$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa File: d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa (raw, json) Hash identifier: ddC6tvH27CB2V8jTRW0SPzZojXkkn5fPf/qnZPj/07I= Subject key identifier: EC:E0:29:33:C7:33:A7:96:B9:55:A3:62:1C:FD:4E:6B:0D:A0:84:FE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D571FBC5AE507CF0AE7C1B100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 7029 IP address blocks: 40.142.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:bc:5a:e5:07:cf:0a:e7:c1:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=d7403e0a-19f8-4aef-91ed-7e26fbb9be51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:ac:7e:a9:a9:8a:99:db:05:49:fe:89:a5: 89:39:3b:4e:f7:60:24:18:ac:a7:79:5f:a5:bf:c8: 26:f4:cd:a8:12:b9:9e:ea:19:59:7b:8e:2f:4c:74: a6:a0:47:f2:4b:e7:a1:8b:0f:a1:a7:1c:fb:8e:c4: df:85:91:b4:44:cc:d6:22:ca:68:4e:c9:cb:41:11: ac:21:26:9b:5b:93:bf:52:28:fd:f3:0d:a4:aa:e5: 2e:5d:1f:01:d2:c7:34:91:95:f6:2d:de:55:bf:ad: 28:5f:09:1c:f9:5d:b8:1c:ef:e9:01:19:c5:5e:f5: f0:8d:c9:a1:32:48:3f:00:0a:76:0d:40:5f:ed:84: b7:f0:89:df:de:9c:a7:ca:c2:db:cb:e6:cc:8f:c3: 29:d8:4e:b4:d0:39:49:bb:c2:21:35:f2:5d:3c:70: 40:c3:02:ab:4b:6c:c8:f6:21:c6:99:23:91:87:5a: 18:7a:00:5c:d4:3b:ca:cd:00:d0:9e:85:7a:64:15: 41:2e:4f:d7:86:6b:9a:72:a9:05:d8:d7:46:3a:08: 2b:6b:77:93:79:24:72:c0:97:6a:3c:6b:6d:46:04: b6:5b:c9:e7:91:be:f4:67:1c:75:00:e6:57:1b:76: d7:7c:36:9d:cf:0f:82:bc:1e:05:b2:02:f7:ce:95: 26:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E0:29:33:C7:33:A7:96:B9:55:A3:62:1C:FD:4E:6B:0D:A0:84:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1c3f79d-257b-30db-b1e5-f55eb3b1efd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ed:f2:06:87:c8:a5:73:69:62:23:16:17:f3:65:36:07:8c: 67:f6:b1:98:0a:c1:40:ff:5d:f8:bf:15:70:ab:a2:66:f6:28: a5:ce:ba:93:70:32:c2:7f:8e:eb:c5:7a:b7:e0:e6:92:25:29: f8:aa:fc:90:e3:69:4c:79:92:97:f1:e4:ca:64:73:e7:ea:f8: 09:9c:24:2e:ad:7c:49:2b:07:cd:a4:ee:64:e2:51:34:8d:4c: 0e:81:bc:85:d1:03:7a:43:09:81:9b:fd:01:a4:0d:13:eb:c6: 50:13:a9:85:de:81:f0:da:3c:6e:f2:47:48:83:5b:46:d6:23: ae:8a:f6:52:74:28:bf:2d:c7:39:a9:e5:ac:f7:89:36:98:b7: fe:cc:0e:a1:c8:83:d9:df:4f:6e:ec:e7:c7:52:d0:c0:18:46: 27:4a:19:c2:f3:20:0d:2d:22:46:fb:33:b7:35:61:50:96:3d: 75:05:9b:c8:75:60:cc:33:1b:32:28:b0:82:ae:b9:ec:cd:e0: 9d:91:c7:a5:49:bf:fa:c8:45:d9:f9:5c:8d:4d:dc:1f:d5:1d: 55:cc:b5:05:9b:79:8a:5d:4d:70:f3:c0:18:25:d6:60:28:ac: f6:bb:21:7c:82:80:6e:1d:15:1a:53:b0:8d:3b:96:88:0b:0a: b9:a9:34:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7xa5QfPCufBsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk ZDc0MDNlMGEtMTlmOC00YWVmLTkxZWQtN2UyNmZiYjliZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJesfqmpipnbBUn+iaWJOTtO92AkGKyneV+l v8gm9M2oErme6hlZe44vTHSmoEfyS+ehiw+hpxz7jsTfhZG0RMzWIspoTsnLQRGs ISabW5O/Uij98w2kquUuXR8B0sc0kZX2Ld5Vv60oXwkc+V24HO/pARnFXvXwjcmh Mkg/AAp2DUBf7YS38Inf3pynysLby+bMj8Mp2E600DlJu8IhNfJdPHBAwwKrS2zI 9iHGmSORh1oYegBc1DvKzQDQnoV6ZBVBLk/XhmuacqkF2NdGOggra3eTeSRywJdq PGttRgS2W8nnkb70Zxx1AOZXG3bXfDadzw+CvB4FsgL3zpUmtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzgKTPHM6eWuVWjYhz9TmsNoIT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFjM2Y3OWQtMjU3Yi0z MGRiLWIxZTUtZjU1ZWIzYjFlZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKI7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXt8gaHyKVzaWIjFhfzZTYHjGf2sZgKwUD/Xfi/FXCromb2KKXOupNw MsJ/juvFerfg5pIlKfiq/JDjaUx5kpfx5Mpkc+fq+AmcJC6tfEkrB82k7mTiUTSN TA6BvIXRA3pDCYGb/QGkDRPrxlATqYXegfDaPG7yR0iDW0bWI66K9lJ0KL8txzmp 5az3iTaYt/7MDqHIg9nfT27s58dS0MAYRidKGcLzIA0tIkb7M7c1YVCWPXUFm8h1 YMwzGzIosIKuuezN4J2Rx6VJv/rIRdn5XI1N3B/VHVXMtQWbeYpdTXDzwBgl1mAo rPa7IXyCgG4dFRpTsI07logLCrmpNOc= -----END CERTIFICATE-----Generated at Mon Apr 13 11:42:12 2026 by rpki-client