$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad/1a7af4d7-bca4-3aa7-8867-edca6d745c04.roa File: 1a7af4d7-bca4-3aa7-8867-edca6d745c04.roa (raw, json) Hash identifier: AwEk36zXYe2PE2BlnA51/rv+oJ5htNVFpGB5fErJ9T0= Subject key identifier: CE:F0:04:5D:71:3C:39:A7:3C:67:8C:1F:08:70:4B:E1:58:80:7E:9E Certificate issuer: /CN=49a1a9e2-4124-4a3b-8551-b521e6017dad Certificate serial: 010D0C9F4328584E8DEFBDBAFFD0D0D3CCFDF780 Authority key identifier: 94:03:9A:A9:C6:8C:B6:6F:DB:04:BB:4A:06:BA:51:D6:01:4B:DB:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad/1a7af4d7-bca4-3aa7-8867-edca6d745c04.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 964 IP address blocks: 23.138.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad/49a1a9e2-4124-4a3b-8551-b521e6017dad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad/49a1a9e2-4124-4a3b-8551-b521e6017dad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:bd:ba:ff:d0:d0:d3:cc:fd:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49a1a9e2-4124-4a3b-8551-b521e6017dad Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=b347e845-20a5-423c-8b7c-88479b834e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:24:5f:49:51:e7:ca:50:41:29:3b:78:61: e2:8e:76:77:1a:b7:ec:1e:27:5a:e4:bb:0a:ca:34: 9d:e3:f0:d8:ba:0f:6a:2b:75:a8:f7:1e:a4:f7:55: 9c:a4:1f:b2:b6:27:74:e4:cc:42:83:97:1a:ec:a9: 1a:b6:2a:be:f7:0e:2a:09:4f:e9:c6:47:54:9a:b2: 76:a0:77:2c:0f:6d:49:cf:2f:f4:fb:cf:3b:5f:d9: 6c:9e:a7:03:ab:48:d1:d9:cf:5e:16:da:53:5f:a1: 57:ad:6b:40:63:7b:b5:66:0e:36:ef:63:f3:71:66: 17:62:9b:27:82:be:86:36:ba:60:44:1d:d7:82:9a: 9a:01:7b:3c:1c:dc:be:aa:03:59:e1:d9:d8:12:cb: 9d:2f:bd:61:2d:86:be:99:21:64:5f:2b:a8:e5:26: 95:8d:3f:02:37:64:68:ca:a8:4e:ba:31:2b:6c:6c: ed:41:15:25:4b:f8:be:9b:80:09:77:09:8e:6d:ce: 06:6e:42:8f:73:fc:15:9e:49:30:be:a8:73:a3:96: c7:65:4d:f7:47:23:4c:30:4c:47:3a:9f:5f:56:07: 61:42:42:ff:8b:36:16:03:55:1b:f7:fa:1d:95:93: 0f:17:1c:83:d4:eb:4d:35:54:bd:c8:bb:1d:78:d5: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F0:04:5D:71:3C:39:A7:3C:67:8C:1F:08:70:4B:E1:58:80:7E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad/1a7af4d7-bca4-3aa7-8867-edca6d745c04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad/49a1a9e2-4124-4a3b-8551-b521e6017dad.crl X509v3 Authority Key Identifier: keyid:94:03:9A:A9:C6:8C:B6:6F:DB:04:BB:4A:06:BA:51:D6:01:4B:DB:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad.cer sbgp-ipAddrBlock: critical IPv4: 23.138.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:cf:7d:51:fa:3c:09:61:51:52:9e:ca:a7:2e:72:7d:7b:d1: e8:a1:5f:35:83:7d:af:11:37:8d:16:66:41:91:21:84:e5:46: bc:d6:33:d1:d5:f7:7a:6a:cb:23:63:b4:50:fb:28:81:fb:02: a3:79:b9:61:e1:1c:a7:38:b4:8a:e4:99:fd:54:80:2d:ad:4c: 3e:f5:3d:e1:50:d9:07:89:b1:50:dc:57:37:c1:48:fd:e8:c3: bf:d1:4a:60:22:c7:6d:b1:56:96:5a:33:a3:45:67:70:5a:81: e0:9b:7a:2a:8f:04:d9:4d:b0:33:e1:13:8d:b7:d7:a3:37:84: 93:0f:5d:7b:b9:63:02:9b:26:26:5b:1b:0c:3f:68:87:b8:e2: 8c:72:05:f9:6b:6d:13:64:a9:3d:bc:8a:a6:48:48:fe:2e:7b: 3f:61:17:8b:38:54:38:3b:66:0f:cc:83:f5:81:c4:28:6f:a4: 37:c2:c4:5c:03:99:56:46:f5:58:06:53:f4:62:a9:1c:18:d0: e4:45:42:f6:8a:60:93:28:24:e8:86:41:41:6e:c8:52:8c:6b: 3e:60:4c:7a:ab:30:0b:c6:60:f6:b0:75:4f:a5:7d:c1:2c:ec: e2:28:65:8d:79:31:26:34:56:72:b6:54:be:fa:59:46:62:bd: 99:42:27:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N7726/9DQ08z994AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDlhMWE5ZTItNDEyNC00YTNiLTg1NTEtYjUyMWU2MDE3 ZGFkMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk YjM0N2U4NDUtMjBhNS00MjNjLThiN2MtODg0NzliODM0ZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTwkX0lR58pQQSk7eGHijnZ3GrfsHida5LsK yjSd4/DYug9qK3Wo9x6k91WcpB+ytid05MxCg5ca7Kkatiq+9w4qCU/pxkdUmrJ2 oHcsD21Jzy/0+887X9lsnqcDq0jR2c9eFtpTX6FXrWtAY3u1Zg4272PzcWYXYpsn gr6GNrpgRB3XgpqaAXs8HNy+qgNZ4dnYEsudL71hLYa+mSFkXyuo5SaVjT8CN2Ro yqhOujErbGztQRUlS/i+m4AJdwmObc4GbkKPc/wVnkkwvqhzo5bHZU33RyNMMExH Op9fVgdhQkL/izYWA1Ub9/odlZMPFxyD1OtNNVS9yLsdeNVsLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7wBF1xPDmnPGeMHwhwS+FYgH6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80OWEx YTllMi00MTI0LTRhM2ItODU1MS1iNTIxZTYwMTdkYWQvMWE3YWY0ZDctYmNhNC0z YWE3LTg4NjctZWRjYTZkNzQ1YzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDlhMWE5ZTItNDEyNC00YTNiLTg1 NTEtYjUyMWU2MDE3ZGFkLzQ5YTFhOWUyLTQxMjQtNGEzYi04NTUxLWI1MjFlNjAx N2RhZC5jcmwwHwYDVR0jBBgwFoAUlAOaqcaMtm/bBLtKBrpR1gFL27cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80OWExYTllMi00MTI0LTRhM2ItODU1MS1iNTIx ZTYwMTdkYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF4ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXPfVH6PAlhUVKeyqcucn170eihXzWDfa8RN40WZkGRIYTlRrzWM9HV 93pqyyNjtFD7KIH7AqN5uWHhHKc4tIrkmf1UgC2tTD71PeFQ2QeJsVDcVzfBSP3o w7/RSmAix22xVpZaM6NFZ3BageCbeiqPBNlNsDPhE42316M3hJMPXXu5YwKbJiZb Gww/aIe44oxyBflrbRNkqT28iqZISP4uez9hF4s4VDg7Zg/Mg/WBxChvpDfCxFwD mVZG9VgGU/RiqRwY0ORFQvaKYJMoJOiGQUFuyFKMaz5gTHqrMAvGYPawdU+lfcEs 7OIoZY15MSY0VnK2VL76WUZivZlCJzg= -----END CERTIFICATE-----Generated at Tue Jul 21 20:11:47 2026 by rpki-client