$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa File: 3bfe9669-f1d3-319b-899b-0dc919583329.roa (raw, json) Hash identifier: KtkX9PQeCj978x/PUukRKcz70ASeCpSYlyZ8pJJ614Y= Subject key identifier: 3A:BD:F0:4C:B3:D1:5C:F6:A1:C7:DE:6D:28:9F:69:39:97:A9:FA:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E0CB88603DF34D512780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 40.142.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e0:cb:88:60:3d:f3:4d:51:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=94056504-cd57-4299-bece-c78f1cad76d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:0d:53:c0:e5:22:c6:88:0a:75:c1:eb:cc: 8a:06:64:2d:61:d9:5c:fd:67:41:22:e4:7a:1c:d0: fc:67:7a:1e:dc:37:87:e8:43:f5:1b:f3:c1:12:a6: fb:3a:1d:c7:6c:51:0f:a0:2f:06:86:ab:f8:e4:0b: 05:fb:32:ce:2f:ff:ca:cc:3d:08:95:4f:5d:e1:91: 84:17:74:ad:48:05:66:e7:0f:e8:af:a5:76:34:2c: cf:e6:05:7f:8b:ad:05:ca:08:c0:35:16:3f:5e:e4: c2:d0:08:f7:65:3c:9d:69:0d:c3:25:b2:6b:82:55: 94:e7:c9:46:3a:a9:b9:d9:61:1c:6f:81:70:cb:70: 46:1b:3e:66:41:ea:b4:2d:6b:b4:1a:7f:4d:d4:1e: da:79:f1:ae:8e:4c:ce:0c:38:e8:9c:e3:f6:e7:d4: 37:68:49:88:0d:e3:64:31:bb:13:0c:5b:66:ff:76: a9:8b:52:2b:dc:d1:ed:28:9f:54:b1:c8:86:33:43: 4a:d5:77:55:5d:e8:93:22:4e:e1:2e:e5:5d:66:90: 1c:de:60:bc:28:72:18:b8:ff:71:18:23:e3:84:e0: 07:2d:c8:d2:49:95:5d:d4:b2:2a:da:14:90:75:77: 8c:ad:9d:45:b8:7c:97:2e:55:47:a5:cd:f7:5b:b2: 0e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BD:F0:4C:B3:D1:5C:F6:A1:C7:DE:6D:28:9F:69:39:97:A9:FA:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:00:df:4c:30:bf:62:4a:5a:84:71:4f:91:2c:cd:67:01:3d: ce:c8:bb:f6:06:7e:a0:03:ac:94:f3:18:76:4c:54:4f:ef:0b: 8f:96:12:50:d8:be:cf:56:75:70:2c:a5:4c:b4:98:76:d2:5f: 20:74:2e:09:72:af:0c:58:e9:f5:cf:e5:68:84:e0:58:4f:af: 4c:9f:49:92:71:81:96:55:21:94:38:4d:37:8c:4c:1d:b6:2f: 4b:37:92:4f:0d:75:de:61:83:17:98:36:04:85:16:9d:72:d1: 07:c6:8b:46:42:6c:e8:b3:ed:5a:8a:9f:d6:24:c0:1e:f3:93: 99:08:b2:36:e3:26:75:01:fa:d0:d4:bd:1c:12:ec:38:39:78: 11:98:32:5d:9f:d7:4b:c4:da:28:6f:c5:8d:08:3d:1b:33:70: 8f:d5:42:43:16:da:63:39:19:fe:cc:7c:f1:16:63:ad:7d:e1: 47:eb:0c:dd:d7:31:ec:a0:fd:46:58:61:2d:61:00:70:85:37: f4:a8:bd:d0:1b:70:72:cd:e7:0d:b2:e7:06:c3:f8:3d:0b:5f: 9f:66:38:67:d9:85:df:e7:01:bc:c7:3f:d9:fa:19:79:1d:df: 71:0e:5d:c5:2a:0e:83:83:d5:05:24:e1:6c:e2:e9:93:e5:44: 3c:53:17:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseDLiGA9801RJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk OTQwNTY1MDQtY2Q1Ny00Mjk5LWJlY2UtYzc4ZjFjYWQ3NmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusANU8DlIsaICnXB68yKBmQtYdlc/WdBIuR6 HND8Z3oe3DeH6EP1G/PBEqb7Oh3HbFEPoC8Ghqv45AsF+zLOL//KzD0IlU9d4ZGE F3StSAVm5w/or6V2NCzP5gV/i60FygjANRY/XuTC0Aj3ZTydaQ3DJbJrglWU58lG Oqm52WEcb4Fwy3BGGz5mQeq0LWu0Gn9N1B7aefGujkzODDjonOP259Q3aEmIDeNk MbsTDFtm/3api1Ir3NHtKJ9UsciGM0NK1XdVXeiTIk7hLuVdZpAc3mC8KHIYuP9x GCPjhOAHLcjSSZVd1LIq2hSQdXeMrZ1FuHyXLlVHpc33W7IOcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq98Eyz0Vz2ocfebSifaTmXqfovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JmZTk2NjktZjFkMy0z MTliLTg5OWItMGRjOTE5NTgzMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAA30wwv2JKWoRxT5EszWcBPc7Iu/YGfqADrJTzGHZMVE/vC4+WElDY vs9WdXAspUy0mHbSXyB0LglyrwxY6fXP5WiE4FhPr0yfSZJxgZZVIZQ4TTeMTB22 L0s3kk8Ndd5hgxeYNgSFFp1y0QfGi0ZCbOiz7VqKn9YkwB7zk5kIsjbjJnUB+tDU vRwS7Dg5eBGYMl2f10vE2ihvxY0IPRszcI/VQkMW2mM5Gf7MfPEWY6194UfrDN3X Meyg/UZYYS1hAHCFN/SovdAbcHLN5w2y5wbD+D0LX59mOGfZhd/nAbzHP9n6GXkd 33EOXcUqDoOD1QUk4Wzi6ZPlRDxTF+I= -----END CERTIFICATE-----Generated at Thu Aug 27 09:49:53 2026 by rpki-client