$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2faa07cc-1db6-3283-8aec-82ce46bb6ea7.roa File: 2faa07cc-1db6-3283-8aec-82ce46bb6ea7.roa (raw, json) Hash identifier: eIg3fCI0nkJdvfXa51GbKSog0FPhiQTLdKM7rIV3Y9w= Subject key identifier: 21:EC:DD:B0:67:33:81:A1:A8:29:B8:A8:2D:60:B0:5B:A1:74:8A:4B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1ED21C8BC5C29C1D2B9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2faa07cc-1db6-3283-8aec-82ce46bb6ea7.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 62895 IP address blocks: 40.140.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:ed:21:c8:bc:5c:29:c1:d2:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=990a634c-62ee-4732-bd6b-c8845d4d111d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dc:b2:a4:d3:69:cf:49:c5:55:2c:f9:0b:56: dd:b8:07:36:c7:cf:78:39:28:5b:14:be:1e:af:28: 34:db:5a:40:dc:7f:3a:40:52:96:73:c4:ac:b4:ef: 8d:00:1e:7f:24:1b:7a:70:a9:4e:b8:35:99:b7:01: cb:47:cb:40:a2:47:20:64:d5:7d:b2:d7:5d:82:84: 46:db:0d:a0:3d:51:48:52:b1:ac:22:5f:bf:a4:f8: cd:cd:0f:f6:7b:ba:48:ce:3b:93:80:ef:a2:cd:8f: 1b:8a:65:9b:3f:d8:31:21:31:fc:ac:d5:5c:f5:f2: 5b:92:30:a1:e2:a9:e1:59:d1:fa:81:a2:85:66:46: 16:1f:8f:55:3b:1b:86:82:2f:18:58:d1:c2:f6:a7: 26:e5:b1:a7:6d:68:56:94:18:13:1f:d8:d1:a0:18: 7f:a5:98:d1:81:47:85:f3:c0:0b:cc:7b:12:33:f1: 7c:2f:4a:40:c9:a8:f3:3c:b4:af:ae:f0:f1:ec:e5: 9a:1c:a5:d0:e1:e7:ca:18:24:f5:ad:26:dc:39:da: 94:fc:d6:24:e9:05:5c:27:91:2d:62:30:d5:89:3e: cd:e0:bd:88:2d:c6:93:fb:e3:b0:c2:f2:07:51:97: be:02:4c:8d:dd:f1:bf:4d:1e:2f:4a:a5:d0:2e:ec: 83:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EC:DD:B0:67:33:81:A1:A8:29:B8:A8:2D:60:B0:5B:A1:74:8A:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2faa07cc-1db6-3283-8aec-82ce46bb6ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.140.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:66:05:dd:b7:d2:54:4e:17:16:ea:d8:60:32:f1:0d:83:66: f1:51:56:e3:af:c1:d8:d4:f5:cf:fb:fe:f4:64:a7:2e:70:75: ed:cd:d8:f1:0d:63:2c:41:15:dc:06:59:15:f1:66:3b:83:c4: 67:c5:35:4a:d9:e3:e0:f1:b3:a1:22:5d:c0:f2:9a:63:19:b4: 5b:67:2a:36:a3:4d:26:7f:85:55:ae:9e:46:b2:39:1c:f4:35: e4:57:ba:48:79:ba:9f:f8:a9:1a:95:d7:33:e1:fd:ff:ac:6d: b0:5a:28:0a:69:e2:17:bb:d5:ce:29:f0:21:58:40:21:bd:60: 0d:9b:f7:0e:50:16:85:73:31:c7:4f:06:de:2e:36:74:66:d5: 8b:6b:83:cf:cc:4d:b1:1a:de:5d:ca:e9:10:e8:03:c6:e0:8c: 22:40:84:26:21:77:ce:3a:84:b3:87:09:82:86:6e:e7:03:3b: 55:49:8f:f5:ce:40:25:d0:46:22:75:17:67:f7:b1:07:a5:59: ed:a4:89:9b:1b:b2:f8:82:d6:b6:77:79:f2:6d:b1:85:20:37: da:d0:09:a0:c3:da:54:98:5a:72:73:6f:5c:90:5c:23:52:84: 51:d5:a3:0c:1e:8e:32:ac:e7:2b:f9:9c:73:25:05:15:8d:d4: 70:86:48:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yse0hyLxcKcHSucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk OTkwYTYzNGMtNjJlZS00NzMyLWJkNmItYzg4NDVkNGQxMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdyypNNpz0nFVSz5C1bduAc2x894OShbFL4e ryg021pA3H86QFKWc8SstO+NAB5/JBt6cKlOuDWZtwHLR8tAokcgZNV9stddgoRG 2w2gPVFIUrGsIl+/pPjNzQ/2e7pIzjuTgO+izY8bimWbP9gxITH8rNVc9fJbkjCh 4qnhWdH6gaKFZkYWH49VOxuGgi8YWNHC9qcm5bGnbWhWlBgTH9jRoBh/pZjRgUeF 88ALzHsSM/F8L0pAyajzPLSvrvDx7OWaHKXQ4efKGCT1rSbcOdqU/NYk6QVcJ5Et YjDViT7N4L2ILcaT++OwwvIHUZe+AkyN3fG/TR4vSqXQLuyDgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHs3bBnM4GhqCm4qC1gsFuhdIpLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmZhYTA3Y2MtMWRiNi0z MjgzLThhZWMtODJjZTQ2YmI2ZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9mBd230lROFxbq2GAy8Q2DZvFRVuOvwdjU9c/7/vRkpy5wde3N2PEN YyxBFdwGWRXxZjuDxGfFNUrZ4+Dxs6EiXcDymmMZtFtnKjajTSZ/hVWunkayORz0 NeRXukh5up/4qRqV1zPh/f+sbbBaKApp4he71c4p8CFYQCG9YA2b9w5QFoVzMcdP Bt4uNnRm1Ytrg8/MTbEa3l3K6RDoA8bgjCJAhCYhd846hLOHCYKGbucDO1VJj/XO QCXQRiJ1F2f3sQelWe2kiZsbsviC1rZ3efJtsYUgN9rQCaDD2lSYWnJzb1yQXCNS hFHVowwejjKs5yv5nHMlBRWN1HCGSGw= -----END CERTIFICATE-----Generated at Thu Aug 27 11:29:11 2026 by rpki-client