$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/654dd9cc-b166-3061-853e-a33f75bc0504.roa File: 654dd9cc-b166-3061-853e-a33f75bc0504.roa (raw, json) Hash identifier: 1jGtPDJUGtg04ApKiT7slqarnacvQCPiMLeWTIpho6g= Subject key identifier: 66:6F:09:1E:DF:AC:7C:1F:0D:E2:C7:7A:DE:11:CC:93:6A:92:50:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BC1DD6A56F9EAB9F238680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/654dd9cc-b166-3061-853e-a33f75bc0504.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 40.133.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:1d:d6:a5:6f:9e:ab:9f:23:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=e88b6fe1-131b-465e-98d1-58f360a05e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:95:5b:c9:0f:28:37:9e:48:0e:27:a7:0d: 43:4f:59:31:7d:ca:19:c9:73:15:ac:87:7d:81:5c: 36:c8:5a:b9:46:23:f8:f6:94:31:05:d3:fb:af:e8: 4b:91:54:4b:41:05:7e:41:4a:8e:d2:44:e1:7f:be: f4:0d:f0:6e:4d:5b:6b:7a:7a:fe:ed:66:3c:f4:99: 13:e5:73:74:77:1b:33:7c:b0:f0:e8:51:56:b5:82: 30:95:93:db:3e:7c:24:8e:27:c6:3e:c6:fa:3b:27: c0:cf:18:18:0f:89:58:df:0a:9c:ab:b7:84:7c:b0: 1d:36:d1:fa:3b:a8:96:a9:16:82:d3:0c:1f:45:d8: e2:d1:16:7c:82:20:1e:3f:fb:15:d6:58:2d:fb:1c: 66:a2:cb:47:80:9d:5d:b9:e0:e6:32:93:39:5d:2b: b8:9a:d3:18:6c:9f:18:e0:0d:2f:dc:b2:06:5f:40: 6f:64:da:d4:a6:e7:78:a0:1a:be:de:8e:b7:19:40: 1c:e1:26:7d:5c:0c:9b:ec:85:12:3e:18:1c:b8:8b: 20:66:eb:d9:e0:78:01:3c:ea:cb:07:02:79:8a:83: 94:bd:bd:a3:a1:f1:be:dc:1f:7f:b8:e5:cc:32:02: 25:4d:c1:6a:54:b5:5a:8f:43:e3:86:d2:3f:33:cb: fc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6F:09:1E:DF:AC:7C:1F:0D:E2:C7:7A:DE:11:CC:93:6A:92:50:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/654dd9cc-b166-3061-853e-a33f75bc0504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.133.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b6:f3:95:7a:e5:76:66:81:c1:5b:5d:f0:6e:9c:09:c4:66: 82:27:d8:10:16:e1:b3:94:2e:f6:df:3d:5a:82:33:fd:20:85: 0c:52:e8:7e:47:30:55:30:8a:ca:14:b4:ad:6f:c0:88:d6:17: 0c:aa:23:1c:c4:b7:c2:5e:a8:1d:72:2e:b4:54:50:0e:ee:a1: 78:30:bc:a3:8e:35:f9:e4:07:2e:8c:de:f6:0d:3f:98:af:2b: ea:cf:fe:5e:34:ed:bc:e8:cb:fd:e0:3e:ed:52:41:0e:35:7c: 3d:7d:38:9d:b6:db:28:4b:04:fd:c8:62:b9:42:cb:b0:7c:70: 98:d0:61:b6:b2:01:25:92:38:9f:b8:fb:cd:34:ea:f4:27:d1: 74:a9:aa:63:84:42:37:27:20:6c:8f:ca:0b:c9:fb:e0:42:89: 7a:02:52:1c:0b:6a:3e:2a:35:0e:ac:2f:e2:fd:9e:b4:b0:a3: 6a:0e:b4:cc:c9:b0:4c:8c:78:24:cc:4f:b1:b4:43:e3:95:39: d0:63:bb:24:ce:cc:31:56:0d:49:4c:c7:ae:9c:46:78:5b:4c: 87:c6:b6:54:f3:8c:f7:32:b7:e1:61:74:93:6d:94:81:2e:04: 36:66:4e:9d:91:d1:fd:85:6e:4e:a9:fc:5c:04:f0:4e:7a:f1: 78:55:cf:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvB3WpW+eq58jhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZTg4YjZmZTEtMTMxYi00NjVlLTk4ZDEtNThmMzYwYTA1ZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbqVW8kPKDeeSA4npw1DT1kxfcoZyXMVrId9 gVw2yFq5RiP49pQxBdP7r+hLkVRLQQV+QUqO0kThf770DfBuTVtrenr+7WY89JkT 5XN0dxszfLDw6FFWtYIwlZPbPnwkjifGPsb6OyfAzxgYD4lY3wqcq7eEfLAdNtH6 O6iWqRaC0wwfRdji0RZ8giAeP/sV1lgt+xxmostHgJ1dueDmMpM5XSu4mtMYbJ8Y 4A0v3LIGX0BvZNrUpud4oBq+3o63GUAc4SZ9XAyb7IUSPhgcuIsgZuvZ4HgBPOrL BwJ5ioOUvb2jofG+3B9/uOXMMgIlTcFqVLVaj0PjhtI/M8v8UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZvCR7frHwfDeLHet4RzJNqklABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjU0ZGQ5Y2MtYjE2Ni0z MDYxLTg1M2UtYTMzZjc1YmMwNTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi285V65XZmgcFbXfBunAnEZoIn2BAW4bOULvbfPVqCM/0ghQxS6H5H MFUwisoUtK1vwIjWFwyqIxzEt8JeqB1yLrRUUA7uoXgwvKOONfnkBy6M3vYNP5iv K+rP/l407bzoy/3gPu1SQQ41fD19OJ222yhLBP3IYrlCy7B8cJjQYbayASWSOJ+4 +8006vQn0XSpqmOEQjcnIGyPygvJ++BCiXoCUhwLaj4qNQ6sL+L9nrSwo2oOtMzJ sEyMeCTMT7G0Q+OVOdBjuyTOzDFWDUlMx66cRnhbTIfGtlTzjPcyt+FhdJNtlIEu BDZmTp2R0f2Fbk6p/FwE8E568XhVz90= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:56 2026 by rpki-client