$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b1290a89-ed91-3aef-878d-0910878e2abc.roa File: b1290a89-ed91-3aef-878d-0910878e2abc.roa (raw, json) Hash identifier: 0POniJPm01isRduEmlk1BNaDSgOQbtykYdoL+tb4Al4= Subject key identifier: 46:11:0C:06:11:17:A7:22:65:35:22:A1:3D:EE:A3:19:F1:C2:E5:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1C5BF40DCBCB9326C6B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b1290a89-ed91-3aef-878d-0910878e2abc.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 40.140.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:c5:bf:40:dc:bc:b9:32:6c:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=5177eb4d-c6ca-4233-bb41-243b2be85ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:22:04:af:cd:ac:df:c5:fc:7d:89:e5:2d:16: 13:ad:3f:99:d9:75:5b:99:c9:62:44:67:c8:88:62: 12:bc:5e:e2:a9:20:99:04:af:b9:f7:5d:42:0b:1b: 77:4a:a6:8d:d2:64:8d:fa:1a:a7:84:5d:e8:80:53: 4b:33:7a:9f:6b:22:79:56:85:e8:b4:4d:5c:c8:13: 58:31:b3:a4:f6:a9:b0:83:15:82:76:d9:19:d8:34: a1:5e:10:45:98:fd:2e:cb:44:1c:68:95:3e:93:aa: 61:fa:12:5c:1c:a2:93:0d:2d:10:f8:40:07:c2:96: c4:b8:37:67:ad:03:ed:f7:d6:2c:b2:d2:0e:04:db: 5c:29:53:b1:02:52:d2:14:66:4b:ed:52:40:64:8d: 2c:ca:46:31:50:98:8e:f2:8a:a1:ea:c8:bc:82:f5: ad:54:4f:95:a1:11:98:4d:55:e5:fe:86:e6:51:96: 78:4a:da:25:db:65:0d:3e:ad:ea:39:a2:59:f0:a2: b5:9c:12:0e:17:04:cd:4d:06:6b:21:fe:7b:68:bf: 98:02:85:41:e4:76:c1:52:14:9f:52:f6:1e:3c:b7: 16:e1:97:01:57:fc:17:56:c6:3d:dd:02:42:21:0c: f8:50:2d:c5:78:61:df:96:8a:c1:bd:c7:35:d1:55: 19:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:11:0C:06:11:17:A7:22:65:35:22:A1:3D:EE:A3:19:F1:C2:E5:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b1290a89-ed91-3aef-878d-0910878e2abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.140.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7a:4c:2f:a0:8e:52:e9:a0:43:d3:3d:36:87:bb:91:96:3f: 0c:f6:7b:7e:a4:58:97:95:0a:d2:11:ff:33:8a:1d:17:c3:ae: 41:ad:7a:58:c9:3e:6d:59:68:db:b9:85:ad:e1:f1:0f:11:61: cd:07:22:f3:d4:06:bd:ec:fc:2e:36:d1:52:ab:0d:f4:16:20: 2e:d4:5c:1b:7c:98:2b:78:55:8c:04:11:c7:c9:9e:d8:e4:d4: e4:be:de:20:a1:34:30:0a:41:4b:38:3a:c7:d6:e3:69:83:4b: 94:fc:76:0f:3d:e6:12:6e:75:73:21:68:90:d7:09:8b:0a:8b: c3:1d:9d:36:73:27:f2:b9:2e:d7:2e:96:59:d9:b2:c6:98:53: 25:85:1a:6d:e2:45:7a:31:e8:a5:ec:bd:9a:85:89:a3:47:32: f0:73:e8:93:19:b0:fe:c8:00:81:33:73:2e:5f:ea:ae:61:18: ac:41:e9:79:66:f4:60:db:26:d4:00:25:6c:22:81:ed:e8:af: 9d:4e:64:29:af:b2:e5:25:a4:03:31:82:93:ea:eb:e0:84:d4: 1f:70:37:f1:52:76:e5:0b:13:7d:a5:91:a0:84:c9:97:6c:23: a9:c5:54:13:8a:08:52:6e:b5:2d:17:71:77:b8:dd:c6:6a:72: 50:bf:d4:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yscW/QNy8uTJsa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NTE3N2ViNGQtYzZjYS00MjMzLWJiNDEtMjQzYjJiZTg1YmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniIEr82s38X8fYnlLRYTrT+Z2XVbmcliRGfI iGISvF7iqSCZBK+5911CCxt3SqaN0mSN+hqnhF3ogFNLM3qfayJ5VoXotE1cyBNY MbOk9qmwgxWCdtkZ2DShXhBFmP0uy0QcaJU+k6ph+hJcHKKTDS0Q+EAHwpbEuDdn rQPt99YsstIOBNtcKVOxAlLSFGZL7VJAZI0sykYxUJiO8oqh6si8gvWtVE+VoRGY TVXl/obmUZZ4Stol22UNPq3qOaJZ8KK1nBIOFwTNTQZrIf57aL+YAoVB5HbBUhSf UvYePLcW4ZcBV/wXVsY93QJCIQz4UC3FeGHflorBvcc10VUZ9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYRDAYRF6ciZTUioT3uoxnxwuWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjEyOTBhODktZWQ5MS0z YWVmLTg3OGQtMDkxMDg3OGUyYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKIz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN6TC+gjlLpoEPTPTaHu5GWPwz2e36kWJeVCtIR/zOKHRfDrkGteljJ Pm1ZaNu5ha3h8Q8RYc0HIvPUBr3s/C420VKrDfQWIC7UXBt8mCt4VYwEEcfJntjk 1OS+3iChNDAKQUs4OsfW42mDS5T8dg895hJudXMhaJDXCYsKi8MdnTZzJ/K5Ltcu llnZssaYUyWFGm3iRXox6KXsvZqFiaNHMvBz6JMZsP7IAIEzcy5f6q5hGKxB6Xlm 9GDbJtQAJWwige3or51OZCmvsuUlpAMxgpPq6+CE1B9wN/FSduULE32lkaCEyZds I6nFVBOKCFJutS0XcXe43cZqclC/1IE= -----END CERTIFICATE-----Generated at Thu Aug 27 11:37:50 2026 by rpki-client