$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43d95524-887b-382a-8ae5-3e8ab501b4bd.roa File: 43d95524-887b-382a-8ae5-3e8ab501b4bd.roa (raw, json) Hash identifier: NM/ne5hvlSLvA6X/3QlT+qo2t8X5uOnJnmEQdNgQgRU= Subject key identifier: CA:F8:A7:EF:BD:73:40:07:A3:A6:47:C0:15:B9:24:CA:6E:53:A6:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E3600D72FDCE3B889F905C180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43d95524-887b-382a-8ae5-3e8ab501b4bd.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 7029 IP address blocks: 40.138.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:00:d7:2f:dc:e3:b8:89:f9:05:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=842a0b59-81ad-4898-8b6b-e414506bc8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:46:c0:56:8c:47:2a:0b:4c:fb:d2:61:70:d8: b3:2a:cd:8c:56:9f:cb:96:18:f9:4a:ed:9b:ab:ce: 2a:ce:b7:6f:30:e9:41:ac:8d:1c:11:cc:ad:4c:4f: 81:6c:2b:fb:81:ce:99:24:c9:89:12:1c:7c:82:ff: 8e:49:1a:7b:65:33:35:89:4b:b6:e0:7b:7d:d6:67: ac:a9:e6:8b:49:e0:d7:d6:17:9d:ab:39:7e:c1:ee: e3:c5:af:25:e6:d4:a2:73:1d:03:e2:0f:c8:74:a5: ae:67:61:21:56:55:80:33:fb:7b:b4:ce:5d:e6:41: c1:48:4f:1b:33:6f:b8:3c:e3:39:c5:89:cb:0d:98: 93:35:cd:46:18:9e:1e:e0:82:84:1e:d6:9e:9e:96: b7:e9:26:bf:14:39:e1:f8:a6:96:1a:f4:85:17:3c: 13:19:94:82:6c:34:b2:36:e9:ea:58:84:a6:40:a4: 5e:98:26:4d:2b:1b:3d:d7:ce:56:98:32:f6:da:0b: 48:a4:e8:24:74:f8:15:2e:59:83:71:15:87:33:2d: 27:2c:37:fd:cd:e9:c7:48:27:66:26:50:32:30:2f: 4e:7c:fa:2a:e9:c1:d1:5d:3d:c3:9e:60:3e:80:f8: 17:9c:e8:b1:9b:7c:21:42:51:2b:15:62:1a:18:11: b0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F8:A7:EF:BD:73:40:07:A3:A6:47:C0:15:B9:24:CA:6E:53:A6:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43d95524-887b-382a-8ae5-3e8ab501b4bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b0:d3:f9:d4:65:c5:84:a9:e0:1d:4f:ae:c0:9e:8d:0d:79: 29:bb:40:d1:24:b8:fd:ae:ee:60:4a:74:40:31:76:e5:2f:47: 68:96:87:e0:16:73:aa:d1:3c:11:cc:2e:6a:d9:f5:ef:32:f2: 50:f6:cf:5c:42:9a:ea:69:50:a6:89:88:bb:1e:a0:4c:e8:92: 8e:3b:5e:e6:20:73:30:6c:15:dd:06:62:46:ea:c6:81:00:bf: 22:1b:fd:6e:98:15:32:22:50:7a:2c:92:21:f7:ae:e1:54:03: ba:05:6b:35:fd:bd:11:0a:38:1c:ae:f6:87:7c:db:3a:55:ac: 20:9c:74:b9:09:93:b3:07:a6:54:20:d9:e2:c5:9d:25:d5:88: a1:3f:c0:4a:49:ae:33:64:ec:af:fc:99:58:87:1e:27:c6:78: a8:ff:57:4b:72:78:af:18:35:cc:8d:d2:51:97:33:42:ab:df: 37:4c:96:62:78:59:a2:67:67:fd:8e:aa:94:ca:56:a5:d4:fe: 2c:a4:10:39:90:2d:f1:f7:50:59:1d:e1:ab:2a:10:e0:6c:9a: b2:d6:f6:73:48:f4:64:af:4b:89:cd:41:9a:31:fe:45:48:26: 75:8c:87:d3:b9:52:1f:8e:4a:bd:40:a4:1e:59:c8:29:6c:d9: 14:7a:49:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42ANcv3OO4ifkFwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk ODQyYTBiNTktODFhZC00ODk4LThiNmItZTQxNDUwNmJjOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0bAVoxHKgtM+9JhcNizKs2MVp/Llhj5Su2b q84qzrdvMOlBrI0cEcytTE+BbCv7gc6ZJMmJEhx8gv+OSRp7ZTM1iUu24Ht91mes qeaLSeDX1hedqzl+we7jxa8l5tSicx0D4g/IdKWuZ2EhVlWAM/t7tM5d5kHBSE8b M2+4POM5xYnLDZiTNc1GGJ4e4IKEHtaenpa36Sa/FDnh+KaWGvSFFzwTGZSCbDSy NunqWISmQKRemCZNKxs9185WmDL22gtIpOgkdPgVLlmDcRWHMy0nLDf9zenHSCdm JlAyMC9OfPoq6cHRXT3DnmA+gPgXnOixm3whQlErFWIaGBGwawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr4p++9c0AHo6ZHwBW5JMpuU6ZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDNkOTU1MjQtODg3Yi0z ODJhLThhZTUtM2U4YWI1MDFiNGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWw0/nUZcWEqeAdT67Ano0NeSm7QNEkuP2u7mBKdEAxduUvR2iWh+AW c6rRPBHMLmrZ9e8y8lD2z1xCmuppUKaJiLseoEzoko47XuYgczBsFd0GYkbqxoEA vyIb/W6YFTIiUHoskiH3ruFUA7oFazX9vREKOByu9od82zpVrCCcdLkJk7MHplQg 2eLFnSXViKE/wEpJrjNk7K/8mViHHifGeKj/V0tyeK8YNcyN0lGXM0Kr3zdMlmJ4 WaJnZ/2OqpTKVqXU/iykEDmQLfH3UFkd4asqEOBsmrLW9nNI9GSvS4nNQZox/kVI JnWMh9O5Uh+OSr1ApB5ZyCls2RR6SXA= -----END CERTIFICATE-----Generated at Mon Jul 13 05:56:52 2026 by rpki-client