$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf5db4e7-9e35-3484-bf7f-60be06b1bb4e.roa File: bf5db4e7-9e35-3484-bf7f-60be06b1bb4e.roa (raw, json) Hash identifier: LL5uFjoZBDVsGhmAe/cgYNI4QZOgLiRdQM8B/KF23vo= Subject key identifier: 5B:9F:0E:90:87:25:30:9D:58:D7:5D:67:2E:00:AC:CB:A2:81:AB:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED864836A31B6177EB90D6B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf5db4e7-9e35-3484-bf7f-60be06b1bb4e.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 40.134.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:83:6a:31:b6:17:7e:b9:0d:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=ced076a8-f8db-497e-b303-0178703b29ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:9e:4d:e4:f3:e7:04:90:45:bb:c2:cb:27: 3f:8e:20:72:3d:c5:2d:e1:6e:1f:3b:30:5b:e5:4f: 5d:5f:61:a6:92:e8:fd:2e:1f:f0:43:bc:f3:74:c3: 7e:c7:15:c6:cc:e3:7c:95:9e:71:2a:f1:64:82:c4: a3:67:3b:40:fe:95:2c:84:f1:d7:df:db:74:7c:11: 40:60:f3:a9:8b:92:6f:f8:76:68:af:1c:07:73:93: 3b:2a:a3:c7:f3:f9:2e:bf:e0:78:d0:8d:84:5d:15: c3:81:71:73:7e:6a:06:d6:b6:1b:f5:f8:f7:a0:15: 12:33:98:85:17:dd:ed:46:79:b6:4f:46:90:ea:be: d5:bb:72:1f:fb:73:f7:04:a2:53:ff:e8:78:b2:e9: 00:1d:85:40:fb:0a:82:7c:cf:a3:70:b1:85:97:05: 4b:ac:3d:e5:f6:87:3d:52:97:02:51:d7:85:2c:c6: c9:41:6f:b9:fd:fc:c9:c4:9b:42:a2:78:f9:0b:6b: 83:36:17:28:2b:6f:da:5d:05:9e:37:34:6b:c2:06: 45:98:f7:99:51:4a:06:3a:ca:93:7f:11:53:50:4b: 8a:17:f2:5b:d8:91:28:8e:a0:75:8c:5e:2d:58:3d: 57:9a:ff:d8:4f:10:ad:41:77:32:4a:8c:bb:e2:2d: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9F:0E:90:87:25:30:9D:58:D7:5D:67:2E:00:AC:CB:A2:81:AB:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf5db4e7-9e35-3484-bf7f-60be06b1bb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.134.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3d:dd:f5:1c:cf:50:40:11:0c:86:7e:23:16:b4:75:d3:42: 93:6e:8f:e4:5e:94:15:e3:33:54:30:75:d2:a3:87:70:c4:ca: 3a:a7:a2:aa:a6:d3:4c:35:7b:ef:eb:f4:a1:1b:3c:3c:35:db: e4:43:03:b0:67:c8:2a:b0:8a:2d:91:5c:6c:6e:1b:5d:65:cc: 75:73:2d:52:a4:a1:c8:f9:78:b4:2a:01:44:78:7a:78:c2:e4: 99:72:37:b0:a8:52:34:4f:d8:80:ee:24:8f:9b:d0:7d:69:f4: 32:f7:0a:81:b6:0b:72:98:70:c6:c1:99:14:76:46:b8:4a:2b: 0e:d7:3a:be:97:4d:03:6d:53:f0:57:5f:9b:c5:79:7d:28:5a: e3:d9:8e:55:53:ec:86:a7:04:1e:17:38:a5:e4:73:00:c9:2c: 33:51:4c:b0:15:de:2e:60:74:e5:3c:af:ae:41:ab:08:73:3a: ec:c3:81:61:d3:5e:4e:c1:5d:fa:5b:e5:e3:46:01:d0:ee:1d: 72:db:97:85:d9:d8:a9:d4:af:35:6a:64:c2:36:e4:7f:50:bf: 91:ac:1f:5a:76:d1:f4:6d:d2:9b:9e:79:33:73:b6:a5:09:57: 0e:37:cc:04:ee:eb:3a:fd:86:61:90:18:20:3d:1a:52:9e:a5: 4a:3d:65:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZINqMbYXfrkNawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk Y2VkMDc2YTgtZjhkYi00OTdlLWIzMDMtMDE3ODcwM2IyOWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZKeTeTz5wSQRbvCyyc/jiByPcUt4W4fOzBb 5U9dX2Gmkuj9Lh/wQ7zzdMN+xxXGzON8lZ5xKvFkgsSjZztA/pUshPHX39t0fBFA YPOpi5Jv+HZorxwHc5M7KqPH8/kuv+B40I2EXRXDgXFzfmoG1rYb9fj3oBUSM5iF F93tRnm2T0aQ6r7Vu3If+3P3BKJT/+h4sukAHYVA+wqCfM+jcLGFlwVLrD3l9oc9 UpcCUdeFLMbJQW+5/fzJxJtConj5C2uDNhcoK2/aXQWeNzRrwgZFmPeZUUoGOsqT fxFTUEuKF/Jb2JEojqB1jF4tWD1Xmv/YTxCtQXcySoy74i1gNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFufDpCHJTCdWNddZy4ArMuigasNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmY1ZGI0ZTctOWUzNS0z NDg0LWJmN2YtNjBiZTA2YjFiYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKIZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE93fUcz1BAEQyGfiMWtHXTQpNuj+RelBXjM1QwddKjh3DEyjqnoqqm 00w1e+/r9KEbPDw12+RDA7BnyCqwii2RXGxuG11lzHVzLVKkocj5eLQqAUR4enjC 5JlyN7CoUjRP2IDuJI+b0H1p9DL3CoG2C3KYcMbBmRR2RrhKKw7XOr6XTQNtU/BX X5vFeX0oWuPZjlVT7IanBB4XOKXkcwDJLDNRTLAV3i5gdOU8r65BqwhzOuzDgWHT Xk7BXfpb5eNGAdDuHXLbl4XZ2KnUrzVqZMI25H9Qv5GsH1p20fRt0pueeTNztqUJ Vw43zATu6zr9hmGQGCA9GlKepUo9ZXw= -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:20 2026 by rpki-client