$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa File: 1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa (raw, json) Hash identifier: Q/SlaoJintdDv20Az+a4b8EYVIddg39oDNaz7rpDZOY= Subject key identifier: A4:53:C7:A4:D2:A1:8D:DD:D1:DC:91:24:7D:B4:51:84:52:6F:FD:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E31CF7B567EF465C3679F0A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 40.136.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:7b:56:7e:f4:65:c3:67:9f:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=c9f8a25a-eb03-48f1-a040-56655f4c189d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:42:e0:95:04:9c:9c:e5:1f:1e:1c:44:43:59: c8:06:a1:69:c9:cf:8b:f0:16:31:f0:07:bf:c0:77: 16:d3:bb:20:ab:c3:d9:39:20:f9:fb:3b:e5:41:eb: d5:67:c8:8c:b8:67:2f:83:6a:d1:10:e5:d6:76:d2: b0:b6:6f:3a:b3:70:33:c7:c9:5a:0b:ff:bc:ae:6b: 9e:73:94:9f:a9:eb:c2:b0:46:7a:5c:fb:46:78:d5: 67:81:9f:23:81:43:91:4c:63:7b:e8:ab:9b:da:37: 30:b3:75:18:9e:6d:8d:2d:7c:cb:06:f7:ef:ab:e1: c9:24:2c:0c:25:42:56:75:d5:d6:73:f2:49:ef:0f: 1b:72:e8:c6:2e:97:1f:c1:5a:ee:ac:ad:02:57:07: 73:52:a6:ec:95:f8:26:d9:18:6e:f4:58:bc:76:44: f4:85:9a:ba:85:25:ef:5f:83:50:11:32:71:57:51: 6c:b3:ab:3e:0a:3d:bc:dd:ef:6f:ff:b6:84:47:d3: ac:29:6f:a7:3b:5d:01:2f:d5:c4:31:84:d9:b2:78: 9e:aa:94:5d:78:48:50:50:45:fb:8f:c0:a3:a1:5a: 08:38:5f:f9:87:12:17:e2:e9:0e:d5:57:7a:8c:1f: fb:6f:14:79:da:ac:eb:ea:5e:9b:e3:25:8e:f0:11: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:53:C7:A4:D2:A1:8D:DD:D1:DC:91:24:7D:B4:51:84:52:6F:FD:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a4b016a-2ca8-3ff7-b9fa-e0875aeaf8ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:89:01:9c:41:54:3b:ab:5c:b3:56:8f:2e:b5:ee:6a:76:08: 21:78:35:c3:a8:18:32:4a:6c:2c:07:8d:75:4d:d8:28:60:4e: e5:c7:29:45:bf:dd:8e:34:b5:bc:3e:03:e1:92:dc:a9:78:eb: 0f:f6:d0:6d:cf:f4:d2:40:36:ce:ed:13:c3:dd:80:a7:1c:fd: 5e:61:fc:16:18:69:ac:bb:13:b8:32:40:ce:6c:e0:a1:a7:7f: 8e:7f:a9:1c:de:2e:e5:27:be:fa:1f:7c:8c:53:35:c2:0d:1c: 57:92:30:e8:6e:f1:ef:8f:e0:a1:09:bd:b8:21:01:42:09:26: bb:69:bc:0d:df:44:07:17:73:88:39:24:d9:2c:30:2c:11:3d: 81:5e:a7:22:6c:f2:ea:5a:4c:09:ce:3c:38:dc:ef:8b:6a:12: b9:21:5f:77:e8:f8:0a:bb:1b:7f:2c:88:84:3b:24:58:71:2d: b9:62:cc:08:fa:47:49:1a:86:d1:72:f9:3f:3a:53:c6:61:33: eb:ea:71:57:44:68:e1:52:35:a1:6b:98:11:94:98:e9:8f:1b: b2:eb:a0:9f:73:cd:92:75:22:ca:9c:05:27:58:ac:4a:ca:39: 79:f6:a7:c1:b6:fc:23:3c:ca:f9:7f:4a:a9:b2:de:c1:98:d3: 83:44:28:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz3tWfvRlw2efCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk YzlmOGEyNWEtZWIwMy00OGYxLWEwNDAtNTY2NTVmNGMxODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmULglQScnOUfHhxEQ1nIBqFpyc+L8BYx8Ae/ wHcW07sgq8PZOSD5+zvlQevVZ8iMuGcvg2rREOXWdtKwtm86s3Azx8laC/+8rmue c5SfqevCsEZ6XPtGeNVngZ8jgUORTGN76Kub2jcws3UYnm2NLXzLBvfvq+HJJCwM JUJWddXWc/JJ7w8bcujGLpcfwVrurK0CVwdzUqbslfgm2Rhu9Fi8dkT0hZq6hSXv X4NQETJxV1Fss6s+Cj283e9v/7aER9OsKW+nO10BL9XEMYTZsnieqpRdeEhQUEX7 j8CjoVoIOF/5hxIX4ukO1Vd6jB/7bxR52qzr6l6b4yWO8BFALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRTx6TSoY3d0dyRJH20UYRSb/2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWE0YjAxNmEtMmNhOC0z ZmY3LWI5ZmEtZTA4NzVhZWFmOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeJAZxBVDurXLNWjy617mp2CCF4NcOoGDJKbCwHjXVN2ChgTuXHKUW/ 3Y40tbw+A+GS3Kl46w/20G3P9NJANs7tE8PdgKcc/V5h/BYYaay7E7gyQM5s4KGn f45/qRzeLuUnvvoffIxTNcINHFeSMOhu8e+P4KEJvbghAUIJJrtpvA3fRAcXc4g5 JNksMCwRPYFepyJs8upaTAnOPDjc74tqErkhX3fo+Aq7G38siIQ7JFhxLblizAj6 R0kahtFy+T86U8ZhM+vqcVdEaOFSNaFrmBGUmOmPG7LroJ9zzZJ1IsqcBSdYrErK OXn2p8G2/CM8yvl/Sqmy3sGY04NEKMY= -----END CERTIFICATE-----Generated at Mon Jul 13 05:49:14 2026 by rpki-client