$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa File: 01a8e5f6-00d1-310c-9826-54ee0eea151a.roa (raw, json) Hash identifier: FddxaHQLTW2W8DBE+ZCWg7/QMXymB+s4EMNk5EuE8r0= Subject key identifier: B5:5A:21:2A:B7:14:CB:BF:E3:23:F3:A3:2E:84:9E:13:8C:71:2F:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E5FDF6A98627F7B545EC7F100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 40.136.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:6a:98:62:7f:7b:54:5e:c7:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=12d61cad-d38e-44a3-a94a-a1db1d65c500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9b:9d:5e:38:6f:cb:f7:6b:24:d1:f0:3e:61: 68:37:76:0b:b0:0d:42:ec:6e:de:2b:2a:19:7a:21: ce:4b:76:aa:ba:c4:ca:b4:bc:44:54:94:5b:80:ce: da:46:66:86:45:97:75:a1:81:8d:34:91:c0:ed:b1: 87:af:10:ec:d5:f3:77:6a:8b:e1:40:76:8d:48:9c: 85:e1:c3:e3:9c:e9:f9:24:20:57:cd:57:17:f7:9b: 0b:ed:01:d5:98:8b:42:67:d0:99:11:21:45:19:88: 9a:36:75:9b:9b:e0:f7:31:e4:8c:e2:8f:39:f1:b8: 94:46:68:6d:f4:24:22:90:b9:ce:75:76:e5:76:93: d1:c7:65:33:fc:26:b6:65:5f:24:e7:89:e2:e5:8e: b7:ce:60:5f:93:e8:99:3e:bf:f7:1d:e8:3e:d1:ae: de:c2:91:f8:73:84:bb:4a:48:69:20:fe:db:bb:e4: 12:92:bb:aa:d9:7a:5f:be:b8:82:87:f4:96:1d:ad: f7:2d:da:22:e1:30:f7:86:ca:c3:6b:85:46:42:e0: b7:36:de:1a:c7:6b:07:b0:f9:c6:ca:a3:f5:d1:60: f9:f2:ad:5d:68:eb:21:a6:67:26:3d:e3:42:67:34: 55:ae:27:03:a9:0d:76:3a:ff:f0:91:f4:31:b5:5f: eb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5A:21:2A:B7:14:CB:BF:E3:23:F3:A3:2E:84:9E:13:8C:71:2F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:70:ed:62:bd:ce:25:50:d5:10:ef:23:a2:5d:48:5f:09:b2: d7:6c:2f:4f:75:f4:f5:ca:9f:45:35:c5:9f:e1:ff:e4:8a:ba: 96:e2:5d:02:6a:e7:56:8c:93:c3:22:e6:10:c2:27:8b:ee:7b: 39:ed:43:d1:44:e7:3a:83:e9:52:98:7d:ba:f2:2a:e0:28:36: 0c:d4:3c:54:50:d9:38:f8:eb:e8:3d:ee:50:64:fb:6d:4b:d0: ad:82:2a:64:9c:f7:2e:89:c4:45:bc:fe:09:ac:d9:ed:7b:f2: 8f:03:ff:ee:73:43:18:34:56:4c:4a:e8:07:3b:17:4c:e0:4b: cf:cd:f8:2f:60:e1:57:08:67:0a:8f:c3:46:f1:be:83:bb:57: 6f:5b:03:b3:98:21:72:87:9f:27:55:9b:43:74:91:84:3d:3d: ed:dc:d9:b8:c9:81:5d:22:41:6b:e9:28:f1:59:a7:83:92:e7: 83:bc:9a:85:70:5b:2d:ac:bb:f8:98:e6:a4:c0:da:cf:d8:ce: b7:63:48:7c:87:5d:49:b4:d8:da:14:5e:6d:f4:3c:48:bc:25: 69:f4:46:5e:c1:00:1e:ea:e1:5b:45:69:ce:d4:41:02:df:e1: c3:a9:fd:b9:90:0d:ab:a5:7c:83:73:a9:60:47:72:7b:c2:7a: 7d:a9:60:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32qYYn97VF7H8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk MTJkNjFjYWQtZDM4ZS00NGEzLWE5NGEtYTFkYjFkNjVjNTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZudXjhvy/drJNHwPmFoN3YLsA1C7G7eKyoZ eiHOS3aqusTKtLxEVJRbgM7aRmaGRZd1oYGNNJHA7bGHrxDs1fN3aovhQHaNSJyF 4cPjnOn5JCBXzVcX95sL7QHVmItCZ9CZESFFGYiaNnWbm+D3MeSM4o858biURmht 9CQikLnOdXbldpPRx2Uz/Ca2ZV8k54ni5Y63zmBfk+iZPr/3Heg+0a7ewpH4c4S7 SkhpIP7bu+QSkruq2XpfvriCh/SWHa33Ldoi4TD3hsrDa4VGQuC3Nt4ax2sHsPnG yqP10WD58q1daOshpmcmPeNCZzRVricDqQ12Ov/wkfQxtV/r3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVaISq3FMu/4yPzoy6EnhOMcS8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDFhOGU1ZjYtMDBkMS0z MTBjLTk4MjYtNTRlZTBlZWExNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRw7WK9ziVQ1RDvI6JdSF8JstdsL0919PXKn0U1xZ/h/+SKupbiXQJq 51aMk8Mi5hDCJ4vuezntQ9FE5zqD6VKYfbryKuAoNgzUPFRQ2Tj46+g97lBk+21L 0K2CKmSc9y6JxEW8/gms2e178o8D/+5zQxg0VkxK6Ac7F0zgS8/N+C9g4VcIZwqP w0bxvoO7V29bA7OYIXKHnydVm0N0kYQ9Pe3c2bjJgV0iQWvpKPFZp4OS54O8moVw Wy2su/iY5qTA2s/YzrdjSHyHXUm02NoUXm30PEi8JWn0Rl7BAB7q4VtFac7UQQLf 4cOp/bmQDaulfINzqWBHcnvCen2pYF4= -----END CERTIFICATE-----Generated at Mon Jul 13 07:23:12 2026 by rpki-client