$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa File: ef4fe73d-8e5b-3799-944d-41b1981f6353.roa (raw, json) Hash identifier: J/2y7egaRBmf6v0LfEHtEvvdzb4KO0A3M4ntqs8MVDY= Subject key identifier: 85:DE:5B:EB:6B:DA:7F:AB:9F:6D:37:B4:59:9E:BF:15:86:08:A5:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1CF68DDC4EC29C15DD500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 30373 IP address blocks: 40.128.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:cf:68:dd:c4:ec:29:c1:5d:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=65b21607-577a-40fe-8902-f17b1c1ba62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:dd:12:a6:72:3d:7c:fa:22:22:47:33:8e: ef:4e:8a:01:c7:5d:bf:2a:6a:2f:e9:1a:61:ea:15: 6e:0b:7a:ea:8f:e6:91:cf:6c:b8:c9:cd:99:03:5c: cf:09:e1:63:6f:c2:4a:38:90:64:e6:ce:b1:88:15: 5a:ef:e0:d2:db:83:3a:fe:de:0c:0c:c0:d8:69:24: 3d:b2:53:f1:e4:94:ba:fe:e1:ba:c6:29:5e:4c:4c: e3:13:cf:a1:af:51:f8:9a:78:b5:2d:6b:73:a6:f1: ae:f8:3c:c3:db:96:42:f5:5d:ff:42:40:e5:4a:2d: f1:25:49:61:8a:20:54:a6:d1:94:db:c3:fc:da:25: 45:b2:12:5a:db:2a:4f:7e:dd:64:e5:dd:4d:e8:90: 71:35:b1:5d:49:25:57:0d:04:cd:25:8f:1d:3a:98: 27:3d:bd:b4:5f:79:a3:69:93:a3:b5:12:e5:53:23: 26:ee:a5:2b:1a:c4:82:7f:d8:a9:8f:75:f5:3f:ad: e2:0f:38:d8:d3:8b:5a:50:25:2c:d8:69:c2:81:e2: f1:10:74:50:fe:3e:cb:77:22:a3:3d:f5:3c:36:01: 38:5c:16:5a:22:5a:a0:d7:ff:3e:1e:2e:39:30:07: b4:94:24:05:1d:8f:dd:5d:ae:69:de:9b:d0:46:c2: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DE:5B:EB:6B:DA:7F:AB:9F:6D:37:B4:59:9E:BF:15:86:08:A5:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.128.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:2c:b5:d9:65:a6:10:2c:ca:d1:0c:67:5b:35:f6:b8:1a:1d: 94:c6:c8:ba:86:c8:85:94:08:48:c3:db:e7:81:1d:86:93:6a: 18:20:f6:8c:c6:f7:4e:3c:4f:06:4b:27:fc:3a:0c:bc:dc:77: 8c:b2:3b:d2:96:a1:44:16:e4:27:35:67:c9:f3:ee:80:d4:32: db:e0:d7:fd:35:ab:c0:6b:90:b8:d1:15:74:91:a8:04:0e:d8: 4a:71:27:63:49:47:0f:5a:86:24:f9:0d:e0:96:d4:da:70:08: f3:74:e3:45:5a:de:69:8b:d9:33:fd:bb:50:80:10:b8:ea:86: 8c:55:ef:0c:a1:e3:ae:9d:d9:e1:f9:f9:aa:3b:33:9c:c0:d1: 98:12:82:72:ac:48:6c:d8:9b:62:98:62:be:b3:90:e5:91:1f: b5:b3:dd:b5:2d:fd:9d:c4:5b:df:ee:08:84:d5:4d:63:d4:08: 1f:ae:7f:b7:7b:b1:32:31:0c:83:ad:97:b1:dc:9e:1c:ca:c1: 74:bc:b2:aa:c1:e8:9b:94:c4:01:2b:b0:15:c1:84:f9:c0:3a: dd:20:0e:b8:54:8d:ea:b1:d7:e6:58:79:8c:45:53:89:d8:4a: ab:99:f1:74:24:e9:f5:18:ce:b7:37:f4:ef:3f:8d:c2:ad:fc: 9a:2d:24:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysc9o3cTsKcFd1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NjViMjE2MDctNTc3YS00MGZlLTg5MDItZjE3YjFjMWJhNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgLdEqZyPXz6IiJHM47vTooBx12/Kmov6Rph 6hVuC3rqj+aRz2y4yc2ZA1zPCeFjb8JKOJBk5s6xiBVa7+DS24M6/t4MDMDYaSQ9 slPx5JS6/uG6xileTEzjE8+hr1H4mni1LWtzpvGu+DzD25ZC9V3/QkDlSi3xJUlh iiBUptGU28P82iVFshJa2ypPft1k5d1N6JBxNbFdSSVXDQTNJY8dOpgnPb20X3mj aZOjtRLlUyMm7qUrGsSCf9ipj3X1P63iDzjY04taUCUs2GnCgeLxEHRQ/j7LdyKj PfU8NgE4XBZaIlqg1/8+Hi45MAe0lCQFHY/dXa5p3pvQRsL6lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXeW+tr2n+rn203tFmevxWGCKVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWY0ZmU3M2QtOGU1Yi0z Nzk5LTk0NGQtNDFiMTk4MWY2MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKID2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsstdllphAsytEMZ1s19rgaHZTGyLqGyIWUCEjD2+eBHYaTahgg9ozG 9048TwZLJ/w6DLzcd4yyO9KWoUQW5Cc1Z8nz7oDUMtvg1/01q8BrkLjRFXSRqAQO 2EpxJ2NJRw9ahiT5DeCW1NpwCPN040Va3mmL2TP9u1CAELjqhoxV7wyh466d2eH5 +ao7M5zA0ZgSgnKsSGzYm2KYYr6zkOWRH7Wz3bUt/Z3EW9/uCITVTWPUCB+uf7d7 sTIxDIOtl7HcnhzKwXS8sqrB6JuUxAErsBXBhPnAOt0gDrhUjeqx1+ZYeYxFU4nY SquZ8XQk6fUYzrc39O8/jcKt/JotJAI= -----END CERTIFICATE-----Generated at Thu Aug 27 14:17:49 2026 by rpki-client