B:AF:F6:66:EE:70:16:6B:30:30:6A:F8:F1:AA:F7:A7:AA:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B79BCC20E4D89D329C7101180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65e5ca1-7e43-3fef-8917-73c4ef4f52f3.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 139.55.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c2:0e:4d:89:d3:29:c7:10:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=04513cf9-fd48-4d88-b1d8-b5e3f6f3f452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:08:8a:9a:09:41:e5:68:15:ad:9c:28:ac: f0:5a:c8:32:e4:e5:df:95:27:35:e3:a0:02:13:a9: cf:8b:7a:f9:e5:ef:87:d6:07:20:3c:ad:fa:9d:d8: 6f:f3:e0:05:45:02:db:45:a8:87:52:91:d3:8f:0a: cf:5d:8f:81:05:2a:cd:cb:cf:93:30:69:5a:3c:d0: f1:97:52:6a:6d:8b:5d:61:7a:c2:02:41:b7:dd:a0: ad:95:34:74:79:66:73:ca:e8:87:57:18:29:ea:7d: ab:a9:b7:b7:3d:81:0a:17:d1:45:4e:ba:18:05:b9: 87:c9:fe:77:ba:c9:42:90:c6:18:02:94:c2:91:5b: 10:b1:36:9a:d4:53:7c:68:fd:9b:1c:e3:7c:4f:17: 50:33:be:14:16:5c:9a:32:9f:96:e3:1b:8b:99:fb: 89:f6:13:9b:ed:b8:4e:d1:d2:12:66:d8:dd:55:d6: 5e:b7:de:83:45:d0:0a:99:94:55:8b:78:4c:47:44: 60:55:09:34:6c:c7:a9:98:d2:4d:aa:93:87:f0:a5: a4:09:72:6e:22:fa:3c:8d:12:c8:15:b6:27:64:ed: 69:01:4e:15:0b:16:b2:ac:00:56:07:5b:d9:f7:78: 37:70:48:e4:4d:71:32:b9:10:04:05:3d:27:39:ec: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C6:9B:AF:F6:66:EE:70:16:6B:30:30:6A:F8:F1:AA:F7:A7:AA:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65e5ca1-7e43-3fef-8917-73c4ef4f52f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ab:05:3f:c6:89:90:74:ea:55:76:ca:f4:36:91:38:9d:85: 15:5e:23:1b:4a:cd:60:e2:0c:54:47:94:cd:e1:22:a0:82:a0: 96:53:6f:eb:70:5c:22:74:ea:1b:f4:9d:d0:35:3b:aa:90:80: 00:cd:00:c7:59:f9:05:76:ed:34:1b:c6:4a:7e:f2:ce:02:00: b6:8e:64:20:3c:58:bd:70:1d:02:c1:ad:09:db:fd:49:e5:6f: 4f:2c:bc:2b:46:3d:13:3b:6c:a5:cb:48:70:88:7c:7a:31:88: 41:eb:30:89:33:e2:de:e6:e6:ab:81:bf:da:4c:67:36:9d:ac: 00:9e:b7:a9:36:1f:36:01:4b:d0:71:25:78:1c:5d:2f:cc:5d: a5:7e:89:ab:6c:bb:71:75:ef:e9:e1:67:b9:88:4d:be:75:58: 74:46:f6:96:a6:86:e8:e0:9b:54:ac:c0:b7:3c:33:6a:fa:02: ee:67:4d:59:b3:2b:6e:6e:ca:e8:5d:1c:e5:14:de:3c:5b:bf: d2:7d:bd:40:bd:0a:6f:65:61:3c:ef:f4:bf:fa:b8:b3:90:22: c5:74:ea:0c:da:32:8c:bf:52:6b:b9:de:e9:cd:82:7c:03:75: 0c:42:22:6b:88:ae:81:31:ba:09:98:10:db:2b:3d:de:52:1e: e6:36:f5:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMIOTYnTKccQEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MDQ1MTNjZjktZmQ0OC00ZDg4LWIxZDgtYjVlM2Y2ZjNmNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K4IipoJQeVoFa2cKKzwWsgy5OXflSc146AC E6nPi3r55e+H1gcgPK36ndhv8+AFRQLbRaiHUpHTjwrPXY+BBSrNy8+TMGlaPNDx l1JqbYtdYXrCAkG33aCtlTR0eWZzyuiHVxgp6n2rqbe3PYEKF9FFTroYBbmHyf53 uslCkMYYApTCkVsQsTaa1FN8aP2bHON8TxdQM74UFlyaMp+W4xuLmfuJ9hOb7bhO 0dISZtjdVdZet96DRdAKmZRVi3hMR0RgVQk0bMepmNJNqpOH8KWkCXJuIvo8jRLI FbYnZO1pAU4VCxayrABWB1vZ93g3cEjkTXEyuRAEBT0nOez9swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHGm6/2Zu5wFmswMGr48ar3p6rnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY1ZTVjYTEtN2U0My0z ZmVmLTg5MTctNzNjNGVmNGY1MmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDizcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIirBT/GiZB06lV2yvQ2kTidhRVeIxtKzWDiDFRHlM3hIqCCoJZTb+tw XCJ06hv0ndA1O6qQgADNAMdZ+QV27TQbxkp+8s4CALaOZCA8WL1wHQLBrQnb/Unl b08svCtGPRM7bKXLSHCIfHoxiEHrMIkz4t7m5quBv9pMZzadrACet6k2HzYBS9Bx JXgcXS/MXaV+iatsu3F17+nhZ7mITb51WHRG9pamhujgm1SswLc8M2r6Au5nTVmz K25uyuhdHOUU3jxbv9J9vUC9Cm9lYTzv9L/6uLOQIsV06gzaMoy/Umu53unNgnwD dQxCImuIroExugmYENsrPd5SHuY29Zc= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:17 2025 by rpki-client