$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8879e0a-a047-3aa1-9f06-79affe165955.roa File: c8879e0a-a047-3aa1-9f06-79affe165955.roa (raw, json) Hash identifier: KW+WGyXS4B9mLKfi5JgQBMYHIU5czUV880CCVq2PwI8= Subject key identifier: EC:3E:94:43:7B:4A:97:A3:6A:8B:56:5B:9C:5F:80:55:1F:03:24:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B95AA5EB2586ED0B3A094B2E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8879e0a-a047-3aa1-9f06-79affe165955.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 40.137.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:5e:b2:58:6e:d0:b3:a0:94:b2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c638f481-58c7-410f-825c-9d0e3ca652ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c8:1c:87:aa:43:71:18:24:7d:73:a0:90:c5: c8:bc:47:5a:75:c1:db:1e:f2:41:1f:19:f7:58:81: 2d:e3:9f:f9:63:f8:8d:e2:f7:4d:10:ef:30:f7:57: 82:13:74:9c:fc:02:9f:d7:b5:bc:d0:2a:ec:df:92: 6d:79:e6:09:06:ac:80:fc:26:c6:bc:ae:2b:8c:37: 6c:d6:cd:15:94:50:e8:21:8b:47:8f:f1:1f:f2:ff: 06:8c:8e:89:e5:a0:dc:d0:f7:d3:5b:e9:68:3b:8d: 9e:c1:8e:db:6a:11:ea:d1:69:14:c6:b9:45:11:99: de:3f:48:65:da:3b:4c:d4:04:62:f3:07:b1:93:04: 68:0f:96:2d:66:26:4d:d9:52:11:e1:7a:7a:b7:9b: 5e:d1:80:d0:b4:cc:1e:f1:a4:94:1d:b8:2d:f0:ff: 8b:09:0b:56:4f:1b:6e:53:d6:90:b9:6a:2a:6f:ea: e4:23:b4:d1:52:48:4b:77:8e:e1:99:61:a2:22:75: 18:06:db:62:c6:0e:0b:7a:7c:71:91:23:34:93:31: 6a:17:e1:35:53:b6:1a:29:e9:fd:c0:79:c2:60:fd: df:e4:e8:70:c3:e6:21:89:06:60:84:19:a9:db:1f: d1:b7:8c:0b:8f:bf:95:42:f4:a3:c3:9b:03:ca:4d: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3E:94:43:7B:4A:97:A3:6A:8B:56:5B:9C:5F:80:55:1F:03:24:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8879e0a-a047-3aa1-9f06-79affe165955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.137.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a5:10:fc:ec:e1:3a:2e:c7:e7:a9:6c:df:b2:40:13:33:14: 80:0e:ef:ad:17:6a:91:8e:0a:70:b5:e4:9f:02:1d:15:75:a8: 5f:f0:a1:a7:6b:e8:39:5e:c0:d4:54:79:1e:d3:97:3a:8f:9c: 9f:29:10:97:b1:60:fe:3d:0a:39:86:fc:e7:67:10:5d:fe:4d: c1:44:a1:cf:93:8f:45:e0:fe:6d:dc:3b:ee:fe:17:8e:31:f2: 33:66:44:98:bb:4c:44:0e:49:d9:f3:dd:2e:da:0c:80:f2:52: ac:b2:af:90:cd:84:f4:da:cb:45:c3:7f:55:5c:81:b8:9b:c1: 08:c1:f0:70:81:1d:b7:0f:16:d2:73:89:44:ff:2c:14:3c:fb: a6:87:24:4b:d8:45:d8:2c:a1:08:6b:83:87:ef:07:c0:43:39: 41:e8:71:ca:64:3c:ac:c8:1d:a9:d5:be:1a:53:52:9c:3a:75: a3:da:6b:ce:ec:3e:4e:39:ff:cb:58:eb:89:7b:ff:70:da:cd: e4:a8:5e:1d:5f:44:1b:84:7c:34:7c:c4:ff:3e:cc:a6:b0:15: e0:1a:8a:7d:82:dc:3f:01:b9:20:fb:9b:fc:d8:bc:79:20:6a: d6:54:fa:2c:8c:95:67:5e:66:97:be:ae:6a:df:4d:ba:2a:91: 46:f9:3d:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVql6yWG7Qs6CUsuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzYzOGY0ODEtNThjNy00MTBmLTgyNWMtOWQwZTNjYTY1MmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8gch6pDcRgkfXOgkMXIvEdadcHbHvJBHxn3 WIEt45/5Y/iN4vdNEO8w91eCE3Sc/AKf17W80Crs35JteeYJBqyA/CbGvK4rjDds 1s0VlFDoIYtHj/Ef8v8GjI6J5aDc0PfTW+loO42ewY7bahHq0WkUxrlFEZneP0hl 2jtM1ARi8wexkwRoD5YtZiZN2VIR4Xp6t5te0YDQtMwe8aSUHbgt8P+LCQtWTxtu U9aQuWoqb+rkI7TRUkhLd47hmWGiInUYBttixg4LenxxkSM0kzFqF+E1U7YaKen9 wHnCYP3f5Ohww+YhiQZghBmp2x/Rt4wLj7+VQvSjw5sDyk3vLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOw+lEN7SpejaotWW5xfgFUfAyRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzg4NzllMGEtYTA0Ny0z YWExLTlmMDYtNzlhZmZlMTY1OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHulEPzs4Toux+epbN+yQBMzFIAO760XapGOCnC15J8CHRV1qF/woadr 6DlewNRUeR7TlzqPnJ8pEJexYP49CjmG/OdnEF3+TcFEoc+Tj0Xg/m3cO+7+F44x 8jNmRJi7TEQOSdnz3S7aDIDyUqyyr5DNhPTay0XDf1VcgbibwQjB8HCBHbcPFtJz iUT/LBQ8+6aHJEvYRdgsoQhrg4fvB8BDOUHoccpkPKzIHanVvhpTUpw6daPaa87s Pk45/8tY64l7/3DazeSoXh1fRBuEfDR8xP8+zKawFeAain2C3D8BuSD7m/zYvHkg atZU+iyMlWdeZpe+rmrfTboqkUb5PcA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:13:31 2025 by rpki-client