$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50e08332-a8b7-35ad-8b20-712772d10aad.roa File: 50e08332-a8b7-35ad-8b20-712772d10aad.roa (raw, json) Hash identifier: 4Csj+x5ROU+0VjvOQC2vI1bi81Feh2arlENp6FZzroo= Subject key identifier: DC:5B:FA:8E:D1:C6:BC:00:5C:AB:5D:38:49:E7:0F:6B:29:45:C3:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAE819B67DDC01721BAAD8FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50e08332-a8b7-35ad-8b20-712772d10aad.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 7029 IP address blocks: 40.133.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:9b:67:dd:c0:17:21:ba:ad:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=5b30f04d-a7bc-4f79-985a-7eef0c271be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a9:fd:69:b8:5e:42:7b:32:08:f7:51:0a:a9: 16:fb:65:08:c8:a8:a1:ac:4b:58:19:b0:6f:aa:87: b5:cb:8a:2a:2c:55:c2:01:3a:78:68:e2:d5:72:fb: 05:77:92:2f:69:6d:e9:e2:ff:0f:30:0e:74:ce:31: ad:0c:e0:24:e1:b5:96:44:1e:3b:c2:af:8e:4e:77: fd:ca:fb:96:4e:d4:ff:4e:c7:c0:25:03:50:4d:be: 97:bd:6f:1f:fe:5f:ad:f0:0f:ca:0d:c9:83:d7:e4: 51:25:76:17:2c:f0:cc:05:dc:3c:d3:ad:7d:0d:2e: d4:27:b7:75:4c:3c:26:e7:b7:02:9b:d1:73:54:e7: a0:e7:26:0a:07:f6:c3:ff:ea:57:48:4a:68:91:14: ae:f9:0c:35:15:74:2a:a0:f2:b1:77:d9:3f:cb:72: 6d:33:43:1f:a8:42:22:98:8e:48:38:9c:bd:ef:19: 87:cc:15:ad:75:65:7c:c6:32:33:a8:86:a0:fb:3d: d8:30:f7:6f:80:60:c9:05:9e:38:7e:a0:87:55:f2: d9:3e:74:8b:a7:09:35:04:93:dc:bb:fe:ec:cd:4e: cb:08:54:40:69:45:35:4c:db:51:f4:33:34:5d:c8: 8b:0e:b0:1e:66:cd:42:f0:98:db:3a:52:db:98:73: 64:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5B:FA:8E:D1:C6:BC:00:5C:AB:5D:38:49:E7:0F:6B:29:45:C3:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50e08332-a8b7-35ad-8b20-712772d10aad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.133.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:06:b2:7b:c5:45:54:2e:6e:3e:81:ab:02:26:7b:0d:e4:69: 97:e1:04:d2:16:ce:33:35:76:9f:55:a9:7e:83:0c:80:89:fd: f3:ad:39:b1:02:56:41:81:f8:4f:4e:fc:ce:a8:95:2e:78:6d: 49:0e:0c:7a:61:df:56:92:32:85:f4:ad:12:32:88:c7:1c:32: d5:ea:d6:f7:10:33:fd:ac:de:6d:52:7f:71:e3:26:15:dd:49: 19:8f:90:2f:f9:ed:a2:d2:78:ec:0d:9d:de:81:0b:ac:2a:59: 7e:5e:b5:5b:5d:73:e0:46:42:9e:25:5e:51:ea:16:49:c4:4d: 07:af:d4:f4:48:36:b0:48:a2:be:80:a7:47:ec:1e:51:36:7d: 7b:50:95:36:ef:ec:7c:7a:cd:43:f1:7e:a8:85:05:fe:d5:50: 13:c8:9d:2a:40:bc:d2:a1:bf:0e:fa:ad:2c:19:a5:29:60:fb: 3f:9e:95:92:42:2b:f8:89:45:b2:76:f2:03:88:56:82:93:da: 81:d0:49:09:93:92:c5:76:f1:59:c6:ba:d4:df:48:db:68:0e: 26:90:2b:c2:4b:1f:b3:93:9c:d6:78:6b:9d:c0:0a:6b:85:01: 48:b6:75:4a:09:a5:b6:6a:f9:4c:5d:17:45:ee:5e:5f:69:29: 23:e0:2e:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZtn3cAXIbqtj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk NWIzMGYwNGQtYTdiYy00Zjc5LTk4NWEtN2VlZjBjMjcxYmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Kn9abheQnsyCPdRCqkW+2UIyKihrEtYGbBv qoe1y4oqLFXCATp4aOLVcvsFd5IvaW3p4v8PMA50zjGtDOAk4bWWRB47wq+OTnf9 yvuWTtT/TsfAJQNQTb6XvW8f/l+t8A/KDcmD1+RRJXYXLPDMBdw80619DS7UJ7d1 TDwm57cCm9FzVOeg5yYKB/bD/+pXSEpokRSu+Qw1FXQqoPKxd9k/y3JtM0MfqEIi mI5IOJy97xmHzBWtdWV8xjIzqIag+z3YMPdvgGDJBZ44fqCHVfLZPnSLpwk1BJPc u/7szU7LCFRAaUU1TNtR9DM0XciLDrAeZs1C8JjbOlLbmHNkqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxb+o7RxrwAXKtdOEnnD2spRcMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTBlMDgzMzItYThiNy0z NWFkLThiMjAtNzEyNzcyZDEwYWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUGsnvFRVQubj6BqwImew3kaZfhBNIWzjM1dp9VqX6DDICJ/fOtObEC VkGB+E9O/M6olS54bUkODHph31aSMoX0rRIyiMccMtXq1vcQM/2s3m1Sf3HjJhXd SRmPkC/57aLSeOwNnd6BC6wqWX5etVtdc+BGQp4lXlHqFknETQev1PRINrBIor6A p0fsHlE2fXtQlTbv7Hx6zUPxfqiFBf7VUBPInSpAvNKhvw76rSwZpSlg+z+elZJC K/iJRbJ28gOIVoKT2oHQSQmTksV28VnGutTfSNtoDiaQK8JLH7OTnNZ4a53ACmuF AUi2dUoJpbZq+UxdF0XuXl9pKSPgLv4= -----END CERTIFICATE-----Generated at Thu Aug 27 11:38:40 2026 by rpki-client