$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa File: d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa (raw, json) Hash identifier: Yn//wnd/h3o+uhBxvJwb/nwAhAOzLnxnNXOouAuoNp0= Subject key identifier: 36:F2:37:22:CC:FD:6F:05:B0:79:1C:D8:84:0D:54:DA:A8:FF:F0:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED9C7617F92399ADD7E7617A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 7029 IP address blocks: 40.142.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:61:7f:92:39:9a:dd:7e:76:17:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=fb0e76b4-0208-4789-8c4d-5f03bc973d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:d3:db:77:8f:40:8c:47:c0:ab:70:94:af: ec:2e:6a:f7:5c:32:c5:05:48:93:5b:88:e1:1b:78: a5:be:42:52:ad:70:e8:13:2b:4e:f3:aa:91:18:18: 83:69:ee:e2:68:8b:a6:50:27:18:eb:c8:22:15:7c: f2:45:a1:9a:f7:1f:58:8d:a1:51:53:e4:a0:17:f0: 98:df:9e:e3:6f:04:6e:1c:9d:0c:eb:14:94:ea:4c: ad:33:36:05:37:50:3a:d1:5f:b4:18:e1:7a:d2:d4: ff:7e:0a:03:01:54:5f:77:c4:04:a8:f2:e9:15:44: 81:35:a9:39:43:32:27:af:71:52:ef:f8:6c:50:42: eb:1e:a9:c5:22:12:7f:62:05:46:b7:56:22:a6:86: 05:b9:2c:ec:41:af:14:78:b1:c6:8d:48:e6:0f:9d: 79:16:bd:5e:31:ea:3a:b6:8f:cc:02:df:25:5b:ff: 17:b8:e0:bc:c1:a4:8c:10:70:c1:3a:c5:18:fc:71: 2a:e9:2e:2f:83:90:04:19:bf:91:d5:ea:fe:e6:58: 99:40:e3:54:15:ff:f3:9a:e1:99:37:22:47:4b:17: 86:cc:be:83:05:ae:25:58:b6:60:8e:b8:2f:ec:a7: 8d:1d:31:bd:08:cb:dc:ed:4f:d0:63:ac:a7:6a:bd: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F2:37:22:CC:FD:6F:05:B0:79:1C:D8:84:0D:54:DA:A8:FF:F0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:6d:d8:de:15:71:25:f9:98:8b:10:f3:e2:d8:75:f0:7f:2c: 54:9d:75:8e:24:fb:44:6d:28:9c:4b:53:ba:2e:1f:2f:b9:d1: 41:af:e9:f5:7c:38:57:f3:8a:f9:a8:de:ac:78:50:d1:b0:e4: b5:cd:86:55:3e:56:f6:16:f2:20:cf:68:24:d7:10:a5:50:df: 51:24:b1:b7:5d:ae:b9:09:b8:0e:1f:2e:6a:0b:56:ac:f1:f3: b0:cf:bd:e8:ae:94:02:4d:4b:8e:87:fa:85:e8:6b:00:88:a1: 61:b6:57:a8:4a:27:de:21:e9:be:de:fe:16:43:99:53:5b:f4: 6f:78:48:26:33:6b:cb:b9:3b:bc:dd:fa:a6:49:14:86:86:6d: 23:84:39:5f:61:55:b2:5f:fb:18:44:2a:e1:80:96:13:86:a0: 10:35:80:34:07:bc:2d:7a:8f:a9:99:6d:c6:31:d0:37:ec:f6: c4:1d:09:73:16:c2:73:02:2c:b8:65:c9:fd:9d:77:32:5a:24: 29:10:51:f1:da:23:96:75:b5:db:27:c4:e1:98:35:01:64:fd: 7d:27:6f:a0:c8:54:e7:7a:4a:dd:a3:45:f4:38:d9:4c:dd:97: d0:20:25:42:25:50:1a:fe:2a:44:f9:74:46:00:0f:aa:52:35: f2:cd:47:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2F/kjma3X52F6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZmIwZTc2YjQtMDIwOC00Nzg5LThjNGQtNWYwM2JjOTczZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNXT23ePQIxHwKtwlK/sLmr3XDLFBUiTW4jh G3ilvkJSrXDoEytO86qRGBiDae7iaIumUCcY68giFXzyRaGa9x9YjaFRU+SgF/CY 357jbwRuHJ0M6xSU6kytMzYFN1A60V+0GOF60tT/fgoDAVRfd8QEqPLpFUSBNak5 QzInr3FS7/hsUELrHqnFIhJ/YgVGt1YipoYFuSzsQa8UeLHGjUjmD515Fr1eMeo6 to/MAt8lW/8XuOC8waSMEHDBOsUY/HEq6S4vg5AEGb+R1er+5liZQONUFf/zmuGZ NyJHSxeGzL6DBa4lWLZgjrgv7KeNHTG9CMvc7U/QY6ynar3H7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbyNyLM/W8FsHkc2IQNVNqo//B8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFjM2Y3OWQtMjU3Yi0z MGRiLWIxZTUtZjU1ZWIzYjFlZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKI7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJt2N4VcSX5mIsQ8+LYdfB/LFSddY4k+0RtKJxLU7ouHy+50UGv6fV8 OFfzivmo3qx4UNGw5LXNhlU+VvYW8iDPaCTXEKVQ31EksbddrrkJuA4fLmoLVqzx 87DPveiulAJNS46H+oXoawCIoWG2V6hKJ94h6b7e/hZDmVNb9G94SCYza8u5O7zd +qZJFIaGbSOEOV9hVbJf+xhEKuGAlhOGoBA1gDQHvC16j6mZbcYx0Dfs9sQdCXMW wnMCLLhlyf2ddzJaJCkQUfHaI5Z1tdsnxOGYNQFk/X0nb6DIVOd6St2jRfQ42Uzd l9AgJUIlUBr+KkT5dEYAD6pSNfLNR7k= -----END CERTIFICATE-----Generated at Thu Aug 27 12:32:01 2026 by rpki-client