$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa File: 01a8e5f6-00d1-310c-9826-54ee0eea151a.roa (raw, json) Hash identifier: +oZ6F31rwyPQ54Z7HF2cGY5zdjgS7YjeU8B5lXnz2lg= Subject key identifier: DC:93:48:5A:94:24:2F:E8:9F:39:64:54:FD:96:01:08:D2:F5:A7:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584C9EFC7C2C63416DF340DDD448 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 7029 IP address blocks: 40.136.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:7c:2c:63:41:6d:f3:40:dd:d4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=b9f2a227-0022-4fe9-a250-3e4a7195f876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:48:d2:69:8c:81:f7:d3:24:d5:12:d1:38:2a: 15:dd:61:8c:2d:5f:ed:ff:f6:b2:af:f1:40:68:5c: 45:b7:6f:12:ee:62:91:bc:42:95:a3:7e:ac:02:d8: 5a:a5:9a:fd:fd:c1:12:2a:e8:6f:3e:04:40:54:2a: 39:93:05:7b:cb:bc:87:59:02:d9:61:dc:37:89:6a: d6:45:e1:ee:28:3e:e3:1e:ed:6c:85:9b:2d:bf:dc: e8:8a:b8:15:9c:d3:4f:f3:eb:fe:3c:98:79:4b:37: a9:27:58:98:5f:0b:42:f8:9a:ed:c1:47:81:77:55: 90:eb:d2:bc:7e:9c:95:86:6e:a4:db:1c:1f:6e:b4: da:c4:3e:d7:54:7e:43:13:0d:9f:42:76:6c:a7:ee: f2:91:60:2b:cc:af:1f:d9:66:8d:12:7e:df:c4:23: 75:82:c8:2f:cb:fa:e4:91:46:ad:0f:7d:92:fa:76: 22:d3:57:76:bf:8d:1b:f5:d4:a2:85:10:64:ee:df: ed:01:5d:c6:2b:b6:bc:2a:f8:67:0b:b4:bc:a9:44: 2b:52:b7:c2:4f:d9:03:33:6d:79:94:1b:6b:90:a3: 2c:e4:9c:05:1a:50:32:33:a9:b8:f4:0d:35:a6:07: ac:e2:3a:e9:88:e8:8e:34:6c:4d:87:f3:85:2a:1b: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:93:48:5A:94:24:2F:E8:9F:39:64:54:FD:96:01:08:D2:F5:A7:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c2:3e:e2:c0:fd:e0:c8:76:2f:4b:a2:fa:9a:36:92:92:36: df:17:9c:21:72:f6:d9:88:fc:c9:0d:4d:ec:bd:1c:2d:bc:3e: 63:82:65:6e:69:ab:2d:ad:88:cf:37:a5:3a:da:40:ec:f4:c3: db:c3:ca:b7:0b:3c:ea:53:f1:71:4d:3b:4c:fe:6f:c3:83:15: 5c:97:8e:32:0f:50:31:d5:e6:07:8f:f5:57:93:9e:fd:8b:da: 09:4e:69:04:36:61:40:12:e7:98:fd:14:ec:a6:ca:96:b0:f4: cd:d6:78:9e:4a:4a:a8:bc:15:3b:6d:e3:4b:5d:e0:d6:18:09: d4:a4:1f:53:1d:73:ae:96:cf:a4:e5:65:50:87:d9:06:ca:b0: 04:9c:8c:aa:13:74:36:7a:fa:a7:27:d9:4e:c9:c4:af:e3:33: 00:0d:78:77:88:37:54:35:04:2c:59:41:e9:7f:87:15:79:11: e0:14:aa:b1:17:78:57:aa:38:6b:09:49:5e:33:59:a8:f7:3b: 84:03:59:58:c8:71:42:4b:1c:bd:7b:19:df:7e:c1:c3:93:fb: 2e:d6:5f:65:07:df:c2:ec:2b:0e:0b:98:98:1c:98:a2:72:0e: 82:df:fb:24:fd:54:49:03:6f:c1:b5:0f:3e:bd:0e:1f:fe:ec: 2f:1a:fb:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/HwsY0Ft80Dd1EgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk YjlmMmEyMjctMDAyMi00ZmU5LWEyNTAtM2U0YTcxOTVmODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UjSaYyB99Mk1RLROCoV3WGMLV/t//ayr/FA aFxFt28S7mKRvEKVo36sAthapZr9/cESKuhvPgRAVCo5kwV7y7yHWQLZYdw3iWrW ReHuKD7jHu1shZstv9zoirgVnNNP8+v+PJh5SzepJ1iYXwtC+JrtwUeBd1WQ69K8 fpyVhm6k2xwfbrTaxD7XVH5DEw2fQnZsp+7ykWArzK8f2WaNEn7fxCN1gsgvy/rk kUatD32S+nYi01d2v40b9dSihRBk7t/tAV3GK7a8KvhnC7S8qUQrUrfCT9kDM215 lBtrkKMs5JwFGlAyM6m49A01pges4jrpiOiONGxNh/OFKhsR3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyTSFqUJC/onzlkVP2WAQjS9adIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDFhOGU1ZjYtMDBkMS0z MTBjLTk4MjYtNTRlZTBlZWExNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfCPuLA/eDIdi9LovqaNpKSNt8XnCFy9tmI/MkNTey9HC28PmOCZW5p qy2tiM83pTraQOz0w9vDyrcLPOpT8XFNO0z+b8ODFVyXjjIPUDHV5geP9VeTnv2L 2glOaQQ2YUAS55j9FOymypaw9M3WeJ5KSqi8FTtt40td4NYYCdSkH1Mdc66Wz6Tl ZVCH2QbKsAScjKoTdDZ6+qcn2U7JxK/jMwANeHeIN1Q1BCxZQel/hxV5EeAUqrEX eFeqOGsJSV4zWaj3O4QDWVjIcUJLHL17Gd9+wcOT+y7WX2UH38LsKw4LmJgcmKJy DoLf+yT9VEkDb8G1Dz69Dh/+7C8a+zY= -----END CERTIFICATE-----Generated at Thu Feb 26 06:31:43 2026 by rpki-client