$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/030d9054-3788-368e-bdb2-e988acaf43e2.roa File: 030d9054-3788-368e-bdb2-e988acaf43e2.roa (raw, json) Hash identifier: PTvZsjcDoDtr3XGfbkwDRYv7K2pgHTRXpQJoVAZPbcw= Subject key identifier: 5B:96:D7:09:6E:80:11:AA:BA:43:78:FD:44:3D:9E:B6:83:33:BD:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D72762DDE0C34E2099880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/030d9054-3788-368e-bdb2-e988acaf43e2.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 40.139.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:72:76:2d:de:0c:34:e2:09:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=23b778e1-8551-4168-ac2e-1ff98500d452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3d:3d:ba:01:98:eb:b9:9f:f5:39:57:0a:13: 9e:2b:a7:99:cb:c0:48:bf:1f:1f:ac:cb:e0:1c:67: 13:36:57:de:6f:53:0c:c9:00:5d:5d:07:d3:95:d6: 30:a6:eb:f7:5d:68:c3:14:c2:5f:24:84:89:48:22: 01:ab:5b:32:be:f7:11:e3:93:12:d0:ed:7f:b0:53: 11:c6:30:df:ad:01:e8:e8:57:9e:ae:b9:c3:8c:8a: ac:cd:bc:c1:b1:c5:9e:df:00:fa:aa:a0:42:57:ae: 48:d2:16:4f:ef:d8:aa:6f:73:7d:5c:eb:c0:ae:b0: 06:0f:2f:5d:cd:07:90:8d:62:1a:82:5d:7d:18:ae: c4:17:c6:88:52:09:1b:95:fe:a5:c2:81:17:61:c2: 5c:76:c5:1a:e9:d6:67:3e:4a:06:c3:c4:eb:cc:af: c8:b4:4d:6d:2f:39:bf:4e:32:05:af:a1:96:ec:5a: 86:98:71:20:50:29:90:7d:d9:51:c9:7b:cc:cb:1d: 32:24:8c:2f:73:cc:06:70:79:b6:73:aa:e9:48:48: 5c:6e:d3:ac:c2:5c:5c:fa:49:82:79:85:07:64:b2: 17:18:6e:da:a3:90:bf:3d:4b:0c:b0:70:5b:5a:a3: f4:89:84:9c:f8:5d:6c:08:d1:6e:37:5b:e8:25:8a: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:96:D7:09:6E:80:11:AA:BA:43:78:FD:44:3D:9E:B6:83:33:BD:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/030d9054-3788-368e-bdb2-e988acaf43e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.139.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ed:f5:2e:ba:fd:af:5a:56:43:f5:2b:ad:97:7f:a6:cb:9d: 63:65:19:b1:a2:c6:82:b7:f2:74:91:f1:14:c5:30:16:93:f5: a5:da:51:3c:3d:58:13:14:dd:05:16:7d:69:98:92:04:4c:0f: a6:38:3b:71:22:b6:01:9a:c4:8e:8d:45:63:2c:ad:15:90:f8: 14:bf:52:3c:70:da:a4:f0:02:2c:fe:55:9f:7a:67:a7:0c:5d: 2a:e4:8c:8f:74:04:e7:8c:c7:93:b6:d3:b6:8a:22:97:6c:bb: 5e:22:62:cf:3c:bf:d0:74:36:ec:e0:af:3c:69:10:03:34:89: 71:4d:a2:00:f5:b0:d0:ca:75:93:bb:e5:e1:f1:a7:66:92:2e: a7:12:aa:de:c4:4c:41:07:43:7d:a1:e3:07:de:a0:7a:b7:94: 6f:5a:23:85:50:eb:99:04:9d:fb:5f:3e:06:21:32:47:b2:df: c7:40:0b:57:a6:b6:c7:aa:42:2b:b3:04:a5:f0:8f:a6:50:91: e0:1c:c0:c1:02:b9:fb:4d:ed:48:2d:e9:29:dd:49:b2:db:54: 9b:7c:75:bc:58:58:2f:03:97:35:d2:df:b2:cb:69:9f:80:b7: 8e:48:98:e1:ec:41:d7:cb:1a:6c:be:50:33:7b:33:e4:0b:91: f2:e6:d4:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXJ2Ld4MNOIJmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MjNiNzc4ZTEtODU1MS00MTY4LWFjMmUtMWZmOTg1MDBkNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD09ugGY67mf9TlXChOeK6eZy8BIvx8frMvg HGcTNlfeb1MMyQBdXQfTldYwpuv3XWjDFMJfJISJSCIBq1syvvcR45MS0O1/sFMR xjDfrQHo6FeerrnDjIqszbzBscWe3wD6qqBCV65I0hZP79iqb3N9XOvArrAGDy9d zQeQjWIagl19GK7EF8aIUgkblf6lwoEXYcJcdsUa6dZnPkoGw8TrzK/ItE1tLzm/ TjIFr6GW7FqGmHEgUCmQfdlRyXvMyx0yJIwvc8wGcHm2c6rpSEhcbtOswlxc+kmC eYUHZLIXGG7ao5C/PUsMsHBbWqP0iYSc+F1sCNFuN1voJYovpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuW1wlugBGqukN4/UQ9nraDM713MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDMwZDkwNTQtMzc4OC0z NjhlLWJkYjItZTk4OGFjYWY0M2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIvRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjt9S66/a9aVkP1K62Xf6bLnWNlGbGixoK38nSR8RTFMBaT9aXaUTw9 WBMU3QUWfWmYkgRMD6Y4O3EitgGaxI6NRWMsrRWQ+BS/Ujxw2qTwAiz+VZ96Z6cM XSrkjI90BOeMx5O207aKIpdsu14iYs88v9B0NuzgrzxpEAM0iXFNogD1sNDKdZO7 5eHxp2aSLqcSqt7ETEEHQ32h4wfeoHq3lG9aI4VQ65kEnftfPgYhMkey38dAC1em tseqQiuzBKXwj6ZQkeAcwMECuftN7Ugt6SndSbLbVJt8dbxYWC8DlzXS37LLaZ+A t45ImOHsQdfLGmy+UDN7M+QLkfLm1AI= -----END CERTIFICATE-----Generated at Tue Oct 13 22:48:14 2026 by rpki-client