$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa File: aa969370-7f24-3b6a-8011-acd3cfea4b49.roa (raw, json) Hash identifier: pTui2fSakz1v6fDdgwUsjN1WTxL6DFDbWU7oLVzxtwo= Subject key identifier: 96:20:66:06:55:81:3C:3B:41:CB:50:94:13:1D:98:75:E1:B6:43:BB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E0D6E12FA117D9B3E5A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 40.142.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e0:d6:e1:2f:a1:17:d9:b3:e5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=87b502b9-ed02-4425-b6de-176e4c432ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:1f:44:9c:ec:04:eb:a4:a9:f6:3f:d4:69: 33:a1:9d:e1:44:7a:37:74:d1:20:2d:3e:24:56:e5: da:68:9c:6b:f2:d0:14:a5:de:17:a4:41:d7:0e:ad: 99:47:de:fb:4f:62:9c:ea:df:0d:46:18:f4:e8:0b: 01:b7:35:dd:fe:99:2a:9b:ee:bd:f8:99:fc:a1:dd: b8:3e:ef:00:7f:9a:88:41:1a:45:0a:5f:0f:95:0f: 03:74:d4:78:78:f1:ae:10:07:41:7e:9b:63:fc:c3: e5:57:52:13:bb:17:82:79:b9:9f:92:3a:2b:c1:a3: ff:e8:2d:88:e5:87:ef:98:52:98:59:79:68:b8:06: 78:38:5b:e7:dc:c4:d6:a0:9c:37:e5:98:45:47:5b: fe:77:ad:93:ea:e5:98:04:33:c5:00:97:91:6d:bb: 5c:9a:6e:4d:32:17:f9:0d:c1:bc:3b:1e:22:18:cf: b6:d1:93:26:4d:6a:cd:57:d8:dd:5a:5f:63:4c:c3: d1:75:b8:4e:ce:1a:d5:50:a8:8b:08:98:3e:63:69: d3:30:43:e9:c8:42:86:ea:73:c1:8e:29:67:fb:59: b0:27:b9:e9:1c:a1:ed:b1:fb:f7:6f:05:ef:ba:3d: 3f:eb:c2:30:7e:99:38:59:e9:ca:ec:e3:ed:84:89: e0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:20:66:06:55:81:3C:3B:41:CB:50:94:13:1D:98:75:E1:B6:43:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b9:69:d9:70:27:75:69:d9:d4:7e:89:7b:c9:db:57:23:14: 47:5e:7c:b7:d1:78:73:0d:59:57:18:22:a6:34:99:61:2b:f4: 7c:5e:2e:19:1e:70:14:33:a1:64:e2:44:9e:f8:0a:f5:56:5c: 90:78:4f:05:20:b4:1d:42:78:c9:86:2e:d8:aa:f4:2e:4f:06: 52:4b:04:68:c9:65:e7:9c:11:d4:44:cb:ab:c7:be:7a:3d:ea: b9:6d:e5:24:9d:5e:f4:51:a6:8c:e1:11:a2:1c:ee:06:d5:23: 7a:af:a0:0d:93:18:19:5f:ae:c8:df:8d:18:1c:d8:b4:55:8c: 31:69:5b:54:5a:ac:2f:33:d9:c2:12:e3:bf:54:c9:18:aa:f6: 6a:72:53:19:45:a4:73:1c:55:c5:6f:89:2f:fe:77:cd:74:16: 88:0a:bc:8a:9f:23:33:e4:6a:b9:77:c7:be:f2:ad:e8:97:a6: ef:e3:49:bc:4e:94:af:c9:89:e8:66:0b:7e:2d:26:7a:1e:14: f3:40:15:1b:60:c2:75:da:34:20:cd:88:c4:76:6c:75:13:41: 01:fc:77:f9:11:4d:7a:32:3c:f4:9c:b6:98:25:85:a5:76:aa: 07:41:1c:ea:d2:9c:12:b8:c5:1b:24:72:ee:46:99:cd:af:15: b5:2d:ec:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseDW4S+hF9mz5aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ODdiNTAyYjktZWQwMi00NDI1LWI2ZGUtMTc2ZTRjNDMyYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdAfRJzsBOukqfY/1GkzoZ3hRHo3dNEgLT4k VuXaaJxr8tAUpd4XpEHXDq2ZR977T2Kc6t8NRhj06AsBtzXd/pkqm+69+Jn8od24 Pu8Af5qIQRpFCl8PlQ8DdNR4ePGuEAdBfptj/MPlV1ITuxeCebmfkjorwaP/6C2I 5YfvmFKYWXlouAZ4OFvn3MTWoJw35ZhFR1v+d62T6uWYBDPFAJeRbbtcmm5NMhf5 DcG8Ox4iGM+20ZMmTWrNV9jdWl9jTMPRdbhOzhrVUKiLCJg+Y2nTMEPpyEKG6nPB jiln+1mwJ7npHKHtsfv3bwXvuj0/68Iwfpk4WenK7OPthIngsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYgZgZVgTw7QctQlBMdmHXhtkO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWE5NjkzNzAtN2YyNC0z YjZhLTgwMTEtYWNkM2NmZWE0YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKI6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe5adlwJ3Vp2dR+iXvJ21cjFEdefLfReHMNWVcYIqY0mWEr9HxeLhke cBQzoWTiRJ74CvVWXJB4TwUgtB1CeMmGLtiq9C5PBlJLBGjJZeecEdREy6vHvno9 6rlt5SSdXvRRpozhEaIc7gbVI3qvoA2TGBlfrsjfjRgc2LRVjDFpW1RarC8z2cIS 479UyRiq9mpyUxlFpHMcVcVviS/+d810FogKvIqfIzPkarl3x77yreiXpu/jSbxO lK/JiehmC34tJnoeFPNAFRtgwnXaNCDNiMR2bHUTQQH8d/kRTXoyPPSctpglhaV2 qgdBHOrSnBK4xRskcu5Gmc2vFbUt7HE= -----END CERTIFICATE-----Generated at Thu Aug 27 12:32:40 2026 by rpki-client