$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b9a44d4-54c8-3092-840c-6fcab6cfad42.roa File: 5b9a44d4-54c8-3092-840c-6fcab6cfad42.roa (raw, json) Hash identifier: ty/huJdJxUzvAudH7h5IB9vnR3Be8cbgPSr+3EpcXi8= Subject key identifier: 9A:32:3E:49:A1:95:E1:9D:0A:79:EB:64:58:81:00:9D:AE:8A:35:F8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E3600D73AB95F41C4D756EDC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b9a44d4-54c8-3092-840c-6fcab6cfad42.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 7029 IP address blocks: 40.138.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:00:d7:3a:b9:5f:41:c4:d7:56:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=54de4ef9-895c-4bbe-80f7-ff8d490200b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:1d:76:f4:8a:8d:df:43:0e:28:67:36:16: 3e:ad:86:81:09:08:54:1f:52:88:73:30:6e:11:eb: 18:1d:e3:e5:04:e1:30:04:3e:5c:19:c4:c5:5a:73: 85:46:42:90:e2:45:f5:e9:ea:0b:61:fd:82:01:3e: db:af:a8:93:c3:19:36:15:5b:20:3a:7f:2d:c6:b3: e0:03:b7:fd:c3:33:05:90:00:ee:01:24:33:1d:3e: 91:d9:e1:8a:1e:30:55:f1:50:32:2c:6f:00:cf:64: 94:da:e7:8d:bf:98:90:24:23:87:b8:56:ad:76:06: 8c:bd:6a:1b:01:48:ea:61:ed:9e:5d:df:71:2d:77: b9:eb:58:86:18:cb:34:65:25:65:d8:6f:d6:14:c9: 70:b9:50:60:c3:9f:e1:f8:4f:7d:56:ee:34:dc:57: bd:22:f7:a3:9a:fb:56:2a:32:01:3f:4e:85:22:2d: a5:d7:34:61:36:2e:c3:9e:aa:be:7c:28:16:25:da: ab:1e:27:b6:51:d9:66:b4:61:72:0e:79:08:c5:60: 58:1f:29:35:e5:6c:23:59:96:9f:b2:b9:75:f2:2d: b7:a7:ad:d9:0d:2c:bc:30:6e:ec:fd:66:20:99:0a: 3d:02:37:8e:c9:74:68:52:01:0c:d6:0d:dd:0b:49: e9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:32:3E:49:A1:95:E1:9D:0A:79:EB:64:58:81:00:9D:AE:8A:35:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b9a44d4-54c8-3092-840c-6fcab6cfad42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:fd:a8:05:c1:37:e0:af:9e:9b:29:3f:ce:02:43:de:53:5c: 42:f8:07:d7:76:8d:08:52:c2:a9:fe:17:33:44:87:b5:cf:6d: 67:83:1e:a5:de:ae:dd:e9:d5:51:04:24:42:1a:0d:f0:8f:2a: e7:ac:2c:21:ed:e1:47:02:99:1a:cb:53:f3:6c:01:97:20:3e: 10:09:c8:ae:ce:f1:00:bc:96:0a:99:e5:34:7a:ec:9e:b5:2d: 14:7b:8f:a7:3d:af:d5:d0:c4:bb:61:c1:84:0c:f3:c0:bc:bf: e6:ce:b1:2f:77:82:fc:ff:f0:cc:e5:af:5a:2a:78:9d:36:9b: 62:50:ef:d1:e0:e0:e0:38:d6:09:7a:46:5a:f9:7a:6d:d5:45: 03:28:00:3a:0d:dd:00:cc:55:53:0b:96:40:27:44:94:df:85: a1:de:37:3c:ce:cb:0c:64:9c:64:20:e6:b9:a3:a2:24:07:66: d0:e6:05:9c:27:39:b9:e5:bf:e1:bb:21:cc:89:36:04:16:62: bd:61:79:35:aa:92:27:5e:06:cd:4f:34:b4:8c:43:29:b8:c9: 6c:4e:f4:17:31:a5:de:db:ed:13:80:dc:76:34:06:f3:fd:b9: 5e:68:6c:03:c5:28:d2:c7:2d:f2:bc:de:55:d5:46:1e:0a:0c: 0c:4c:68:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42ANc6uV9BxNdW7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk NTRkZTRlZjktODk1Yy00YmJlLTgwZjctZmY4ZDQ5MDIwMGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8UddvSKjd9DDihnNhY+rYaBCQhUH1KIczBu EesYHePlBOEwBD5cGcTFWnOFRkKQ4kX16eoLYf2CAT7br6iTwxk2FVsgOn8txrPg A7f9wzMFkADuASQzHT6R2eGKHjBV8VAyLG8Az2SU2ueNv5iQJCOHuFatdgaMvWob AUjqYe2eXd9xLXe561iGGMs0ZSVl2G/WFMlwuVBgw5/h+E99Vu403Fe9IvejmvtW KjIBP06FIi2l1zRhNi7Dnqq+fCgWJdqrHie2UdlmtGFyDnkIxWBYHyk15WwjWZaf srl18i23p63ZDSy8MG7s/WYgmQo9AjeOyXRoUgEM1g3dC0npcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoyPkmhleGdCnnrZFiBAJ2uijX4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWI5YTQ0ZDQtNTRjOC0z MDkyLTg0MGMtNmZjYWI2Y2ZhZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKIo4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT9qAXBN+CvnpspP84CQ95TXEL4B9d2jQhSwqn+FzNEh7XPbWeDHqXe rt3p1VEEJEIaDfCPKuesLCHt4UcCmRrLU/NsAZcgPhAJyK7O8QC8lgqZ5TR67J61 LRR7j6c9r9XQxLthwYQM88C8v+bOsS93gvz/8Mzlr1oqeJ02m2JQ79Hg4OA41gl6 Rlr5em3VRQMoADoN3QDMVVMLlkAnRJTfhaHeNzzOywxknGQg5rmjoiQHZtDmBZwn Obnlv+G7IcyJNgQWYr1heTWqkideBs1PNLSMQym4yWxO9Bcxpd7b7ROA3HY0BvP9 uV5obAPFKNLHLfK83lXVRh4KDAxMaEc= -----END CERTIFICATE-----Generated at Mon Jul 13 05:54:37 2026 by rpki-client