$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa File: fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa (raw, json) Hash identifier: tRVVYqfxp954yBAxTGehuEyWWtwGAsH+Tl59s8tO0KM= Subject key identifier: 23:D4:8E:AC:90:1B:9B:47:33:EC:36:4E:63:56:06:C3:13:4F:1A:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D0252648EABB054EE5E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 14822 IP address blocks: 40.129.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:02:52:64:8e:ab:b0:54:ee:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0e283569-6d60-4d15-9d63-161029d0b813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d6:d6:df:ab:62:4c:e4:7c:2f:05:b1:8e:21: b3:14:8f:e0:f9:2d:ce:dd:c9:61:1f:c9:86:5e:f8: ef:b7:aa:be:fd:c8:1c:6a:ae:4f:2a:d3:17:7c:f6: 5b:d4:94:7b:93:d4:8c:3a:fc:35:be:20:d4:28:06: 61:de:71:c7:02:0c:10:e9:4e:e5:d5:6b:cd:30:5f: ca:50:a8:d7:93:9b:fb:c7:d1:22:df:e4:96:c2:57: c6:9b:4e:0d:16:4c:07:4f:51:4f:05:23:0b:38:d1: f5:32:38:c3:08:dc:9e:b1:72:a9:89:6f:bf:09:4d: 55:e1:29:f0:e1:c8:f3:fe:fc:54:8d:24:e2:aa:84: 23:42:1b:bd:1a:b4:3d:f7:5f:14:3c:63:8c:74:c8: ed:40:34:a9:a5:22:ea:95:74:15:66:f5:06:fa:68: 30:32:6f:fb:11:e4:d0:62:e0:d4:56:72:d3:f0:5c: 24:45:55:38:29:38:8a:77:22:f8:68:1a:a9:00:06: 07:7f:fe:a3:15:95:f1:92:53:97:f5:6a:ed:0e:a3: ea:1b:86:77:e5:04:d3:10:35:38:3f:26:94:11:f9: ff:51:46:f1:d3:9b:db:d2:54:cc:8e:0d:17:3f:f9: b5:fe:b4:4b:b8:6b:54:dd:f6:55:b3:9f:c0:8a:cf: 05:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D4:8E:AC:90:1B:9B:47:33:EC:36:4E:63:56:06:C3:13:4F:1A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.129.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:81:73:7e:43:5b:91:ca:bb:15:0e:22:f1:a8:41:e3:81:32: bc:50:d1:4b:e3:77:b9:d1:e7:d8:f2:b0:90:67:1e:e1:50:fa: 3e:98:eb:ca:26:54:c1:7e:bf:aa:3d:a9:65:a1:7e:8c:a0:d7: ff:8b:06:2e:f7:c3:6f:d7:65:69:fc:8c:54:df:f5:88:9e:08: 03:d6:e9:64:4a:dd:18:22:3f:26:ba:7b:21:ec:7e:34:20:db: 18:f0:93:32:aa:67:af:15:1a:07:ce:81:26:a8:bd:4a:fa:07: 07:24:53:bd:6b:91:f8:6f:49:a1:8d:dd:51:4b:08:aa:97:b2: 7a:ec:a7:83:11:f2:46:d4:3f:6e:ed:9d:fa:c8:69:02:2c:58: dc:42:fb:8e:39:36:05:4b:10:0d:fa:2c:42:13:70:63:5d:9a: d3:fd:f0:fb:f5:fa:a0:52:a6:ca:89:89:7b:88:9b:a6:bc:fe: 7f:f6:5a:de:63:50:b5:81:51:96:7d:30:cb:8b:1f:55:b1:1c: 9e:02:c0:7d:4e:1e:78:26:07:87:53:f1:02:77:5d:32:d1:cb: 6d:57:57:63:e8:6c:d4:fd:51:71:c8:86:16:7d:37:07:0a:0a: 68:23:41:d2:48:fc:92:a8:18:79:48:e7:93:9f:aa:03:bb:20: 52:45:13:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQJSZI6rsFTuXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGUyODM1NjktNmQ2MC00ZDE1LTlkNjMtMTYxMDI5ZDBiODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtbW36tiTOR8LwWxjiGzFI/g+S3O3clhH8mG Xvjvt6q+/cgcaq5PKtMXfPZb1JR7k9SMOvw1viDUKAZh3nHHAgwQ6U7l1WvNMF/K UKjXk5v7x9Ei3+SWwlfGm04NFkwHT1FPBSMLONH1MjjDCNyesXKpiW+/CU1V4Snw 4cjz/vxUjSTiqoQjQhu9GrQ9918UPGOMdMjtQDSppSLqlXQVZvUG+mgwMm/7EeTQ YuDUVnLT8FwkRVU4KTiKdyL4aBqpAAYHf/6jFZXxklOX9WrtDqPqG4Z35QTTEDU4 PyaUEfn/UUbx05vb0lTMjg0XP/m1/rRLuGtU3fZVs5/Ais8FPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPUjqyQG5tHM+w2TmNWBsMTTxrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmE3ODljNWYtYzExMy0z YTMzLThmMWQtYjc5MmQyNmQzMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuBc35DW5HKuxUOIvGoQeOBMrxQ0Uvjd7nR59jysJBnHuFQ+j6Y68om VMF+v6o9qWWhfoyg1/+LBi73w2/XZWn8jFTf9YieCAPW6WRK3RgiPya6eyHsfjQg 2xjwkzKqZ68VGgfOgSaovUr6BwckU71rkfhvSaGN3VFLCKqXsnrsp4MR8kbUP27t nfrIaQIsWNxC+445NgVLEA36LEITcGNdmtP98Pv1+qBSpsqJiXuIm6a8/n/2Wt5j ULWBUZZ9MMuLH1WxHJ4CwH1OHngmB4dT8QJ3XTLRy21XV2PobNT9UXHIhhZ9NwcK CmgjQdJI/JKoGHlI55OfqgO7IFJFE7w= -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:25 2025 by rpki-client