$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf5db4e7-9e35-3484-bf7f-60be06b1bb4e.roa File: bf5db4e7-9e35-3484-bf7f-60be06b1bb4e.roa (raw, json) Hash identifier: sftcNWU4kKbp7gHHVHnIGjhoA9K39/PuSVtDyjx06RM= Subject key identifier: ED:3B:07:A9:EC:6A:1B:A8:9B:6B:F2:15:54:F4:CC:6E:B4:CB:73:C8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9442237331F4E8CA19E6B980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf5db4e7-9e35-3484-bf7f-60be06b1bb4e.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 40.134.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:23:73:31:f4:e8:ca:19:e6:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=90fbc1f5-cd62-4503-93c6-6ff3e4b902f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:85:02:9b:af:74:36:b0:bd:2e:dd:17:a9:d5: 5e:69:69:ee:c1:ba:99:01:e8:71:d5:28:ed:d2:55: 72:90:d5:08:5e:e1:c0:59:2f:3a:b3:7e:48:09:72: 6d:1c:d7:d0:71:64:a7:8f:18:53:1a:51:61:43:5e: b0:33:48:be:e7:c3:e4:6d:e3:ea:f8:19:98:9a:41: a4:d6:ea:e8:85:4e:da:2b:07:dd:9a:ba:a2:e9:fb: 42:32:6b:15:5b:63:2b:22:be:a2:46:3c:1e:84:3a: 94:0a:1b:7b:45:50:a3:93:87:5a:60:5f:7c:8a:7c: e0:5b:95:3f:7e:fc:e8:f1:7d:f3:63:e7:4c:4f:a5: eb:6f:ee:19:a3:57:e9:7d:c8:ce:ec:2d:c4:3a:01: 21:5e:bf:d1:a3:fd:b2:8c:ab:df:94:fb:5c:a9:12: 11:c0:99:84:0f:e7:9a:29:43:ae:89:cb:ca:f3:8d: dc:fa:b4:5c:f0:94:d6:13:a7:08:dd:67:db:4c:cb: 14:f2:65:fa:bc:05:61:66:5e:70:4a:a2:cd:b7:ac: 3e:2d:4f:0b:a5:c9:9e:f4:ce:0c:98:49:0d:e4:48: ab:7c:df:84:34:0a:b7:35:cf:fc:ad:2d:2e:10:55: 92:9e:b3:dd:c3:13:32:da:f2:61:85:09:bf:fc:4a: aa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3B:07:A9:EC:6A:1B:A8:9B:6B:F2:15:54:F4:CC:6E:B4:CB:73:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf5db4e7-9e35-3484-bf7f-60be06b1bb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.134.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b8:7d:bf:cf:75:a9:b0:ab:5b:0b:cb:ff:70:d2:62:e3:62: b0:46:1a:db:7e:ec:a7:7e:22:3f:9e:ac:4b:d1:7c:ce:c3:29: b2:f0:25:42:df:fd:7e:94:6d:73:eb:af:9c:5d:11:6a:2a:9f: c2:a2:6e:9d:ad:ec:2d:36:a8:f9:ea:7b:ec:2a:a2:1c:7e:0f: f1:7e:60:0a:52:7e:31:24:51:9d:04:fe:0a:55:1a:67:cf:46: 2d:30:ee:de:76:51:05:b7:5a:c4:49:06:d7:e3:c1:46:6e:46: 92:83:76:2f:d8:c7:9a:fd:6e:11:44:f9:d2:18:61:9d:7e:3c: 17:70:3d:c9:66:29:f8:da:a1:a7:ed:5d:9e:38:ac:4b:31:7f: bf:c8:d9:36:19:78:de:84:3a:e6:14:98:50:07:17:ba:65:1a: 76:75:b3:28:d7:d7:3a:2c:f7:45:0e:0e:67:60:31:7e:29:55: ff:01:e0:81:2f:7a:a9:e6:f2:45:f1:13:20:a6:39:cc:de:ed: 49:64:31:75:e7:e2:f8:53:ee:b6:42:28:a0:77:9c:25:ee:ba: 35:4a:f8:ec:2c:c8:6e:5d:8a:ee:ce:92:4c:ff:08:c0:94:9d: cc:4a:28:d9:98:e8:54:69:ce:c9:4d:15:12:4b:43:89:cb:99: 3b:52:b3:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiNzMfToyhnmuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk OTBmYmMxZjUtY2Q2Mi00NTAzLTkzYzYtNmZmM2U0YjkwMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIUCm690NrC9Lt0XqdVeaWnuwbqZAehx1Sjt 0lVykNUIXuHAWS86s35ICXJtHNfQcWSnjxhTGlFhQ16wM0i+58PkbePq+BmYmkGk 1urohU7aKwfdmrqi6ftCMmsVW2MrIr6iRjwehDqUCht7RVCjk4daYF98inzgW5U/ fvzo8X3zY+dMT6Xrb+4Zo1fpfcjO7C3EOgEhXr/Ro/2yjKvflPtcqRIRwJmED+ea KUOuicvK843c+rRc8JTWE6cI3WfbTMsU8mX6vAVhZl5wSqLNt6w+LU8Lpcme9M4M mEkN5EirfN+ENAq3Nc/8rS0uEFWSnrPdwxMy2vJhhQm//EqqHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO07B6nsahuom2vyFVT0zG60y3PIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmY1ZGI0ZTctOWUzNS0z NDg0LWJmN2YtNjBiZTA2YjFiYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKIZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE24fb/Pdamwq1sLy/9w0mLjYrBGGtt+7Kd+Ij+erEvRfM7DKbLwJULf /X6UbXPrr5xdEWoqn8Kibp2t7C02qPnqe+wqohx+D/F+YApSfjEkUZ0E/gpVGmfP Ri0w7t52UQW3WsRJBtfjwUZuRpKDdi/Yx5r9bhFE+dIYYZ1+PBdwPclmKfjaoaft XZ44rEsxf7/I2TYZeN6EOuYUmFAHF7plGnZ1syjX1zos90UODmdgMX4pVf8B4IEv eqnm8kXxEyCmOcze7UlkMXXn4vhT7rZCKKB3nCXuujVK+OwsyG5diu7Okkz/CMCU ncxKKNmY6FRpzslNFRJLQ4nLmTtSs4k= -----END CERTIFICATE-----Generated at Mon Oct 20 03:26:14 2025 by rpki-client