$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8879e0a-a047-3aa1-9f06-79affe165955.roa File: c8879e0a-a047-3aa1-9f06-79affe165955.roa (raw, json) Hash identifier: KyCnqgISFiVYJfQlrip4UZW0+saqrafuGgpatdcTQjU= Subject key identifier: 8F:99:CE:7A:50:75:0E:D0:BF:AD:1B:42:7F:76:6C:23:B5:25:6C:6B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A4F9753205CF1B47B74FD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8879e0a-a047-3aa1-9f06-79affe165955.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 40.137.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:97:53:20:5c:f1:b4:7b:74:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=392ace8b-5e58-4e12-bbbc-2b62355fe8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:eb:6b:8f:46:76:52:d7:34:f2:69:49:28:b9: db:53:df:b0:73:df:ad:5d:f6:b7:67:a2:44:c1:c0: 71:3a:bd:f8:06:de:71:1a:01:96:b2:6d:36:34:de: 49:2c:15:d6:7b:66:c1:63:c4:cc:a7:05:11:d8:96: 82:a9:4d:71:1a:e4:03:0d:f9:58:03:79:05:2f:0f: ab:55:56:8c:a4:cb:ac:3f:71:dc:38:74:ae:da:66: 91:c9:42:55:5c:26:f0:ce:7f:4e:7d:da:3e:1d:34: 4c:18:8d:12:db:fc:27:b2:cc:cb:01:8d:25:50:aa: 78:e2:8a:78:ae:8a:40:2e:8a:eb:9c:5e:68:c7:61: 41:8c:b3:59:c8:c7:48:c8:f0:28:b0:09:31:fa:d6: d9:b2:8e:63:bb:35:10:eb:a3:aa:d7:6f:a5:64:f9: 14:19:1e:3a:39:47:46:2e:a0:bf:7c:63:9c:ce:37: 71:db:f7:3e:da:95:4f:7f:29:32:9f:58:8f:7e:ca: 92:b7:77:0b:b8:32:fd:c0:c5:61:c4:00:44:f3:cc: 1e:e5:0d:e9:63:df:9e:1d:a8:50:4c:75:25:1f:5b: 1c:f6:6e:fe:90:df:5c:b5:fc:4e:57:06:ce:6d:40: 9b:b4:ac:f1:bb:00:48:82:42:7b:a6:59:be:16:ce: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:99:CE:7A:50:75:0E:D0:BF:AD:1B:42:7F:76:6C:23:B5:25:6C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8879e0a-a047-3aa1-9f06-79affe165955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.137.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b0:c1:0e:e3:dc:ab:65:67:ee:8e:23:76:f8:1c:db:65:9f: ee:77:d5:7a:fe:27:6a:be:29:e1:09:11:d6:22:83:2b:2a:98: 7c:c3:17:eb:c5:63:08:26:97:5a:18:37:a1:37:ef:cc:e4:46: b3:cc:ab:8b:d2:89:f0:0f:5d:2d:2a:93:87:48:2a:91:e9:dd: 72:25:28:ad:1d:8b:3c:a1:05:e1:25:ab:21:9d:7a:0b:1e:be: a2:c6:57:7b:f9:e7:c4:0c:4b:7e:6f:5e:eb:cc:00:05:29:28: 66:43:e1:89:c8:3a:eb:84:d1:19:b7:48:ff:de:1a:69:0f:a9: bb:bf:89:a8:48:96:ac:31:3a:84:db:25:bb:df:f6:dd:66:6e: ad:54:9b:c4:84:7f:b7:f8:dc:5b:6d:98:64:3f:77:45:78:62: 49:7b:13:ed:af:a7:e5:7f:4d:16:5e:fb:b3:1f:99:34:66:f4: a1:b5:8d:6e:de:09:de:8d:d2:03:f3:c3:09:0d:45:71:64:ec: 72:f4:6a:78:f8:b3:56:bb:56:00:80:22:4d:ed:7f:94:8b:37: 8a:3b:f2:48:21:ae:b9:be:cd:65:24:83:eb:b9:fd:d5:28:c2: e9:f9:bf:66:79:32:2d:aa:52:f6:d5:3b:bb:48:76:dd:c6:e2: ff:17:7c:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T5dTIFzxtHt0/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MzkyYWNlOGItNWU1OC00ZTEyLWJiYmMtMmI2MjM1NWZlOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOtrj0Z2Utc08mlJKLnbU9+wc9+tXfa3Z6JE wcBxOr34Bt5xGgGWsm02NN5JLBXWe2bBY8TMpwUR2JaCqU1xGuQDDflYA3kFLw+r VVaMpMusP3HcOHSu2maRyUJVXCbwzn9Ofdo+HTRMGI0S2/wnsszLAY0lUKp44op4 ropALorrnF5ox2FBjLNZyMdIyPAosAkx+tbZso5juzUQ66Oq12+lZPkUGR46OUdG LqC/fGOczjdx2/c+2pVPfykyn1iPfsqSt3cLuDL9wMVhxABE88we5Q3pY9+eHahQ THUlH1sc9m7+kN9ctfxOVwbObUCbtKzxuwBIgkJ7plm+Fs6pWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+ZznpQdQ7Qv60bQn92bCO1JWxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzg4NzllMGEtYTA0Ny0z YWExLTlmMDYtNzlhZmZlMTY1OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOwwQ7j3KtlZ+6OI3b4HNtln+531Xr+J2q+KeEJEdYigysqmHzDF+vF Ywgml1oYN6E378zkRrPMq4vSifAPXS0qk4dIKpHp3XIlKK0dizyhBeElqyGdegse vqLGV3v558QMS35vXuvMAAUpKGZD4YnIOuuE0Rm3SP/eGmkPqbu/iahIlqwxOoTb Jbvf9t1mbq1Um8SEf7f43FttmGQ/d0V4Ykl7E+2vp+V/TRZe+7MfmTRm9KG1jW7e Cd6N0gPzwwkNRXFk7HL0anj4s1a7VgCAIk3tf5SLN4o78kghrrm+zWUkg+u5/dUo wun5v2Z5Mi2qUvbVO7tIdt3G4v8XfNY= -----END CERTIFICATE-----Generated at Tue Oct 13 06:20:50 2026 by rpki-client