$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa File: 1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa (raw, json) Hash identifier: OGKCtfExrIf7JIfFJ1qbvdyRnjGoP0Tmf5+uFg4gcHE= Subject key identifier: 86:AC:3F:B6:F7:62:22:3E:C5:BA:79:B7:31:00:90:FC:47:C4:7F:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BDC7332E81079F39C280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 40.136.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:bd:c7:33:2e:81:07:9f:39:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=4873228a-0435-431b-a77f-8710aec46784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:93:91:98:bc:d8:44:94:b3:59:45:c2:0a: 2c:dc:d9:99:a0:4d:d5:a6:76:07:5c:8e:52:4b:1c: cd:99:9d:6f:47:62:2b:45:48:31:cb:16:7d:07:f6: c9:65:c2:b9:3e:ef:02:1d:f6:e6:6b:aa:60:bd:11: 4d:48:4e:ba:c6:af:97:53:eb:38:8f:d4:16:0f:93: 87:fb:a6:f1:0c:00:8e:2f:91:db:a0:28:9f:df:7b: d4:18:13:32:aa:10:5c:ee:c8:8b:3f:0c:cb:21:dc: d2:8e:36:c9:f1:5b:d7:23:fc:9d:6d:32:d5:19:97: d1:34:23:d5:99:ba:0a:44:69:67:b0:90:53:30:5b: ea:c8:ed:08:44:60:b4:a3:db:9c:73:36:12:94:cb: c0:52:96:35:96:4f:89:99:f9:8d:9c:ff:7e:e0:35: ae:98:e1:ef:cd:36:d0:c5:c3:30:50:11:1a:4f:ba: 90:b1:9d:43:0a:ef:f1:61:70:4a:7c:46:01:39:26: 61:c3:7f:4a:83:f5:9d:b0:7a:95:29:cd:95:bc:f5: 39:2a:7f:45:fa:f1:98:41:50:5b:d7:b9:2f:a8:4e: 6f:53:7a:72:c0:c6:7c:50:77:99:d2:1b:45:29:06: 7f:2f:21:ab:e3:3e:2e:6e:a4:b9:3d:1e:9e:2a:73: 94:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AC:3F:B6:F7:62:22:3E:C5:BA:79:B7:31:00:90:FC:47:C4:7F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ba:64:f3:9f:25:a4:e3:67:1e:9b:5e:9c:da:a4:3b:49:4c: ad:f3:3e:bf:9a:0f:4e:70:20:8f:6c:2f:9a:3c:a2:73:4b:62: 21:f4:ad:86:73:38:2b:66:96:d4:29:4b:21:c9:19:5a:0f:40: 1e:23:5e:31:69:99:63:80:8d:f2:7d:7e:2a:24:8d:2a:01:d8: bf:e5:9e:e4:4d:a6:8b:01:a3:a5:f2:a9:bc:53:bb:6c:0d:79: f0:07:0f:7c:38:1d:aa:09:28:de:d2:e2:8f:46:60:45:35:c1: c8:3d:e8:ad:df:da:be:2f:b1:9e:85:bf:49:61:a1:33:c9:57: 2a:2c:86:3c:4f:d8:11:13:0c:30:ab:cd:2c:17:98:d3:5c:bd: dd:04:33:b4:d1:df:bd:67:3c:af:26:e5:84:c1:f5:f1:b0:83: 1f:1a:0c:a4:f7:e8:70:26:79:43:67:03:a8:bc:a4:6d:e5:0d: 45:79:db:10:35:2b:7c:a7:35:29:98:be:af:54:95:7b:7b:b1: f0:d5:58:3d:5c:54:80:9a:31:00:e8:b9:8b:61:49:42:32:56: 43:38:86:b7:46:76:96:a3:5a:0a:4d:c4:84:27:d5:fe:a0:a4: ff:5c:22:71:28:0b:8b:c2:b4:25:5f:52:75:84:2c:6f:63:d6: 08:9d:9a:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ73HMy6BB585woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NDg3MzIyOGEtMDQzNS00MzFiLWE3N2YtODcxMGFlYzQ2Nzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9qTkZi82ESUs1lFwgos3NmZoE3VpnYHXI5S SxzNmZ1vR2IrRUgxyxZ9B/bJZcK5Pu8CHfbma6pgvRFNSE66xq+XU+s4j9QWD5OH +6bxDACOL5HboCif33vUGBMyqhBc7siLPwzLIdzSjjbJ8VvXI/ydbTLVGZfRNCPV mboKRGlnsJBTMFvqyO0IRGC0o9ucczYSlMvAUpY1lk+JmfmNnP9+4DWumOHvzTbQ xcMwUBEaT7qQsZ1DCu/xYXBKfEYBOSZhw39Kg/WdsHqVKc2VvPU5Kn9F+vGYQVBb 17kvqE5vU3pywMZ8UHeZ0htFKQZ/LyGr4z4ubqS5PR6eKnOUrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIasP7b3YiI+xbp5tzEAkPxHxH++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWE0YjAxNmEtMmNhOC0z ZmY3LWI5ZmEtZTA4NzVhZWFmOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI66ZPOfJaTjZx6bXpzapDtJTK3zPr+aD05wII9sL5o8onNLYiH0rYZz OCtmltQpSyHJGVoPQB4jXjFpmWOAjfJ9fiokjSoB2L/lnuRNposBo6XyqbxTu2wN efAHD3w4HaoJKN7S4o9GYEU1wcg96K3f2r4vsZ6Fv0lhoTPJVyoshjxP2BETDDCr zSwXmNNcvd0EM7TR371nPK8m5YTB9fGwgx8aDKT36HAmeUNnA6i8pG3lDUV52xA1 K3ynNSmYvq9UlXt7sfDVWD1cVICaMQDouYthSUIyVkM4hrdGdpajWgpNxIQn1f6g pP9cInEoC4vCtCVfUnWELG9j1gidmtE= -----END CERTIFICATE-----Generated at Mon Apr 13 13:06:07 2026 by rpki-client