$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43d95524-887b-382a-8ae5-3e8ab501b4bd.roa File: 43d95524-887b-382a-8ae5-3e8ab501b4bd.roa (raw, json) Hash identifier: l5YlEfd2e5QNQI+lY+lWjBu78riGe0cAn4LOIVRo/c4= Subject key identifier: 7E:59:1C:CE:FF:61:4A:FC:A2:5B:09:0D:28:5D:B0:75:F7:39:20:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED863B6D3A258161D6B856D60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43d95524-887b-382a-8ae5-3e8ab501b4bd.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 40.138.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:b6:d3:a2:58:16:1d:6b:85:6d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=016041f3-73ed-4bae-886d-4a20f23fca74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:58:f3:57:aa:18:21:32:66:f8:9f:99:dc: cd:85:39:25:1e:9c:b4:b9:f5:50:3c:20:6e:49:ad: b3:43:a5:e4:cf:a9:e1:5d:a1:b4:72:dd:35:22:fb: 63:27:d0:5a:6b:68:ee:d9:4f:b2:c2:7a:49:75:c9: dd:a7:fe:96:e0:f4:f7:41:a6:59:aa:08:e1:bd:23: a2:38:9d:b3:f1:85:23:00:e5:e0:f9:6c:78:0a:9d: e0:7f:3c:d2:bb:c7:98:86:a1:8e:85:b1:42:c0:51: 7c:92:cb:03:64:7b:ad:84:1b:b7:67:89:24:41:e9: 36:19:e7:fe:2c:1d:c3:58:b0:cb:03:eb:4c:1f:d2: 45:c4:23:1a:83:72:ad:08:34:46:ee:b2:6d:f3:47: 7d:89:73:2f:a1:ec:4d:9a:1e:e7:76:90:67:5f:3b: 36:42:e5:6c:ff:bc:d6:3f:7e:22:f9:59:ef:de:68: a9:ea:f7:c9:ec:5f:f5:7d:af:fc:89:38:00:7d:f5: 68:2c:26:02:bc:17:85:95:12:96:4f:04:f1:8d:9a: 11:01:7a:53:11:5c:1b:40:c8:a3:23:d0:8b:11:68: eb:b6:a2:77:5c:8b:61:2d:28:cc:d1:cf:35:70:b3: 53:68:f3:4b:54:19:51:31:b9:3f:d2:e0:a6:71:6f: 58:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:59:1C:CE:FF:61:4A:FC:A2:5B:09:0D:28:5D:B0:75:F7:39:20:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43d95524-887b-382a-8ae5-3e8ab501b4bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:6a:48:95:bf:5b:ca:12:49:68:08:01:76:0b:24:66:1c:16: ad:ad:2b:a1:b0:52:7c:02:81:de:7f:eb:7f:46:51:c7:9d:e1: 05:e0:10:99:84:75:8a:37:5a:29:d9:b0:dc:ab:39:7f:c0:7e: 51:6d:82:20:f1:0f:ef:85:6e:93:18:52:11:8a:24:a3:6c:f2: 80:72:bd:ff:f7:e0:94:a8:17:26:d8:4b:6a:64:09:5d:44:ec: df:17:b1:ca:8d:3e:83:d2:7e:5b:22:fc:8c:cb:42:04:b0:78: 7c:77:36:a2:ef:0c:4d:25:a0:0c:d1:ac:f6:a2:61:82:80:b7: de:4e:43:34:62:11:59:01:4d:5b:21:f9:a1:84:19:eb:40:6b: a1:1e:16:58:2e:9b:86:4e:75:b3:3d:8e:99:87:3a:fb:ff:bc: 85:ea:8b:0b:f4:af:da:f3:f5:6a:89:95:e5:29:ac:a4:38:c4: 3f:7e:4c:d6:eb:c0:11:71:c2:88:2b:1e:f0:20:14:05:57:b5: 57:42:be:be:47:e8:d7:10:b5:be:a5:9f:2e:c9:dd:c1:d8:14: d4:e3:1e:c2:c9:12:10:a6:72:e8:27:13:a0:55:6b:26:29:fd: 74:97:4d:81:60:24:71:8c:5a:3b:af:74:0c:60:e5:48:9e:16: f8:21:18:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY7bTolgWHWuFbWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MDE2MDQxZjMtNzNlZC00YmFlLTg4NmQtNGEyMGYyM2ZjYTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeBY81eqGCEyZvifmdzNhTklHpy0ufVQPCBu Sa2zQ6Xkz6nhXaG0ct01IvtjJ9Baa2ju2U+ywnpJdcndp/6W4PT3QaZZqgjhvSOi OJ2z8YUjAOXg+Wx4Cp3gfzzSu8eYhqGOhbFCwFF8kssDZHuthBu3Z4kkQek2Gef+ LB3DWLDLA+tMH9JFxCMag3KtCDRG7rJt80d9iXMvoexNmh7ndpBnXzs2QuVs/7zW P34i+Vnv3mip6vfJ7F/1fa/8iTgAffVoLCYCvBeFlRKWTwTxjZoRAXpTEVwbQMij I9CLEWjrtqJ3XIthLSjM0c81cLNTaPNLVBlRMbk/0uCmcW9YBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5ZHM7/YUr8olsJDShdsHX3OSCZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDNkOTU1MjQtODg3Yi0z ODJhLThhZTUtM2U4YWI1MDFiNGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5qSJW/W8oSSWgIAXYLJGYcFq2tK6GwUnwCgd5/639GUced4QXgEJmE dYo3WinZsNyrOX/AflFtgiDxD++FbpMYUhGKJKNs8oByvf/34JSoFybYS2pkCV1E 7N8XscqNPoPSflsi/IzLQgSweHx3NqLvDE0loAzRrPaiYYKAt95OQzRiEVkBTVsh +aGEGetAa6EeFlgum4ZOdbM9jpmHOvv/vIXqiwv0r9rz9WqJleUprKQ4xD9+TNbr wBFxwogrHvAgFAVXtVdCvr5H6NcQtb6lny7J3cHYFNTjHsLJEhCmcugnE6BVayYp /XSXTYFgJHGMWjuvdAxg5UieFvghGF8= -----END CERTIFICATE-----Generated at Thu Aug 27 12:32:21 2026 by rpki-client