$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ede4e61f-2a18-38db-ae4e-66e5baa8a493.roa File: ede4e61f-2a18-38db-ae4e-66e5baa8a493.roa (raw, json) Hash identifier: mf20adhkJOs4HFRmDdSn5qYMOQavUbLdu+29vDr8LYw= Subject key identifier: 58:53:2D:49:00:3E:F0:7C:81:96:EF:26:3C:7F:66:C0:60:C7:D5:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584CF852598F887065FE2030ED00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ede4e61f-2a18-38db-ae4e-66e5baa8a493.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 7029 IP address blocks: 40.138.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:59:8f:88:70:65:fe:20:30:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=e109ad95-cfcc-45ca-9c39-168207e0527b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:ae:15:2b:f0:09:9e:e8:be:de:cc:37:31: fa:46:b6:3a:51:14:e8:c7:ea:6a:3f:62:25:34:76: e3:20:32:96:0d:b4:d0:2d:28:7f:59:5f:86:f2:af: da:d5:21:bf:cc:df:44:de:23:38:77:1b:09:6a:99: 74:79:cf:8e:5b:79:0f:14:0c:33:9e:52:0c:4e:71: 4f:d2:cc:ab:cf:a0:44:d1:7c:ab:2c:4f:d8:28:25: 68:1b:ea:88:af:7d:2a:ff:a7:09:32:f9:3f:47:df: 3d:b3:88:83:a7:1b:8e:e8:64:79:53:79:f0:53:01: e1:5a:a9:ac:01:a8:4b:b0:92:fa:86:ad:21:8b:3a: aa:0d:77:29:16:d2:8c:c1:ba:a9:8b:25:79:89:54: 40:6d:a6:f5:85:51:01:aa:b9:be:b3:fd:93:53:09: 56:09:17:21:88:bf:08:fe:40:39:8d:a5:48:fe:b6: 88:ba:a5:fa:75:63:55:87:cd:b3:0d:a2:0e:01:9e: 9d:20:52:6e:60:a5:a0:93:8e:e6:fb:3b:01:4c:ad: 9e:c0:11:e0:11:b9:a4:bc:b6:f7:7f:9c:d1:d8:db: d9:ba:e2:32:2e:ae:fe:48:58:7c:58:22:75:e6:06: a4:05:31:9d:22:be:a8:b2:66:30:c8:10:4d:aa:04: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:53:2D:49:00:3E:F0:7C:81:96:EF:26:3C:7F:66:C0:60:C7:D5:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ede4e61f-2a18-38db-ae4e-66e5baa8a493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d3:95:87:9b:11:30:c9:77:fa:e1:0a:9d:82:28:fb:dc:55: 49:26:54:52:44:87:73:20:39:31:f3:d4:48:f7:a0:1f:90:eb: 0d:17:51:28:37:42:54:89:16:ca:ad:83:46:36:af:e5:67:00: f9:82:82:5a:34:aa:91:e0:b3:f4:0d:29:5c:73:cc:f5:30:89: 0a:7d:a3:47:47:c4:6f:d9:43:cc:9d:ba:c0:3e:04:18:c7:ed: f1:a7:2f:5e:4f:84:32:77:3a:8c:3e:f0:f7:dd:2a:e4:e4:aa: 71:15:eb:33:8a:db:f2:7c:7f:88:18:d5:75:0f:7c:9b:34:fd: 7b:c6:5d:10:47:04:11:ba:1c:5a:9b:ac:35:c3:75:e2:04:43: 3e:c8:5c:19:02:3d:bd:e8:29:d2:0c:70:62:7f:6c:54:88:9e: 08:b0:88:d8:33:43:9f:1e:6b:20:69:4d:a8:5a:d1:8d:66:ca: d2:e0:27:41:67:d4:e9:92:64:cb:36:84:51:4e:90:1a:bd:10: b5:9b:e6:b4:ac:0c:ad:2e:9e:af:a8:3a:e2:b4:ed:6f:e9:c8: f2:73:64:4f:0f:88:05:53:19:e2:7d:8b:94:1e:c6:71:da:23: cc:65:9f:d6:75:70:79:9b:4c:14:b4:a1:9e:29:39:ba:5b:4a: a8:f4:5b:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UlmPiHBl/iAw7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk ZTEwOWFkOTUtY2ZjYy00NWNhLTljMzktMTY4MjA3ZTA1MjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfOuFSvwCZ7ovt7MNzH6RrY6URTox+pqP2Il NHbjIDKWDbTQLSh/WV+G8q/a1SG/zN9E3iM4dxsJapl0ec+OW3kPFAwznlIMTnFP 0syrz6BE0XyrLE/YKCVoG+qIr30q/6cJMvk/R989s4iDpxuO6GR5U3nwUwHhWqms AahLsJL6hq0hizqqDXcpFtKMwbqpiyV5iVRAbab1hVEBqrm+s/2TUwlWCRchiL8I /kA5jaVI/raIuqX6dWNVh82zDaIOAZ6dIFJuYKWgk47m+zsBTK2ewBHgEbmkvLb3 f5zR2NvZuuIyLq7+SFh8WCJ15gakBTGdIr6osmYwyBBNqgQe1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhTLUkAPvB8gZbvJjx/ZsBgx9UyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWRlNGU2MWYtMmExOC0z OGRiLWFlNGUtNjZlNWJhYThhNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnTlYebETDJd/rhCp2CKPvcVUkmVFJEh3MgOTHz1Ej3oB+Q6w0XUSg3 QlSJFsqtg0Y2r+VnAPmCglo0qpHgs/QNKVxzzPUwiQp9o0dHxG/ZQ8ydusA+BBjH 7fGnL15PhDJ3Oow+8PfdKuTkqnEV6zOK2/J8f4gY1XUPfJs0/XvGXRBHBBG6HFqb rDXDdeIEQz7IXBkCPb3oKdIMcGJ/bFSIngiwiNgzQ58eayBpTaha0Y1mytLgJ0Fn 1OmSZMs2hFFOkBq9ELWb5rSsDK0unq+oOuK07W/pyPJzZE8PiAVTGeJ9i5QexnHa I8xln9Z1cHmbTBS0oZ4pObpbSqj0Wz8= -----END CERTIFICATE-----Generated at Thu Feb 26 06:28:46 2026 by rpki-client