$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c61d555-9b3a-3829-8295-220018b2d077.roa File: 0c61d555-9b3a-3829-8295-220018b2d077.roa (raw, json) Hash identifier: 4PcgUgmebgS6FScQsirj4+qmmzEBjD4vmqIPoslwSSU= Subject key identifier: 23:73:C2:77:DE:94:7A:60:7C:2D:22:BF:A7:C9:FC:6D:A9:5D:9B:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED863B6F5D2BA54BD5AF45900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c61d555-9b3a-3829-8295-220018b2d077.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 40.138.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:b6:f5:d2:ba:54:bd:5a:f4:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=511010b9-f688-42c2-86fe-708fe0299330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d4:56:3b:93:e6:68:de:66:e0:c7:bc:0e:27: a7:3b:9e:3d:bd:c9:9e:f1:fc:fe:1d:b3:d3:d7:d5: 0e:99:d7:3d:08:a0:9c:cb:de:98:a2:c8:3d:69:45: e4:0c:50:3c:37:21:ba:85:c4:1e:24:21:ed:64:5c: 39:cd:c5:d5:f9:26:a0:66:c1:4a:4c:17:88:c7:bc: 59:f4:6d:e1:e8:60:0f:54:d3:20:b5:5a:3c:8e:d9: 38:e9:8f:b3:68:fd:17:20:44:8e:ca:bb:99:40:95: 08:23:be:0d:f8:d4:87:b9:87:5f:09:65:53:e8:42: cd:1a:61:18:7b:51:a1:cf:db:08:2c:5c:98:3e:37: 18:bf:92:b1:87:78:68:10:30:3b:4e:cc:0e:dc:48: 76:0f:89:18:c5:7d:4d:8c:96:40:7b:35:5f:6c:e2: 79:ee:e5:02:75:5c:54:ce:35:f2:10:00:14:61:c1: 45:d0:bc:01:ba:26:d4:2b:72:6e:fa:56:a8:fa:f2: 9b:ad:e3:37:31:cf:75:82:da:e1:e8:21:09:f9:23: 9d:86:67:e1:46:9a:f2:b5:48:a4:d9:44:86:8e:80: 0d:ff:f3:13:10:09:fc:64:cb:27:9a:4d:d1:b2:1e: 74:aa:c5:38:99:0d:1c:60:82:e8:f5:cd:74:4b:1e: 55:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:73:C2:77:DE:94:7A:60:7C:2D:22:BF:A7:C9:FC:6D:A9:5D:9B:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c61d555-9b3a-3829-8295-220018b2d077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:8a:95:db:76:de:6c:ae:6f:e3:d6:06:83:ad:fc:53:24:e0: 2c:09:40:fa:29:e3:3b:fb:1d:0a:9f:96:9a:b5:d4:dc:3a:cf: 7f:f6:8f:85:47:28:07:71:19:63:35:40:b0:4f:4a:c7:ef:ac: 97:9b:d5:f4:e2:07:0e:0e:31:c6:cd:15:03:8a:ac:5a:44:fd: 6c:da:b2:02:c4:84:51:99:48:bf:a3:88:ac:ac:35:d9:4b:c9: ad:b1:b8:8d:ba:e8:fb:31:25:64:4a:3f:44:39:5c:7b:55:32: b5:bc:ab:ba:e6:72:f1:7a:e8:fe:e6:dd:f9:72:2c:62:56:f7: 95:54:da:0e:f6:a0:e6:00:a4:38:d6:18:ad:e7:6f:1e:5e:50: 5e:a7:db:c9:c6:69:da:7a:f1:e2:a6:5a:3e:d5:08:2a:3e:4e: db:28:63:dc:f0:ec:df:e9:ed:00:92:5b:ea:f7:c5:01:b2:32: be:cd:9c:80:7d:80:69:b9:24:5a:24:37:fc:b8:bb:5f:96:ea: 96:9d:70:c7:59:ce:30:3f:f3:7f:13:db:4a:fb:71:ac:4d:18: 8a:4d:ef:af:7f:ae:b3:8a:0e:a7:5d:4e:66:be:a4:20:a0:e6: 28:e0:fb:74:1c:cf:1c:2b:40:f5:b3:80:2c:d8:35:e9:29:ef: d9:3f:58:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY7b10rpUvVr0WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NTExMDEwYjktZjY4OC00MmMyLTg2ZmUtNzA4ZmUwMjk5MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9RWO5PmaN5m4Me8DienO549vcme8fz+HbPT 19UOmdc9CKCcy96Yosg9aUXkDFA8NyG6hcQeJCHtZFw5zcXV+SagZsFKTBeIx7xZ 9G3h6GAPVNMgtVo8jtk46Y+zaP0XIESOyruZQJUII74N+NSHuYdfCWVT6ELNGmEY e1Ghz9sILFyYPjcYv5Kxh3hoEDA7TswO3Eh2D4kYxX1NjJZAezVfbOJ57uUCdVxU zjXyEAAUYcFF0LwBuibUK3Ju+lao+vKbreM3Mc91gtrh6CEJ+SOdhmfhRprytUik 2USGjoAN//MTEAn8ZMsnmk3Rsh50qsU4mQ0cYILo9c10Sx5VswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNzwnfelHpgfC0iv6fJ/G2pXZvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGM2MWQ1NTUtOWIzYS0z ODI5LTgyOTUtMjIwMDE4YjJkMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIo7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2Kldt23myub+PWBoOt/FMk4CwJQPop4zv7HQqflpq11Nw6z3/2j4VH KAdxGWM1QLBPSsfvrJeb1fTiBw4OMcbNFQOKrFpE/WzasgLEhFGZSL+jiKysNdlL ya2xuI266PsxJWRKP0Q5XHtVMrW8q7rmcvF66P7m3flyLGJW95VU2g72oOYApDjW GK3nbx5eUF6n28nGadp68eKmWj7VCCo+TtsoY9zw7N/p7QCSW+r3xQGyMr7NnIB9 gGm5JFokN/y4u1+W6padcMdZzjA/838T20r7caxNGIpN769/rrOKDqddTma+pCCg 5ijg+3QczxwrQPWzgCzYNekp79k/WO8= -----END CERTIFICATE-----Generated at Thu Aug 27 11:38:02 2026 by rpki-client