$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa File: 1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa (raw, json) Hash identifier: 9dnMRxJkNHHGw349d4ygkKFmZX/4/WQco/hsJLEH6+I= Subject key identifier: 38:F5:73:73:B0:5C:5C:44:43:F2:4E:1F:BE:A3:D5:8A:C4:B2:68:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED43254A19189AA49DFB9B800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 40.136.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:54:a1:91:89:aa:49:df:b9:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=993e3fcf-8317-408c-9d8c-b594ae48db59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:cc:b9:bf:88:c7:5d:c1:d1:d0:60:8e:5f: 98:1b:dc:ff:1b:39:1a:43:50:84:43:2b:a6:2f:06: 7a:15:83:84:9c:bb:73:10:0d:1e:35:8e:7b:e4:51: 26:df:a6:d4:ec:82:88:a5:f9:e5:07:34:25:ef:80: 3e:1a:3f:0c:7f:88:3b:79:9e:e8:5a:a7:8e:6c:84: a1:5f:09:3f:36:86:1a:b1:14:0f:bf:35:de:91:d2: b8:40:0e:0b:8f:ea:0d:7d:99:e1:aa:1c:a2:97:9a: 73:67:97:83:c3:5d:72:f9:d8:e0:8b:9a:70:58:05: 8a:45:e4:4d:2a:29:3b:4f:b7:05:4f:a8:9b:7f:cb: 0a:6a:23:66:c5:5f:d7:54:dc:3d:18:ad:16:1e:ae: 31:58:61:32:da:86:28:9f:d7:11:c5:9b:d5:76:c9: 92:39:08:96:a6:65:0b:9b:74:1a:b9:ca:2b:21:26: 16:ab:d4:a8:50:b3:d1:5d:04:a4:0b:21:56:fe:81: 63:86:d4:0d:dc:65:93:95:6d:df:34:81:66:92:d3: af:d5:f0:e2:8b:59:ac:63:4e:12:4d:d3:20:20:18: fd:3f:5b:7f:d8:c6:cb:0d:fc:db:10:c4:3b:f3:ee: cc:8e:29:bd:ca:4e:f5:3a:a1:8d:27:8d:9c:0d:4a: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F5:73:73:B0:5C:5C:44:43:F2:4E:1F:BE:A3:D5:8A:C4:B2:68:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e0:e8:3e:88:b2:da:17:f7:70:b0:e1:45:9a:4e:26:c9:0a: c4:9d:38:a2:d3:db:79:ba:cc:8f:90:4f:ec:8a:95:60:63:d3: be:00:db:99:49:7b:6d:2a:50:42:0b:34:0a:17:25:01:7e:10: 1f:2a:b2:e6:01:2c:5d:07:0d:64:3d:65:b9:de:cd:af:95:b7: e0:91:7b:25:d3:1f:2b:b7:f6:1d:21:16:aa:7c:e2:ef:81:85: 3e:66:ca:e9:5d:e4:93:01:6a:e4:fd:46:f0:b1:a7:93:48:c4: d4:85:cd:23:4b:21:8f:de:18:00:1e:d9:6b:16:ef:6a:dc:ed: 96:31:f7:37:0a:7c:2a:11:77:13:03:96:1d:c7:00:16:48:38: 8c:59:b6:e5:d1:1d:c0:26:e6:f4:5e:c4:6a:7d:6d:40:f4:2d: b4:8e:df:15:57:67:10:5b:7d:6b:72:6c:8e:64:d1:87:a1:86: eb:bc:c0:3b:06:4d:1d:63:ef:d5:c2:2f:a6:0a:c2:13:46:21: fa:c5:3c:49:be:02:24:53:b6:99:2d:82:8b:33:a4:dd:73:54: 23:52:05:db:51:19:23:e0:5d:2a:40:4a:2d:fc:2a:ba:53:b7: 80:88:f7:68:ec:6a:44:7f:2f:3d:a4:32:4e:5b:0b:fa:e9:03: d6:2f:7b:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlShkYmqSd+5uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk OTkzZTNmY2YtODMxNy00MDhjLTlkOGMtYjU5NGFlNDhkYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIfMub+Ix13B0dBgjl+YG9z/GzkaQ1CEQyum LwZ6FYOEnLtzEA0eNY575FEm36bU7IKIpfnlBzQl74A+Gj8Mf4g7eZ7oWqeObISh Xwk/NoYasRQPvzXekdK4QA4Lj+oNfZnhqhyil5pzZ5eDw11y+djgi5pwWAWKReRN Kik7T7cFT6ibf8sKaiNmxV/XVNw9GK0WHq4xWGEy2oYon9cRxZvVdsmSOQiWpmUL m3QaucorISYWq9SoULPRXQSkCyFW/oFjhtQN3GWTlW3fNIFmktOv1fDii1msY04S TdMgIBj9P1t/2MbLDfzbEMQ78+7Mjim9yk71OqGNJ42cDUqPuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDj1c3OwXFxEQ/JOH76j1YrEsmi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWE0YjAxNmEtMmNhOC0z ZmY3LWI5ZmEtZTA4NzVhZWFmOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABng6D6IstoX93Cw4UWaTibJCsSdOKLT23m6zI+QT+yKlWBj074A25lJ e20qUEILNAoXJQF+EB8qsuYBLF0HDWQ9Zbneza+Vt+CReyXTHyu39h0hFqp84u+B hT5myuld5JMBauT9RvCxp5NIxNSFzSNLIY/eGAAe2WsW72rc7ZYx9zcKfCoRdxMD lh3HABZIOIxZtuXRHcAm5vRexGp9bUD0LbSO3xVXZxBbfWtybI5k0Yehhuu8wDsG TR1j79XCL6YKwhNGIfrFPEm+AiRTtpktgoszpN1zVCNSBdtRGSPgXSpASi38KrpT t4CI92jsakR/Lz2kMk5bC/rpA9Yve3w= -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:25 2026 by rpki-client