$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04284a45-ba49-39fb-8df7-0db25a542afb.roa File: 04284a45-ba49-39fb-8df7-0db25a542afb.roa (raw, json) Hash identifier: pvGflaxLX+vfnHBid7h0HC1fcUdaGZDVsLZW1TPePXQ= Subject key identifier: 3F:4E:DC:13:83:1B:FD:32:73:61:8D:C9:2D:73:BF:A5:3A:60:7F:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E09E83DE3B4E8C0EF000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04284a45-ba49-39fb-8df7-0db25a542afb.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 40.136.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e0:9e:83:de:3b:4e:8c:0e:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=b26d69b5-2568-4ca2-a9bc-45e756a71452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dd:4d:6e:34:81:db:99:7b:2c:5a:5e:da:b0: b4:6e:ee:9c:31:ff:72:44:b6:98:c0:48:1c:c2:a0: 58:3f:93:e1:ae:68:04:b1:7f:2d:b5:fa:e8:43:b3: 01:4c:2e:93:79:8f:e1:65:55:0f:86:28:2c:a6:77: 34:57:e2:2d:45:3a:73:c6:93:4c:ea:ce:a1:38:d1: 57:97:8e:4f:2a:a2:9b:98:d5:1a:dd:aa:2e:a9:c4: 95:47:cd:b9:08:c0:43:e5:73:9c:24:e6:0a:b5:93: ab:a3:e1:c5:07:e4:45:28:e8:e1:bf:02:f9:36:b3: 06:14:d4:68:f8:9d:41:47:5e:e2:ed:9a:d6:3b:c7: 28:6a:66:ef:35:0f:87:cb:04:ca:08:41:f3:2c:18: 77:de:48:74:0d:fe:46:67:db:75:00:f1:0f:73:21: 40:d8:91:45:fb:d2:f8:32:28:fc:fa:12:83:77:7d: 01:cd:86:5c:f6:02:5f:f6:c5:05:12:21:0d:d5:c6: 9e:23:46:72:ba:65:c7:02:76:33:eb:a1:f4:33:52: b1:65:a7:be:51:68:95:d1:53:87:d8:f6:71:ea:df: 5b:f7:11:f4:38:18:f8:21:45:77:1a:43:25:82:33: 93:9f:16:0d:e5:6e:74:d7:9c:b4:63:fd:7b:a8:f4: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4E:DC:13:83:1B:FD:32:73:61:8D:C9:2D:73:BF:A5:3A:60:7F:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/04284a45-ba49-39fb-8df7-0db25a542afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:a3:94:37:0f:12:41:62:59:34:5a:73:a4:e5:31:e0:25:45: 5c:6c:17:3b:bc:9a:5c:a1:27:e4:e9:b5:1e:ba:1b:52:7a:2b: 10:c9:dc:46:c0:92:bc:bc:26:1c:10:2a:6f:7c:b9:3e:eb:5f: ff:9a:5d:83:53:ce:0d:d3:78:46:81:09:a3:a2:64:d6:85:38: 43:42:e0:7d:28:41:82:be:09:22:8a:cc:39:73:01:5e:55:bf: e6:b9:23:44:43:18:32:a5:9d:2b:8d:6a:7f:ad:94:c4:d2:ec: 57:4b:5a:d6:b5:99:b1:1c:be:47:b1:98:0a:bd:59:b5:4b:7d: a4:46:f4:28:90:6a:7c:d0:4b:62:83:b3:48:3a:87:03:ff:44: 14:08:e2:39:94:b6:9f:6c:68:c1:97:c8:df:6e:9e:e7:86:4d: c6:0d:d7:f1:a5:c5:24:3e:20:10:87:7e:26:3a:cf:e3:29:93: 94:24:8b:42:c4:9a:ac:ce:57:f6:09:fe:be:b2:c9:ba:fc:81: f7:a3:0f:52:5c:aa:9c:ea:55:b5:d8:11:43:8d:b2:a6:d0:2b: 25:6c:fa:a4:74:9b:22:de:29:df:78:dd:2e:72:4f:fa:15:d9: b2:d3:6c:2e:e3:2c:19:43:22:ac:b7:55:e4:01:cc:17:3d:31: 42:12:4e:18 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6yseCeg947TowO8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk YjI2ZDY5YjUtMjU2OC00Y2EyLWE5YmMtNDVlNzU2YTcxNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN1NbjSB25l7LFpe2rC0bu6cMf9yRLaYwEgc wqBYP5PhrmgEsX8ttfroQ7MBTC6TeY/hZVUPhigspnc0V+ItRTpzxpNM6s6hONFX l45PKqKbmNUa3aouqcSVR825CMBD5XOcJOYKtZOro+HFB+RFKOjhvwL5NrMGFNRo +J1BR17i7ZrWO8coambvNQ+HywTKCEHzLBh33kh0Df5GZ9t1APEPcyFA2JFF+9L4 Mij8+hKDd30BzYZc9gJf9sUFEiEN1caeI0ZyumXHAnYz66H0M1KxZae+UWiV0VOH 2PZx6t9b9xH0OBj4IUV3GkMlgjOTnxYN5W5015y0Y/17qPQS6QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFD9O3BODG/0yc2GNyS1zv6U6YH8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQyODRhNDUtYmE0OS0z OWZiLThkZjctMGRiMjVhNTQyYWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBKIgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAc6OUNw8SQWJZNFpzpOUx4CVFXGwXO7yaXKEn5Om1HrobUnorEMncRsCS vLwmHBAqb3y5Putf/5pdg1PODdN4RoEJo6Jk1oU4Q0LgfShBgr4JIorMOXMBXlW/ 5rkjREMYMqWdK41qf62UxNLsV0ta1rWZsRy+R7GYCr1ZtUt9pEb0KJBqfNBLYoOz SDqHA/9EFAjiOZS2n2xowZfI326e54ZNxg3X8aXFJD4gEId+JjrP4ymTlCSLQsSa rM5X9gn+vrLJuvyB96MPUlyqnOpVtdgRQ42yptArJWz6pHSbIt4p33jdLnJP+hXZ stNsLuMsGUMirLdV5AHMFz0xQhJOGA== -----END CERTIFICATE-----Generated at Thu Aug 27 12:32:15 2026 by rpki-client