$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa File: d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa (raw, json) Hash identifier: pA8+z5Aa8chX0pULjU9WvD4uFbIpWXdys4W/yUnv6f8= Subject key identifier: 0B:AA:2C:E4:3E:91:66:10:89:3A:3F:08:5D:A5:4F:D6:37:22:97:05 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E376480D4E3F2B18AADB88680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 40.142.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:80:d4:e3:f2:b1:8a:ad:b8:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=d58a906d-e11c-46c8-baba-82792bf6f707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b4:88:c8:33:84:ff:a0:26:25:7f:33:de:a0: 6e:64:5e:41:15:b3:40:12:17:e2:f6:69:66:a4:c1: 3d:0b:f2:04:7f:4c:0c:2c:0f:42:c4:17:ba:60:3d: 2f:b6:bc:49:70:b6:40:6a:b3:ff:c2:f3:30:31:37: 25:6e:4d:4a:9f:9d:0d:19:92:b6:5a:24:78:c7:a4: 01:1a:0a:5f:e2:bd:6c:fa:db:6f:5f:81:c0:89:6c: bb:cb:d9:ff:f4:24:fe:9e:2f:74:29:5a:c1:a0:ad: 55:91:db:a2:ae:a5:88:61:b9:07:7a:a1:09:cd:9f: f8:18:59:65:db:99:7b:fb:c9:da:0e:6e:a3:8c:13: 5c:90:5f:ec:ab:d6:de:b7:df:ce:89:62:de:ac:81: 4e:da:ee:8f:d0:2f:4c:cc:30:7b:a0:35:d6:17:a7: 55:aa:d2:48:d9:1e:65:9c:92:7c:14:a0:65:6e:60: 45:0f:77:db:c3:c5:4d:16:a0:5e:34:87:33:f3:f9: 76:57:44:54:34:54:16:93:7c:5b:ea:a9:f7:77:86: a6:ae:30:f5:28:e1:5a:3b:f8:69:2b:9a:e4:61:27: 04:3f:e6:72:ce:91:fc:f4:d7:3b:6e:70:c4:af:94: 0c:d5:b0:11:f0:86:16:61:2f:ea:f1:b9:69:35:79: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AA:2C:E4:3E:91:66:10:89:3A:3F:08:5D:A5:4F:D6:37:22:97:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:69:d4:ad:f8:2b:98:98:ae:b5:e9:69:c6:e7:a4:41:5a:49: aa:3c:5e:81:15:cc:64:d5:61:64:22:91:cf:ef:ec:1c:b6:14: 0d:f6:06:e8:ec:35:b3:49:40:f6:2d:9c:e2:c3:92:64:ba:98: 82:0b:ea:ae:8f:58:f5:7f:3d:c6:ca:5d:6b:a8:c5:66:67:e3: 7e:7f:a1:58:2d:7c:57:e4:17:dc:3b:ea:6d:13:c8:79:ce:0a: 46:3c:05:e3:d5:c8:ed:8f:7f:33:4f:6c:8c:aa:23:6d:c3:07: 87:3a:73:5b:39:df:c6:f8:3b:71:1d:23:87:61:1e:78:ef:ba: f7:85:5b:37:65:fb:cc:62:95:d0:34:f4:ee:28:25:c1:3b:59: 75:a3:c5:ee:da:e9:58:4d:7d:19:8e:fc:01:b9:23:f4:f2:7d: bc:97:72:ca:22:98:5a:40:83:15:78:21:89:13:8c:32:43:30: 5d:a8:9b:6b:40:b1:54:3f:db:82:d7:ca:3e:5d:5c:66:4e:6d: c6:7e:4b:12:ad:3f:b1:1e:42:07:04:75:a8:8f:03:56:64:61: 89:e9:38:f8:0f:0d:8f:47:5e:12:c2:59:f6:dc:71:59:d8:ee: 28:bd:4f:1d:ad:6f:3d:5c:87:a2:64:8d:4f:ab:1f:fc:57:21: 62:c3:80:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZIDU4/Kxiq24hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk ZDU4YTkwNmQtZTExYy00NmM4LWJhYmEtODI3OTJiZjZmNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7SIyDOE/6AmJX8z3qBuZF5BFbNAEhfi9mlm pME9C/IEf0wMLA9CxBe6YD0vtrxJcLZAarP/wvMwMTclbk1Kn50NGZK2WiR4x6QB Ggpf4r1s+ttvX4HAiWy7y9n/9CT+ni90KVrBoK1VkduirqWIYbkHeqEJzZ/4GFll 25l7+8naDm6jjBNckF/sq9bet9/OiWLerIFO2u6P0C9MzDB7oDXWF6dVqtJI2R5l nJJ8FKBlbmBFD3fbw8VNFqBeNIcz8/l2V0RUNFQWk3xb6qn3d4amrjD1KOFaO/hp K5rkYScEP+ZyzpH89Nc7bnDEr5QM1bAR8IYWYS/q8blpNXmMPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuqLOQ+kWYQiTo/CF2lT9Y3IpcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFjM2Y3OWQtMjU3Yi0z MGRiLWIxZTUtZjU1ZWIzYjFlZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKI7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZp1K34K5iYrrXpacbnpEFaSao8XoEVzGTVYWQikc/v7By2FA32Bujs NbNJQPYtnOLDkmS6mIIL6q6PWPV/PcbKXWuoxWZn435/oVgtfFfkF9w76m0TyHnO CkY8BePVyO2PfzNPbIyqI23DB4c6c1s538b4O3EdI4dhHnjvuveFWzdl+8xildA0 9O4oJcE7WXWjxe7a6VhNfRmO/AG5I/TyfbyXcsoimFpAgxV4IYkTjDJDMF2om2tA sVQ/24LXyj5dXGZObcZ+SxKtP7EeQgcEdaiPA1ZkYYnpOPgPDY9HXhLCWfbccVnY 7ii9Tx2tbz1ch6JkjU+rH/xXIWLDgEg= -----END CERTIFICATE-----Generated at Mon Jul 13 05:57:01 2026 by rpki-client