$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b8bc59-38be-322e-9f9a-8c24b32e085e.roa File: b4b8bc59-38be-322e-9f9a-8c24b32e085e.roa (raw, json) Hash identifier: TUQXu41jbyFOBR/UalLdqW+7UuFTWzxVGbvrMaclojM= Subject key identifier: 5E:F3:03:9F:B5:F7:C5:95:6C:1E:5C:DA:F3:46:05:2A:94:B8:87:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C48FBD9F6655743476B53 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b8bc59-38be-322e-9f9a-8c24b32e085e.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 162.40.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:48:fb:d9:f6:65:57:43:47:6b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=8422de69-2ff4-41c4-8898-6256070a31fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c8:03:0a:8d:34:6b:3e:7e:47:05:36:8d:84: 4a:38:ef:fa:d1:50:86:2a:df:bd:3b:ef:0b:55:bf: 0d:c1:60:f5:9e:6c:3b:4e:a0:4f:da:0f:5f:c3:62: 8d:0a:02:ad:7e:ea:f7:62:f9:0c:6e:59:4f:c0:fa: 67:97:62:fb:a6:cc:ba:87:c0:89:e1:68:c8:59:b0: b4:f7:9d:34:51:b1:96:3e:87:2d:17:47:4b:94:c9: 53:65:7b:0c:a7:9d:eb:fe:25:f6:33:d5:80:db:91: 8c:83:1e:ea:bb:76:8d:f0:8b:fa:54:a3:da:89:96: 84:55:d6:e4:f7:9c:a7:c2:c8:27:fb:c0:13:40:37: 8c:b5:32:52:98:71:e4:cc:b4:d7:a7:5d:a2:00:f8: 39:fd:93:6b:fa:b2:4b:22:43:f8:1f:97:6f:1c:a4: ba:ef:c3:7b:01:60:1f:15:19:c2:e5:35:c1:0c:65: 95:49:42:1d:90:c1:bb:37:af:09:07:e5:30:b1:fc: 9e:cd:b0:04:72:72:c5:b0:27:9b:78:63:c5:46:37: 0d:0b:d1:3b:8f:52:bc:63:de:ef:10:08:9d:1f:d7: 3c:26:f5:64:aa:21:b7:27:b3:19:ac:68:0c:73:fd: 68:69:32:bc:9e:ae:94:2a:ce:ff:b2:cd:e0:6c:56: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F3:03:9F:B5:F7:C5:95:6C:1E:5C:DA:F3:46:05:2A:94:B8:87:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b8bc59-38be-322e-9f9a-8c24b32e085e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:93:4c:ed:6d:cd:e1:98:45:de:cd:73:a4:04:cd:e3:c5:f6: 6f:6d:19:26:ff:93:18:f1:47:e3:3d:56:c9:9a:f1:d1:11:4a: 72:a0:85:0d:7d:6a:c7:20:36:b2:70:14:e9:6e:0c:9c:b8:48: 7c:7f:80:73:8c:dc:87:c6:ba:06:5c:e8:de:f1:78:ea:cd:78: 75:67:76:0a:e4:cd:28:f4:98:14:4c:50:78:c6:57:12:e8:21: 4d:76:36:1f:b6:05:d2:63:f1:14:52:56:40:7d:c1:b8:e1:98: 52:3a:9a:f9:40:b1:88:f9:a6:62:1c:10:13:7e:dd:1f:aa:33: 54:90:73:5b:46:78:75:85:f9:e2:36:c0:7c:e7:4e:49:38:48: 02:40:43:cb:e0:70:6c:08:b2:a5:b3:7b:c5:a6:55:cc:aa:93: 2f:01:5a:5d:0b:1d:f2:0a:86:86:ba:c4:c7:8e:14:f7:7b:25: 67:f0:bd:eb:59:b8:1d:1f:33:8c:d0:62:65:75:05:8d:00:c8: 13:6a:e2:20:56:94:03:ba:dd:56:a5:85:8d:5b:7d:d9:33:df: 4a:9a:f1:5e:d1:af:01:fb:93:da:b8:53:a4:91:cc:c6:a5:ea: 17:52:39:58:56:66:b1:75:52:e2:cd:94:bc:c3:cb:84:e5:e5: fa:3c:74:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEj72fZlV0NHa1MwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ODQyMmRlNjktMmZmNC00MWM0LTg4OTgtNjI1NjA3MGEzMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcgDCo00az5+RwU2jYRKOO/60VCGKt+9O+8L Vb8NwWD1nmw7TqBP2g9fw2KNCgKtfur3YvkMbllPwPpnl2L7psy6h8CJ4WjIWbC0 9500UbGWPoctF0dLlMlTZXsMp53r/iX2M9WA25GMgx7qu3aN8Iv6VKPaiZaEVdbk 95ynwsgn+8ATQDeMtTJSmHHkzLTXp12iAPg5/ZNr+rJLIkP4H5dvHKS678N7AWAf FRnC5TXBDGWVSUIdkMG7N68JB+UwsfyezbAEcnLFsCebeGPFRjcNC9E7j1K8Y97v EAidH9c8JvVkqiG3J7MZrGgMc/1oaTK8nq6UKs7/ss3gbFZXwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7zA5+198WVbB5c2vNGBSqUuIcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjRiOGJjNTktMzhiZS0z MjJlLTlmOWEtOGMyNGIzMmUwODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoig4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmTTO1tzeGYRd7Nc6QEzePF9m9tGSb/kxjxR+M9Vsma8dERSnKghQ19 ascgNrJwFOluDJy4SHx/gHOM3IfGugZc6N7xeOrNeHVndgrkzSj0mBRMUHjGVxLo IU12Nh+2BdJj8RRSVkB9wbjhmFI6mvlAsYj5pmIcEBN+3R+qM1SQc1tGeHWF+eI2 wHznTkk4SAJAQ8vgcGwIsqWze8WmVcyqky8BWl0LHfIKhoa6xMeOFPd7JWfwvetZ uB0fM4zQYmV1BY0AyBNq4iBWlAO63ValhY1bfdkz30qa8V7RrwH7k9q4U6SRzMal 6hdSOVhWZrF1UuLNlLzDy4Tl5fo8dDY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:23:25 2025 by rpki-client