$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53cce2d4-8960-3a07-953b-6c289ddfd81e.roa File: 53cce2d4-8960-3a07-953b-6c289ddfd81e.roa (raw, json) Hash identifier: k4NaboMh45gg5siofcjGwxqYEJQBdMFpwA7IRWaOC+c= Subject key identifier: A9:54:CB:30:CA:90:7B:E7:FA:3C:AD:2D:38:7D:8E:13:EC:59:37:0F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA788858E5D5C315B63FAB4C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53cce2d4-8960-3a07-953b-6c289ddfd81e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 40.138.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:85:8e:5d:5c:31:5b:63:fa:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=81209293-0efa-4f4e-9bc2-8e0336b9940c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:29:28:22:95:3d:fc:03:e3:57:cb:22:2c: 61:87:8c:56:f7:5d:bc:d0:66:61:c0:66:7f:dd:41: 13:8c:25:c6:7f:ec:cb:60:22:9c:33:a4:8e:c0:e6: c7:36:17:c5:41:50:3b:bf:d1:6a:ca:0d:35:86:bd: e2:8a:55:b5:97:d2:a4:0b:10:d3:52:17:58:5d:0e: ac:19:9f:a0:4c:ce:63:28:40:77:46:4a:10:c1:b4: 18:dc:13:4a:10:62:03:97:ff:bc:3d:d3:5d:a5:2d: 36:9e:71:3b:3b:52:d2:99:8a:c8:cb:9b:1d:2e:1e: 69:2f:ac:54:66:8d:07:a0:3e:08:34:ff:a8:79:cd: 05:cb:d2:e7:be:f0:23:1f:8a:0f:82:52:d0:97:34: 55:5d:12:96:5a:06:a0:d7:6f:0f:73:3c:24:53:35: 8d:3e:4d:1d:ab:88:e8:c7:db:14:b2:5b:97:09:2d: 53:f6:b0:aa:03:e1:04:ee:36:79:3b:d6:8d:0d:65: 7c:73:67:94:f0:72:90:1a:32:af:99:b6:74:16:36: 70:46:af:5b:18:b0:61:cb:1d:26:6c:64:f3:df:73: 8a:03:e9:6b:4f:ff:4c:ef:b3:b0:40:e1:95:9d:dd: ca:16:09:ed:2b:19:28:9c:1f:dc:72:42:86:1a:d3: 85:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:54:CB:30:CA:90:7B:E7:FA:3C:AD:2D:38:7D:8E:13:EC:59:37:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53cce2d4-8960-3a07-953b-6c289ddfd81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1d:42:14:16:19:8d:7a:24:5e:23:41:3c:26:4f:40:30:3b: c2:5f:21:00:97:e6:15:c5:c7:44:bb:6a:c8:23:8f:b4:b2:2b: 52:f6:86:d1:10:43:c9:f1:c7:1d:b7:a9:3f:fb:51:bd:a6:2f: d7:1d:05:ba:73:a0:2a:6e:dc:a9:fb:63:4e:ee:68:bc:2c:b5: 09:27:26:0f:1d:45:eb:49:eb:72:f5:d0:95:3b:9f:1f:f7:6a: ad:2f:ec:50:5f:ce:4d:27:7a:13:44:fd:c5:a6:95:21:eb:58: 84:cc:46:23:6f:fd:a5:0b:2a:25:a3:cb:2a:19:c5:d0:d6:88: c0:3c:d3:b3:da:81:19:1b:2f:9b:62:c3:dc:0c:01:fb:3a:0e: 43:b5:73:66:5e:ca:d2:1d:66:e3:a6:b4:c9:06:e4:15:79:09: ef:67:d9:6f:0f:17:af:95:00:37:5f:b6:e9:bd:01:9e:c7:60: 86:08:bc:d8:ad:e4:eb:68:33:6f:82:5b:37:3b:be:27:92:71: c2:67:c7:38:e3:22:fe:32:1f:41:10:a9:97:fa:ca:dc:d3:c6: 32:9c:31:e1:e2:4e:ad:63:43:16:2c:2b:e8:83:48:c1:22:77: 54:82:8c:79:f3:dd:56:56:88:db:90:15:06:a2:4c:2d:9f:71: 0b:72:17:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niIWOXVwxW2P6tMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODEyMDkyOTMtMGVmYS00ZjRlLTliYzItOGUwMzM2Yjk5NDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoukpKCKVPfwD41fLIixhh4xW91280GZhwGZ/ 3UETjCXGf+zLYCKcM6SOwObHNhfFQVA7v9Fqyg01hr3iilW1l9KkCxDTUhdYXQ6s GZ+gTM5jKEB3RkoQwbQY3BNKEGIDl/+8PdNdpS02nnE7O1LSmYrIy5sdLh5pL6xU Zo0HoD4INP+oec0Fy9LnvvAjH4oPglLQlzRVXRKWWgag128PczwkUzWNPk0dq4jo x9sUsluXCS1T9rCqA+EE7jZ5O9aNDWV8c2eU8HKQGjKvmbZ0FjZwRq9bGLBhyx0m bGTz33OKA+lrT/9M77OwQOGVnd3KFgntKxkonB/cckKGGtOFDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlUyzDKkHvn+jytLTh9jhPsWTcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTNjY2UyZDQtODk2MC0z YTA3LTk1M2ItNmMyODlkZGZkODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAdQhQWGY16JF4jQTwmT0AwO8JfIQCX5hXFx0S7asgjj7SyK1L2htEQ Q8nxxx23qT/7Ub2mL9cdBbpzoCpu3Kn7Y07uaLwstQknJg8dRetJ63L10JU7nx/3 aq0v7FBfzk0nehNE/cWmlSHrWITMRiNv/aULKiWjyyoZxdDWiMA807PagRkbL5ti w9wMAfs6DkO1c2ZeytIdZuOmtMkG5BV5Ce9n2W8PF6+VADdftum9AZ7HYIYIvNit 5OtoM2+CWzc7vieSccJnxzjjIv4yH0EQqZf6ytzTxjKcMeHiTq1jQxYsK+iDSMEi d1SCjHnz3VZWiNuQFQaiTC2fcQtyF1s= -----END CERTIFICATE-----Generated at Thu Aug 27 12:32:38 2026 by rpki-client