$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa File: 757bd253-cf95-3776-a157-b88b50e26f1b.roa (raw, json) Hash identifier: eGx+f9NdEi3FsPKcDSHzmMUlfLQkUFYlu0N+eNpqUDE= Subject key identifier: 88:F0:81:E3:F6:34:E6:F3:B1:10:E3:89:B8:31:D2:D4:2F:2C:BF:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D8D1E2267AF8ED4B1B980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 40.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8d:1e:22:67:af:8e:d4:b1:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d30b5c53-1141-4177-b762-3cb97aa8bac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1b:f9:13:4d:f6:cc:35:cf:d3:db:73:e0:62: 0a:f8:45:3f:9d:34:84:ba:16:e5:78:89:fa:f4:c2: b3:da:95:a1:41:c2:72:2e:1b:9b:07:3a:1f:fb:5d: f5:cd:43:bc:e3:8c:41:48:21:d2:77:31:ef:41:43: 99:88:61:57:15:ef:94:ba:92:b3:5f:b2:22:8e:0a: 46:56:85:f9:f3:ce:a1:9f:65:51:fa:3d:39:10:72: 68:2d:a4:43:06:7b:81:78:53:05:2b:d8:f9:32:d4: 4e:fa:a3:99:39:b1:25:dd:88:b5:92:8a:94:c3:82: c2:3e:fe:cf:bf:44:bb:99:f5:d3:07:85:d6:03:cf: 81:d5:4d:50:2d:e5:b5:00:fa:16:7d:c5:d1:65:b6: c0:37:88:e2:60:60:3c:68:65:72:cd:cf:fb:b7:36: 97:be:e9:16:1f:b7:80:d4:98:a1:b7:33:f5:42:b6: 7a:ef:50:e4:aa:69:63:9d:28:f1:1e:35:7f:7f:44: 0a:b3:4e:cc:72:cd:a0:96:5f:2d:93:05:85:c0:ca: 5e:e5:d1:98:d2:b6:e0:89:84:17:fb:f9:4c:3e:18: 2f:80:c4:40:e7:46:18:7c:dc:9a:fd:4a:ff:2c:1e: c9:42:70:5f:45:13:b7:2e:77:a3:7d:4b:bf:64:54: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F0:81:E3:F6:34:E6:F3:B1:10:E3:89:B8:31:D2:D4:2F:2C:BF:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7d:db:b7:24:8f:0b:c2:d7:ff:25:88:00:30:e9:f9:42:58: 76:a9:59:1a:62:d0:04:22:de:37:05:b5:cb:67:f7:7a:41:40: ab:f3:11:e8:2a:15:06:f8:d6:6b:58:6f:7b:40:b0:eb:69:65: e6:88:36:b1:69:47:6f:67:19:ae:e0:53:ab:1b:d3:78:c1:36: ab:8b:e2:8f:e3:c5:ca:6a:a8:ae:d0:95:8e:0f:6d:76:fb:32: 67:6f:cf:f1:37:6b:06:db:32:e5:38:52:ba:af:b2:17:21:7a: 17:c7:88:91:7d:f6:5c:2c:eb:62:9f:a3:4d:d7:ae:9e:c8:2c: f6:bb:dc:e7:76:9a:78:48:c9:a1:59:8f:df:ca:42:c8:e4:1a: f1:ee:d2:47:c3:2d:ca:5e:0a:9c:a3:4e:9d:a2:9b:9d:38:63: ec:93:b2:e1:38:c1:f2:04:52:c5:b4:f8:82:45:62:b2:d8:94: ec:55:f5:6f:6f:da:24:c1:f4:e9:a2:f9:b1:08:ee:3f:a0:c0: 44:3c:ef:e3:05:db:d4:2d:04:00:ae:ce:c2:d3:79:9c:a3:df: 2a:5e:49:8c:f1:7b:d9:68:4c:7f:8a:73:75:84:a9:12:d2:6d: fa:68:57:4e:d1:c6:c3:3f:43:4e:1a:59:41:0e:28:66:45:ed: 2b:74:d8:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnY0eImevjtSxuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDMwYjVjNTMtMTE0MS00MTc3LWI3NjItM2NiOTdhYThiYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRv5E032zDXP09tz4GIK+EU/nTSEuhbleIn6 9MKz2pWhQcJyLhubBzof+131zUO844xBSCHSdzHvQUOZiGFXFe+UupKzX7IijgpG VoX5886hn2VR+j05EHJoLaRDBnuBeFMFK9j5MtRO+qOZObEl3Yi1koqUw4LCPv7P v0S7mfXTB4XWA8+B1U1QLeW1APoWfcXRZbbAN4jiYGA8aGVyzc/7tzaXvukWH7eA 1JihtzP1QrZ671DkqmljnSjxHjV/f0QKs07Mcs2gll8tkwWFwMpe5dGY0rbgiYQX +/lMPhgvgMRA50YYfNya/Ur/LB7JQnBfRRO3LnejfUu/ZFSIzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjwgeP2NObzsRDjibgx0tQvLL+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzU3YmQyNTMtY2Y5NS0z Nzc2LWExNTctYjg4YjUwZTI2ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV927ckjwvC1/8liAAw6flCWHapWRpi0AQi3jcFtctn93pBQKvzEegq FQb41mtYb3tAsOtpZeaINrFpR29nGa7gU6sb03jBNquL4o/jxcpqqK7QlY4PbXb7 Mmdvz/E3awbbMuU4UrqvshchehfHiJF99lws62Kfo03Xrp7ILPa73Od2mnhIyaFZ j9/KQsjkGvHu0kfDLcpeCpyjTp2im504Y+yTsuE4wfIEUsW0+IJFYrLYlOxV9W9v 2iTB9Omi+bEI7j+gwEQ87+MF29QtBACuzsLTeZyj3ypeSYzxe9loTH+Kc3WEqRLS bfpoV07RxsM/Q04aWUEOKGZF7St02Fs= -----END CERTIFICATE-----Generated at Tue Oct 13 16:05:02 2026 by rpki-client