$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f11fc131-01c0-3cfe-b8ec-fa708618b3e2.roa File: f11fc131-01c0-3cfe-b8ec-fa708618b3e2.roa (raw, json) Hash identifier: 7kULkn/7ezK8/1OUU6w/At0foPBj+60XL3nsam6xUTo= Subject key identifier: 76:94:7D:37:8F:99:0D:7D:07:D2:8B:10:0E:5C:6F:B4:ED:5D:C4:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B328C63BB540676AF6B03E680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f11fc131-01c0-3cfe-b8ec-fa708618b3e2.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 67.140.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:63:bb:54:06:76:af:6b:03:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=302d7263-9c72-4617-9917-ec5e671bc5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:0f:eb:e1:c2:e7:55:14:fe:8f:0c:92:35: 21:f0:81:28:c9:8a:51:b9:a2:ac:e9:b6:0d:65:fa: de:5c:09:34:71:ec:7a:66:93:f7:c2:3a:ab:18:d3: 56:3d:52:84:48:9b:23:9e:25:2f:df:c7:46:61:9c: 9c:13:e5:db:f4:6c:c3:0a:d8:d7:16:f3:b8:fe:2a: 1b:6c:7c:b2:90:0f:f5:2f:f0:74:66:8b:40:1e:ad: 97:9f:a3:7c:65:4e:0c:23:d0:4b:11:ca:46:30:0d: 1a:7e:a9:89:88:e6:bf:55:3b:fc:59:71:d5:ac:26: 78:88:d8:dd:db:74:d6:fd:f1:45:8f:38:7d:26:9d: 01:c0:27:dd:85:94:83:c1:cf:5d:0a:d4:f8:73:35: 5b:53:54:e9:f3:0e:b0:24:89:d0:8f:ba:28:a8:79: 3b:e6:d7:1b:7b:b7:24:73:a5:43:ac:de:24:68:34: 88:10:90:68:05:52:f0:b9:a6:a2:52:00:33:82:36: 07:cd:52:7f:0c:da:93:55:f6:62:6d:b6:1f:9e:0c: 8b:1f:e3:09:93:8f:1a:b6:46:c2:0c:07:e7:c1:2d: 83:6e:20:c4:fb:7e:42:a8:41:22:5f:1a:eb:10:17: 65:0d:41:46:42:96:0e:e8:8b:08:80:05:58:f5:86: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:94:7D:37:8F:99:0D:7D:07:D2:8B:10:0E:5C:6F:B4:ED:5D:C4:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f11fc131-01c0-3cfe-b8ec-fa708618b3e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:22:de:3c:d6:5b:25:ab:96:4e:13:6c:fe:c4:09:34:98:dd: 81:7f:06:69:5d:08:34:c9:a1:d2:b6:a0:8c:ae:bf:29:e1:d3: 10:5a:0b:50:2e:f0:8e:95:b4:07:44:81:ff:c3:ab:33:c8:a0: 8e:e8:1f:ad:aa:a9:8e:4d:e3:77:f2:8d:2b:5d:8d:27:3b:60: ba:22:60:5d:76:4c:e6:d4:5b:08:b7:6a:2e:33:64:44:05:c9: d8:6a:75:f8:68:27:40:70:60:2e:ce:32:99:b3:62:e2:0a:c8: d3:ea:8f:91:2d:ad:ba:62:f3:6c:e5:c4:6e:f3:02:c2:6a:11: 7a:87:2b:f9:cc:39:9d:86:83:5a:fd:18:bb:9e:27:28:0b:30: 51:1f:a0:8f:bd:3b:6c:8b:22:6d:a7:4a:89:af:09:75:f0:39: 69:74:cf:85:f5:c3:28:87:fb:d8:5f:0b:68:1a:e1:b2:30:4a: 47:82:04:ec:5d:db:8d:e6:45:17:07:10:a2:80:3e:6a:dc:0b: b8:42:2d:40:04:7e:96:2c:77:e2:79:a3:9e:a2:55:11:8b:1e: dd:9a:55:b8:29:4c:1c:42:41:3c:5c:3c:3a:55:44:39:7c:2a: 35:5f:b9:42:28:61:b6:88:6b:3e:cd:c6:c5:2c:5e:b3:47:06: 5a:39:f2:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjGO7VAZ2r2sD5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MzAyZDcyNjMtOWM3Mi00NjE3LTk5MTctZWM1ZTY3MWJjNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzsP6+HC51UU/o8MkjUh8IEoyYpRuaKs6bYN ZfreXAk0cex6ZpP3wjqrGNNWPVKESJsjniUv38dGYZycE+Xb9GzDCtjXFvO4/iob bHyykA/1L/B0ZotAHq2Xn6N8ZU4MI9BLEcpGMA0afqmJiOa/VTv8WXHVrCZ4iNjd 23TW/fFFjzh9Jp0BwCfdhZSDwc9dCtT4czVbU1Tp8w6wJInQj7ooqHk75tcbe7ck c6VDrN4kaDSIEJBoBVLwuaaiUgAzgjYHzVJ/DNqTVfZibbYfngyLH+MJk48atkbC DAfnwS2DbiDE+35CqEEiXxrrEBdlDUFGQpYO6IsIgAVY9YYjJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaUfTePmQ19B9KLEA5cb7TtXcRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjExZmMxMzEtMDFjMC0z Y2ZlLWI4ZWMtZmE3MDg2MThiM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4woMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0i3jzWWyWrlk4TbP7ECTSY3YF/BmldCDTJodK2oIyuvynh0xBaC1Au 8I6VtAdEgf/DqzPIoI7oH62qqY5N43fyjStdjSc7YLoiYF12TObUWwi3ai4zZEQF ydhqdfhoJ0BwYC7OMpmzYuIKyNPqj5Etrbpi82zlxG7zAsJqEXqHK/nMOZ2Gg1r9 GLueJygLMFEfoI+9O2yLIm2nSomvCXXwOWl0z4X1wyiH+9hfC2ga4bIwSkeCBOxd 243mRRcHEKKAPmrcC7hCLUAEfpYsd+J5o56iVRGLHt2aVbgpTBxCQTxcPDpVRDl8 KjVfuUIoYbaIaz7NxsUsXrNHBlo58mI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:16 2025 by rpki-client