$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d7ea20-7764-3514-bd6b-25b304f423e7.roa File: a4d7ea20-7764-3514-bd6b-25b304f423e7.roa (raw, json) Hash identifier: l1G0jx8oAG/ViwjcOHeWdQhen6a6bLIGUT/ZNZZD/Ng= Subject key identifier: F0:72:93:E1:B6:05:BF:32:43:99:0E:5E:BA:A3:E0:79:81:75:A0:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E9F3041DAB807A061540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d7ea20-7764-3514-bd6b-25b304f423e7.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7896 IP address blocks: 40.135.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e9:f3:04:1d:ab:80:7a:06:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=ba8b33af-232a-419f-8771-7308b59978b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:db:56:5e:2f:63:32:bd:3c:60:3f:d4:be: 2d:be:19:de:ae:99:71:b6:31:0c:85:c4:73:a8:23: 3a:60:fa:c7:11:9c:f4:43:6f:ec:5d:84:2a:cf:e8: da:01:4e:4d:a1:17:41:26:57:73:68:40:1a:d6:cd: 91:cf:81:81:c6:d9:8b:d7:7a:88:da:2c:97:b8:69: 66:14:ce:84:af:8a:ae:64:f1:9e:1c:f9:65:be:a3: 05:e5:41:44:5d:c8:95:d9:de:a1:5f:08:58:cd:f3: 1f:25:38:d7:68:ea:3e:a0:48:6f:48:b3:d4:78:f2: 8b:a7:e0:99:98:b4:e9:bc:7d:f6:cf:1e:78:0c:0f: 2f:22:9b:72:52:17:f1:fd:fd:c7:7f:c1:5c:2c:54: cc:85:ba:c1:b8:78:c8:0e:cf:19:0e:31:a6:36:40: 92:5e:f3:d9:38:42:8f:23:86:90:00:96:87:d1:b0: da:7a:67:b2:e6:90:3f:53:5a:1d:61:bd:13:b7:50: f3:e3:aa:52:70:d3:89:24:46:74:d0:fb:bd:c1:ef: 3a:56:e1:74:4d:1d:54:76:9e:c1:65:3e:3f:27:35: 17:53:d8:0d:8a:3b:b5:a1:0d:9b:63:e4:60:08:ca: 79:d8:3f:be:61:97:9e:dd:27:2a:90:68:63:db:50: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:72:93:E1:B6:05:BF:32:43:99:0E:5E:BA:A3:E0:79:81:75:A0:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d7ea20-7764-3514-bd6b-25b304f423e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.135.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4f:0f:6a:56:56:45:23:6e:ae:81:b4:5d:38:54:f1:97:0f: e5:dc:3d:a8:5c:78:33:6c:b2:0d:f1:85:eb:f0:fd:ae:5b:d5: 3d:02:11:f6:f8:64:cb:3d:3d:70:bc:95:0a:f4:47:0b:e7:a9: f0:ba:54:ae:32:4a:73:bc:a4:88:50:72:3e:84:50:46:16:85: 45:94:21:49:78:1e:1e:c4:37:24:0d:cb:04:14:55:bb:14:e2: b0:4c:c2:17:06:c9:21:d4:d3:0a:94:8c:d9:83:4a:b5:0a:12: 5c:24:9c:94:4a:1d:ad:39:71:ca:02:9a:cb:9f:d5:aa:e1:cb: b5:1e:b0:f1:a7:55:ba:e7:24:65:3e:ae:2d:61:29:76:ee:ef: be:3f:61:b1:bb:b8:eb:d2:88:f6:92:b9:08:5e:ce:b6:e2:f4: 85:e0:5a:db:14:27:e4:49:74:55:d1:11:df:85:31:18:f4:42: 75:17:61:bc:e9:f0:16:ad:51:a5:ad:5e:5b:3d:67:bd:34:a3: af:ef:92:ed:c7:05:f9:7a:90:c3:5b:4d:5b:60:f4:9f:27:b3: d6:83:d8:55:32:3a:4e:cf:0f:0f:02:e9:a9:5b:44:7b:09:f2: 4f:8c:e3:c2:f1:4c:68:f7:74:75:ab:4d:eb:37:12:f1:71:2b: 59:c1:05:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysenzBB2rgHoGFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk YmE4YjMzYWYtMjMyYS00MTlmLTg3NzEtNzMwOGI1OTk3OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY/bVl4vYzK9PGA/1L4tvhnerplxtjEMhcRz qCM6YPrHEZz0Q2/sXYQqz+jaAU5NoRdBJldzaEAa1s2Rz4GBxtmL13qI2iyXuGlm FM6Er4quZPGeHPllvqMF5UFEXciV2d6hXwhYzfMfJTjXaOo+oEhvSLPUePKLp+CZ mLTpvH32zx54DA8vIptyUhfx/f3Hf8FcLFTMhbrBuHjIDs8ZDjGmNkCSXvPZOEKP I4aQAJaH0bDaemey5pA/U1odYb0Tt1Dz46pScNOJJEZ00Pu9we86VuF0TR1Udp7B ZT4/JzUXU9gNiju1oQ2bY+RgCMp52D++YZee3ScqkGhj21AZmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPByk+G2Bb8yQ5kOXrqj4HmBdaBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTRkN2VhMjAtNzc2NC0z NTE0LWJkNmItMjViMzA0ZjQyM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIcZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5PD2pWVkUjbq6BtF04VPGXD+XcPahceDNssg3xhevw/a5b1T0CEfb4 ZMs9PXC8lQr0RwvnqfC6VK4ySnO8pIhQcj6EUEYWhUWUIUl4Hh7ENyQNywQUVbsU 4rBMwhcGySHU0wqUjNmDSrUKElwknJRKHa05ccoCmsuf1arhy7UesPGnVbrnJGU+ ri1hKXbu774/YbG7uOvSiPaSuQhezrbi9IXgWtsUJ+RJdFXREd+FMRj0QnUXYbzp 8BatUaWtXls9Z700o6/vku3HBfl6kMNbTVtg9J8ns9aD2FUyOk7PDw8C6albRHsJ 8k+M48LxTGj3dHWrTes3EvFxK1nBBVk= -----END CERTIFICATE-----Generated at Thu Aug 27 17:03:18 2026 by rpki-client