$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf5db4e7-9e35-3484-bf7f-60be06b1bb4e.roa File: bf5db4e7-9e35-3484-bf7f-60be06b1bb4e.roa (raw, json) Hash identifier: mrP0Z4UKKMZwdYA9wqXfC0ryUZKoIibo3okKmuTF+NM= Subject key identifier: 61:1F:38:0F:D8:FE:4D:E8:3C:10:32:D6:D9:D5:22:B7:97:09:5A:38 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A501F49C99C327AC6DF56C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf5db4e7-9e35-3484-bf7f-60be06b1bb4e.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 40.134.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:1f:49:c9:9c:32:7a:c6:df:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=81f2695a-8dad-434e-8be6-78faa44c458c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:34:a0:74:03:8f:1e:e3:33:88:a3:03:94:cd: b3:e1:6c:ec:2f:af:df:2c:7f:11:df:42:13:bb:4c: e7:92:ec:4f:ef:76:57:04:89:a5:04:5d:5a:65:a9: c2:cd:f7:ed:02:5b:01:df:b2:51:87:ed:6c:cb:07: 29:aa:4e:84:50:49:d2:55:a5:d4:f9:2a:5f:7d:61: f1:08:48:60:ec:f9:b2:de:e6:4b:ac:9b:dc:5e:62: 52:a6:4e:03:8e:70:61:00:d2:4b:18:3a:5f:98:80: 0f:b8:5f:88:98:65:4f:10:ee:43:76:a7:83:48:4b: 27:df:47:91:d7:d2:b2:85:ec:c6:65:71:c0:f9:04: 58:b3:56:c0:1f:61:b5:4b:ce:25:89:93:20:04:c2: 15:a0:41:76:ac:66:1e:fb:f7:56:ed:62:ab:e1:3f: 24:5d:7c:7d:4b:6c:4c:9d:b8:50:94:93:fc:ed:25: f0:78:67:77:f4:fe:51:f9:9b:dc:de:ef:d8:a8:2a: d8:f9:f3:e5:12:1f:c5:a2:5e:fd:3b:3b:98:97:e8: 90:84:55:6a:21:20:43:dc:6d:b3:41:84:c8:97:66: 40:19:7d:8f:c3:8c:c4:7b:94:c5:ca:cb:9b:ca:b3: 7d:6c:5c:c9:b1:9a:64:4d:95:aa:a5:bc:35:fb:58: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1F:38:0F:D8:FE:4D:E8:3C:10:32:D6:D9:D5:22:B7:97:09:5A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf5db4e7-9e35-3484-bf7f-60be06b1bb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.134.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ad:bf:b1:c9:58:bb:2f:00:69:2f:10:ec:2e:5c:3a:c9:67: d9:0b:6c:07:59:9b:2d:c4:79:4c:10:04:aa:ae:aa:e6:f1:8b: 81:10:9a:b8:28:13:83:f8:c2:5f:d7:83:5a:4a:90:ea:c2:a2: 33:a2:09:28:11:85:5b:00:d5:2e:da:48:91:aa:62:e5:ec:d6: 3f:1f:9a:cd:9b:6e:d1:50:31:cd:dd:da:12:3a:ff:6f:1a:f7: 09:5d:9c:60:14:b0:fd:8d:3c:c7:a5:2d:47:c6:56:e3:b2:db: da:e5:1d:7e:7b:34:a5:38:c4:df:79:7a:49:a2:d8:15:e5:44: f9:b3:40:48:d1:4e:27:d0:7f:8e:3b:73:20:01:77:46:1b:52: a4:6e:b8:cb:b5:6d:ff:df:61:e5:dc:d6:df:b8:99:cd:cf:d4: c0:61:86:39:d7:24:7f:e3:5a:a4:a3:26:17:a7:70:20:e3:0b: af:25:99:c7:78:86:ef:c3:5b:3f:11:47:00:8e:c2:4a:72:78: 4d:a4:42:b2:b4:40:16:77:55:78:d3:a9:3b:d5:26:11:74:0b: 3f:ee:bd:03:29:f0:a1:7a:f3:03:1e:5c:a9:f5:b4:d3:4c:84: 8f:ee:63:55:b5:c5:af:fe:2c:7c:29:1c:6c:22:65:65:fb:e9: f9:b0:3e:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UB9JyZwyesbfVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ODFmMjY5NWEtOGRhZC00MzRlLThiZTYtNzhmYWE0NGM0NThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDSgdAOPHuMziKMDlM2z4WzsL6/fLH8R30IT u0znkuxP73ZXBImlBF1aZanCzfftAlsB37JRh+1sywcpqk6EUEnSVaXU+SpffWHx CEhg7Pmy3uZLrJvcXmJSpk4DjnBhANJLGDpfmIAPuF+ImGVPEO5DdqeDSEsn30eR 19KyhezGZXHA+QRYs1bAH2G1S84liZMgBMIVoEF2rGYe+/dW7WKr4T8kXXx9S2xM nbhQlJP87SXweGd39P5R+Zvc3u/YqCrY+fPlEh/Fol79OzuYl+iQhFVqISBD3G2z QYTIl2ZAGX2Pw4zEe5TFysubyrN9bFzJsZpkTZWqpbw1+1jd0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEfOA/Y/k3oPBAy1tnVIreXCVo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmY1ZGI0ZTctOWUzNS0z NDg0LWJmN2YtNjBiZTA2YjFiYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKIZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKtv7HJWLsvAGkvEOwuXDrJZ9kLbAdZmy3EeUwQBKququbxi4EQmrgo E4P4wl/Xg1pKkOrCojOiCSgRhVsA1S7aSJGqYuXs1j8fms2bbtFQMc3d2hI6/28a 9wldnGAUsP2NPMelLUfGVuOy29rlHX57NKU4xN95ekmi2BXlRPmzQEjRTifQf447 cyABd0YbUqRuuMu1bf/fYeXc1t+4mc3P1MBhhjnXJH/jWqSjJhencCDjC68lmcd4 hu/DWz8RRwCOwkpyeE2kQrK0QBZ3VXjTqTvVJhF0Cz/uvQMp8KF68wMeXKn1tNNM hI/uY1W1xa/+LHwpHGwiZWX76fmwPjI= -----END CERTIFICATE-----Generated at Tue Oct 13 06:17:42 2026 by rpki-client