$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa File: 51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa (raw, json) Hash identifier: OcE66OYT9hNVWtzRZ5vaU9Ngz7g2en0ePWWTexiGkTY= Subject key identifier: F6:4E:72:F9:83:2B:0A:42:ED:85:34:BA:C9:ED:3A:75:76:10:2E:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAE819264AD76E87689DE4080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 7029 IP address blocks: 40.136.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:92:64:ad:76:e8:76:89:de:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=2dd3ada5-d198-491e-a8c5-826def37e265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:72:e5:b4:c7:be:47:19:a0:cc:82:3d:6d:8b: 9e:a6:39:05:35:43:99:f6:ec:d2:45:4e:54:71:b2: 3f:a6:3b:c3:c9:39:11:c7:5f:cd:be:22:8a:42:ac: 2a:b8:53:3f:29:3e:1b:1d:62:25:fa:fb:1e:5b:96: cc:0c:1d:cd:0e:dc:43:eb:83:a3:2f:ea:78:c2:7f: ea:57:d8:ff:4c:37:5b:a4:51:29:e7:5b:71:31:93: ff:70:4d:2f:51:37:7b:68:58:88:e2:01:be:31:eb: bb:04:d8:87:b3:c5:ac:95:03:b2:44:77:de:ed:b7: 72:fa:6d:bc:92:6f:1b:29:3b:7c:f8:08:0d:3b:b7: 29:18:68:63:ec:95:31:75:fe:c0:bf:da:23:5f:1f: cf:da:ed:6d:a7:8e:f0:e1:d1:33:2b:39:62:12:de: 4d:61:96:40:54:d5:16:75:85:95:2a:47:02:93:31: e1:3a:98:32:b1:4c:72:99:ef:b4:8c:42:54:ff:de: ea:be:9a:75:42:77:b0:a1:4e:cc:81:52:9c:2b:df: af:d9:3c:29:30:f6:92:a7:f3:e8:4c:c8:bf:2e:7a: d1:45:48:0c:a5:cc:61:25:28:4f:3f:33:26:46:87: 4a:6d:57:07:82:6e:d4:8e:0c:a9:19:4d:a6:45:e4: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4E:72:F9:83:2B:0A:42:ED:85:34:BA:C9:ED:3A:75:76:10:2E:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:28:0f:2b:6c:bf:f4:83:9a:78:90:19:68:a8:62:7e:2f:0b: 02:97:7c:c5:fd:ed:80:b3:82:35:ce:e9:02:f6:04:42:fe:1f: d1:7f:15:1e:c8:b4:7c:11:31:3c:0e:08:6a:0d:9e:ee:4c:9b: 38:f1:67:b4:56:31:73:d7:90:c8:f6:ac:02:51:d8:18:bc:fe: 2f:03:07:12:84:27:2e:bf:20:1d:f1:7c:19:59:23:0f:6e:52: 19:f7:d1:54:d8:6e:0c:e7:64:a6:59:5d:32:a6:2c:71:39:cf: 73:cc:a6:89:7d:06:1e:0e:72:d8:58:a6:98:7e:9e:3c:ed:10: 75:55:a6:79:f6:99:be:75:af:f3:64:b5:a3:19:10:e9:c5:82: 6e:e8:9e:61:f5:7a:42:18:e7:f5:d0:e9:4e:fe:63:55:ef:72: e1:86:13:7f:03:78:5d:ff:22:96:22:62:00:02:70:29:ad:6f: c8:11:56:5c:e0:b7:af:9d:ec:d3:61:9a:0f:d9:27:e8:75:40: 3c:22:b1:f5:42:95:8f:58:3e:59:2a:7e:f7:24:11:c3:c9:a5: 6d:d6:5b:95:38:33:37:86:c0:fb:92:89:46:dc:52:11:e5:1b: ba:d9:e7:49:58:c3:ba:48:3d:f9:0c:e8:90:7e:b9:40:c3:a5: a1:0e:f8:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZJkrXbodoneQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk MmRkM2FkYTUtZDE5OC00OTFlLWE4YzUtODI2ZGVmMzdlMjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3LltMe+RxmgzII9bYuepjkFNUOZ9uzSRU5U cbI/pjvDyTkRx1/NviKKQqwquFM/KT4bHWIl+vseW5bMDB3NDtxD64OjL+p4wn/q V9j/TDdbpFEp51txMZP/cE0vUTd7aFiI4gG+Meu7BNiHs8WslQOyRHfe7bdy+m28 km8bKTt8+AgNO7cpGGhj7JUxdf7Av9ojXx/P2u1tp47w4dEzKzliEt5NYZZAVNUW dYWVKkcCkzHhOpgysUxyme+0jEJU/97qvpp1QnewoU7MgVKcK9+v2TwpMPaSp/Po TMi/LnrRRUgMpcxhJShPPzMmRodKbVcHgm7UjgypGU2mReSDPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZOcvmDKwpC7YU0usntOnV2EC7OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTFmYTcwMzYtNWRkMi0z ZjY5LTg2ZmYtN2Q5NTNiOWY2YjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4oDytsv/SDmniQGWioYn4vCwKXfMX97YCzgjXO6QL2BEL+H9F/FR7I tHwRMTwOCGoNnu5MmzjxZ7RWMXPXkMj2rAJR2Bi8/i8DBxKEJy6/IB3xfBlZIw9u Uhn30VTYbgznZKZZXTKmLHE5z3PMpol9Bh4OcthYpph+njztEHVVpnn2mb51r/Nk taMZEOnFgm7onmH1ekIY5/XQ6U7+Y1XvcuGGE38DeF3/IpYiYgACcCmtb8gRVlzg t6+d7NNhmg/ZJ+h1QDwisfVClY9YPlkqfvckEcPJpW3WW5U4MzeGwPuSiUbcUhHl G7rZ50lYw7pIPfkM6JB+uUDDpaEO+CA= -----END CERTIFICATE-----Generated at Thu Aug 27 16:06:59 2026 by rpki-client