$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ede4e61f-2a18-38db-ae4e-66e5baa8a493.roa File: ede4e61f-2a18-38db-ae4e-66e5baa8a493.roa (raw, json) Hash identifier: ozJvLbrfqm/naX2YqvuABCNlDI+Bka1GOozwQ+0USww= Subject key identifier: 5E:A3:55:06:29:EF:79:62:F7:A7:14:28:B2:E1:C9:33:2B:CA:D9:E9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78889157E544C5415421C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ede4e61f-2a18-38db-ae4e-66e5baa8a493.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 40.138.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:89:15:7e:54:4c:54:15:42:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a8f1dd71-8058-48a0-9b1b-32b28974c77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:e4:f2:63:15:d7:f0:dd:e5:40:5f:d0:1c: 7a:45:01:ec:99:9b:5a:3b:0c:be:31:71:d3:cb:8f: a1:53:1a:df:bd:a3:aa:fb:74:e6:8b:73:26:a7:77: 5a:50:4d:5e:c6:e7:43:f5:2c:9d:62:0f:32:45:df: d8:71:22:ed:dd:d3:9a:01:69:19:67:62:fe:42:2d: a3:14:a0:54:34:75:d3:19:33:7a:cf:18:8a:44:95: d1:9c:b7:08:83:46:33:6e:4a:76:2e:45:f1:b3:54: 57:da:e3:14:67:bb:5d:18:0f:73:10:27:2a:a5:30: 74:67:e0:2f:cb:00:a6:69:06:57:b8:8c:46:e2:fc: 73:07:1f:3f:02:a3:52:42:33:57:dd:7e:ea:c7:6d: 89:fb:ce:dc:f0:5b:c5:e3:9d:51:f9:00:e3:62:03: f1:2a:9e:f2:62:17:01:cf:d6:07:06:ef:92:3d:f7: f8:5f:c0:3d:4c:fd:88:11:55:b2:ce:86:a3:ec:af: 27:0d:9e:eb:2c:d7:5f:13:50:c8:f3:49:8c:f1:4a: be:62:1a:76:2c:10:27:e8:ac:ac:d9:83:a4:30:54: 04:47:09:6d:dc:74:4a:7f:3c:b9:f6:60:a3:99:44: 36:87:b3:d9:a6:d5:4f:3f:3e:4b:6a:6e:f6:d6:82: a6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A3:55:06:29:EF:79:62:F7:A7:14:28:B2:E1:C9:33:2B:CA:D9:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ede4e61f-2a18-38db-ae4e-66e5baa8a493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a5:43:ad:1b:57:fe:af:39:b9:41:b8:8c:af:a7:46:9d:56: c1:0d:97:5c:1b:ea:0b:cb:47:45:a0:46:ad:66:50:ca:d0:60: bc:3f:e8:75:eb:af:07:eb:f6:6c:0e:e9:fe:08:13:df:c1:42: 02:8a:88:9a:56:bd:91:05:50:a6:da:47:b1:ac:f3:b6:08:7d: e1:c8:32:a3:d2:1b:48:a2:c9:0b:85:6a:be:19:36:48:87:a9: ba:d4:bf:38:60:55:13:be:92:b0:fe:55:a9:fe:69:f1:3a:dd: 19:ea:0d:bd:6a:89:b2:17:bf:13:14:11:42:78:55:1a:79:2a: bb:9f:fd:cd:3d:9b:7c:41:7d:6d:fa:d6:64:cf:87:aa:e0:8f: f4:ea:56:ed:0d:dc:ee:63:3c:05:af:e1:b3:e7:0b:ff:a7:41: 84:35:7c:f1:a3:d8:83:f3:22:6a:79:1a:e1:87:36:77:ec:49: 02:b2:0d:6f:5a:c6:fd:47:9a:bc:48:a2:5a:ff:9d:5a:d0:09: 2a:dd:d1:f9:fb:92:08:07:9f:ae:df:66:89:4c:42:45:03:94: a0:69:8c:f1:b0:ed:90:61:6f:f1:c7:21:b1:30:e8:ad:94:c5: 2f:b3:2c:f2:ff:03:f7:31:c5:90:eb:c4:a9:8c:00:e3:d4:86: 21:27:35:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niIkVflRMVBVCHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YThmMWRkNzEtODA1OC00OGEwLTliMWItMzJiMjg5NzRjNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi23k8mMV1/Dd5UBf0Bx6RQHsmZtaOwy+MXHT y4+hUxrfvaOq+3Tmi3Mmp3daUE1exudD9SydYg8yRd/YcSLt3dOaAWkZZ2L+Qi2j FKBUNHXTGTN6zxiKRJXRnLcIg0Yzbkp2LkXxs1RX2uMUZ7tdGA9zECcqpTB0Z+Av ywCmaQZXuIxG4vxzBx8/AqNSQjNX3X7qx22J+87c8FvF451R+QDjYgPxKp7yYhcB z9YHBu+SPff4X8A9TP2IEVWyzoaj7K8nDZ7rLNdfE1DI80mM8Uq+Yhp2LBAn6Kys 2YOkMFQERwlt3HRKfzy59mCjmUQ2h7PZptVPPz5Lam721oKmKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6jVQYp73li96cUKLLhyTMrytnpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWRlNGU2MWYtMmExOC0z OGRiLWFlNGUtNjZlNWJhYThhNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSlQ60bV/6vOblBuIyvp0adVsENl1wb6gvLR0WgRq1mUMrQYLw/6HXr rwfr9mwO6f4IE9/BQgKKiJpWvZEFUKbaR7Gs87YIfeHIMqPSG0iiyQuFar4ZNkiH qbrUvzhgVRO+krD+Van+afE63RnqDb1qibIXvxMUEUJ4VRp5Kruf/c09m3xBfW36 1mTPh6rgj/TqVu0N3O5jPAWv4bPnC/+nQYQ1fPGj2IPzImp5GuGHNnfsSQKyDW9a xv1HmrxIolr/nVrQCSrd0fn7kggHn67fZolMQkUDlKBpjPGw7ZBhb/HHIbEw6K2U xS+zLPL/A/cxxZDrxKmMAOPUhiEnNZU= -----END CERTIFICATE-----Generated at Thu Aug 27 11:29:03 2026 by rpki-client