$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0808f751-9032-36f2-a1b1-b52cebd3efed.roa File: 0808f751-9032-36f2-a1b1-b52cebd3efed.roa (raw, json) Hash identifier: GVZFinfK86xvYAIutnmWRLgmQPKIOh+PGu3BwbebPTw= Subject key identifier: D2:63:DC:23:C5:7E:96:92:67:6B:72:89:7C:4D:71:3F:F5:04:C4:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1C585CA67A857F4D116C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0808f751-9032-36f2-a1b1-b52cebd3efed.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 40.138.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:c5:85:ca:67:a8:57:f4:d1:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=1ceb153f-0610-4804-ba76-d63e1f9c1465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:22:d1:c3:97:1a:8b:7b:be:b6:f0:ed:94: 0e:8f:28:d3:fa:fa:5e:52:2e:2c:fe:af:20:10:23: 1b:91:c3:e3:a7:8e:a7:8c:77:f5:48:68:a6:85:f6: dc:58:81:ca:4a:f2:8d:a5:7a:07:a8:93:55:20:66: d0:bc:aa:b7:0b:2e:82:a4:a1:56:f8:63:95:6b:a8: 56:71:45:ab:c6:f5:86:53:09:bf:74:6a:c0:98:b1: 85:55:6d:32:f4:ea:55:6d:d2:f7:59:94:92:51:48: 8d:8b:37:b7:49:04:bb:e4:af:df:a2:ff:c9:ae:8a: cd:f6:4a:7e:da:6a:5d:f8:a1:40:eb:79:76:b6:f0: c4:e0:7c:31:b7:5c:77:93:60:20:ae:4b:38:c6:94: d8:e0:76:be:87:ef:c1:e9:62:b1:1d:f3:f2:d9:34: b0:61:aa:d9:4c:a6:cf:56:bc:c4:3f:d1:db:f1:3f: bb:0c:6c:8c:fe:cd:ad:06:81:1a:3b:40:44:34:73: 9c:30:1e:bb:d3:2c:9f:da:0b:aa:a5:29:f4:41:fd: 2e:30:41:69:08:72:da:ee:24:a7:84:6e:e0:58:79: 09:e6:4a:38:58:54:4d:84:80:8b:44:c1:ac:9b:5b: 3b:0b:50:16:3d:a4:76:1d:11:6e:e4:a2:bb:0d:4a: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:63:DC:23:C5:7E:96:92:67:6B:72:89:7C:4D:71:3F:F5:04:C4:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0808f751-9032-36f2-a1b1-b52cebd3efed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:14:09:30:44:a4:bf:e5:0b:ae:22:15:bf:66:fb:48:20:3d: 40:77:3c:27:b3:87:f7:a4:78:8d:56:de:a5:df:ca:19:f6:51: c2:b7:e3:5f:0f:19:51:f4:08:04:a9:20:47:8b:1a:98:35:3a: 30:8e:ba:71:92:4a:07:bf:03:a5:b0:d4:ea:4c:27:65:b3:f6: f8:3e:07:ec:95:1c:49:36:b1:eb:5f:5e:a1:22:a5:ab:2e:1e: 6a:02:ae:60:d2:55:88:12:0e:09:78:8f:09:f4:0c:38:96:e7: 11:ef:11:d2:f4:6d:57:48:b7:2a:a2:ab:07:9e:fe:be:48:95: 42:c6:bf:82:8f:49:bd:1f:4d:9d:c7:17:36:e0:a8:0f:fe:11: 57:74:36:dc:5c:e5:e4:33:29:d7:e9:67:86:24:82:cd:66:90: 85:4a:92:54:89:ff:d2:4b:61:34:45:69:65:19:ba:60:ca:2f: cc:06:17:18:0c:98:3d:61:3c:3c:5c:ad:5d:e8:e8:05:f9:45: 78:49:21:0f:ee:06:bc:04:e8:5f:c7:aa:a2:b7:a6:f2:b2:72: 5d:d2:73:06:f5:45:91:d3:1d:22:cc:5a:52:08:b1:a6:ae:8c: 75:6e:30:13:b4:b5:97:6c:6d:ef:93:8a:72:bc:ae:e0:24:fb: fb:8e:1c:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscWFymeoV/TRFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MWNlYjE1M2YtMDYxMC00ODA0LWJhNzYtZDYzZTFmOWMxNDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuoi0cOXGot7vrbw7ZQOjyjT+vpeUi4s/q8g ECMbkcPjp46njHf1SGimhfbcWIHKSvKNpXoHqJNVIGbQvKq3Cy6CpKFW+GOVa6hW cUWrxvWGUwm/dGrAmLGFVW0y9OpVbdL3WZSSUUiNize3SQS75K/fov/JrorN9kp+ 2mpd+KFA63l2tvDE4Hwxt1x3k2Agrks4xpTY4Ha+h+/B6WKxHfPy2TSwYarZTKbP VrzEP9Hb8T+7DGyM/s2tBoEaO0BENHOcMB670yyf2guqpSn0Qf0uMEFpCHLa7iSn hG7gWHkJ5ko4WFRNhICLRMGsm1s7C1AWPaR2HRFu5KK7DUoKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJj3CPFfpaSZ2tyiXxNcT/1BMRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDgwOGY3NTEtOTAzMi0z NmYyLWExYjEtYjUyY2ViZDNlZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsUCTBEpL/lC64iFb9m+0ggPUB3PCezh/ekeI1W3qXfyhn2UcK3418P GVH0CASpIEeLGpg1OjCOunGSSge/A6Ww1OpMJ2Wz9vg+B+yVHEk2setfXqEipasu HmoCrmDSVYgSDgl4jwn0DDiW5xHvEdL0bVdItyqiqwee/r5IlULGv4KPSb0fTZ3H FzbgqA/+EVd0Ntxc5eQzKdfpZ4Ykgs1mkIVKklSJ/9JLYTRFaWUZumDKL8wGFxgM mD1hPDxcrV3o6AX5RXhJIQ/uBrwE6F/HqqK3pvKycl3Scwb1RZHTHSLMWlIIsaau jHVuMBO0tZdsbe+TinK8ruAk+/uOHBw= -----END CERTIFICATE-----Generated at Thu Aug 27 09:47:05 2026 by rpki-client