$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa File: f642a687-a386-3ce5-8205-1067458f0238.roa (raw, json) Hash identifier: tE8+w/0F+HNQ9dwF4rvT+KoWWZgySOp4bJjhG4eJPts= Subject key identifier: 6D:60:03:E1:27:7F:C3:56:F4:06:0D:75:44:94:A2:77:B1:9A:1E:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BE0C0034C963BFA55540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 40.142.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:be:0c:00:34:c9:63:bf:a5:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=289ebdda-8ea6-4d00-8af7-cd4f65f56c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:02:7e:f3:1f:6d:52:45:c2:42:94:35:ad: f5:90:09:a4:35:cb:05:bc:3a:c6:32:ba:14:61:ba: 7c:d4:23:54:68:27:31:6e:9a:e9:fd:89:36:a1:00: f1:f9:b1:25:61:16:bb:ce:d5:85:57:13:06:64:ca: 51:01:7f:33:f7:3a:d5:82:ab:55:ec:c2:68:17:51: 3d:50:cb:47:74:96:c1:24:db:81:ab:15:5e:b5:fb: 8f:7c:37:5a:f3:85:69:b0:5c:7a:df:91:fa:d7:37: 0d:32:2e:6d:9d:6c:dd:d4:37:77:de:81:7d:cf:af: 3e:02:39:53:4e:5d:43:27:96:d7:08:9e:75:99:a4: 06:c0:6b:58:8b:7c:b8:7e:9c:af:9a:35:5f:ae:3d: 93:fe:4b:7b:2e:4c:23:9e:83:51:e4:b0:b2:dd:c4: a0:29:27:df:0f:69:78:81:dd:c7:cd:e6:12:3e:0d: e8:67:f7:b3:17:df:a3:34:48:b9:c7:73:f7:1d:88: 67:27:da:ee:48:c9:23:fb:e1:3c:74:d7:9c:76:d8: c0:0e:b2:20:f0:10:48:03:13:3e:f1:ee:e7:a7:9e: e0:5f:da:92:c2:8e:cb:95:04:0f:9a:92:86:55:98: 85:9f:32:ec:47:f1:e2:8d:5d:fe:ea:38:e5:1a:47: 87:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:60:03:E1:27:7F:C3:56:F4:06:0D:75:44:94:A2:77:B1:9A:1E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:2e:1d:7f:f3:12:62:71:8a:0a:02:8a:93:b9:df:36:87:a9: 69:7d:31:ae:38:ab:81:b8:1e:b6:dd:a4:ac:d0:34:36:e1:8c: b9:93:d4:b1:18:a5:bf:c0:59:dc:27:ae:7e:51:57:06:ea:e4: a9:0b:73:e7:39:d8:6d:ae:c7:fb:e7:73:c0:d6:18:97:9b:1a: b2:33:59:5d:a2:a5:62:fa:1a:7d:46:36:09:28:02:e4:b0:3c: 46:a1:c5:0c:c5:ad:57:c4:a4:3c:11:99:c6:f5:80:41:c0:68: e0:01:eb:a7:31:5d:61:dc:3a:f3:90:05:09:16:4b:d4:89:f4: 55:c6:68:cb:7f:6c:7a:72:09:b4:75:29:15:f8:ad:99:a0:31: dc:77:81:e7:ae:53:98:13:c5:bc:1e:1b:1a:e6:bd:68:b4:3b: 08:ae:89:08:91:56:8d:eb:e6:a8:26:71:89:1d:48:3c:71:3b: 46:89:38:ee:8b:08:46:f8:23:18:de:61:64:a7:cb:ae:5b:0a: f9:1b:35:b9:8b:50:c1:e4:cf:ed:47:07:d0:1b:ad:1e:1d:aa: 7c:71:4c:c6:51:1b:67:ad:fb:4e:57:5e:33:c6:58:1c:db:e1: ef:e4:b3:b9:b0:57:e3:2a:3f:69:46:08:c3:c0:dc:d8:b6:ac: 96:16:de:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ74MADTJY7+lVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk Mjg5ZWJkZGEtOGVhNi00ZDAwLThhZjctY2Q0ZjY1ZjU2YzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/cCfvMfbVJFwkKUNa31kAmkNcsFvDrGMroU Ybp81CNUaCcxbprp/Yk2oQDx+bElYRa7ztWFVxMGZMpRAX8z9zrVgqtV7MJoF1E9 UMtHdJbBJNuBqxVetfuPfDda84VpsFx635H61zcNMi5tnWzd1Dd33oF9z68+AjlT Tl1DJ5bXCJ51maQGwGtYi3y4fpyvmjVfrj2T/kt7LkwjnoNR5LCy3cSgKSffD2l4 gd3HzeYSPg3oZ/ezF9+jNEi5x3P3HYhnJ9ruSMkj++E8dNecdtjADrIg8BBIAxM+ 8e7np57gX9qSwo7LlQQPmpKGVZiFnzLsR/HijV3+6jjlGkeHeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1gA+Enf8NW9AYNdUSUonexmh45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjY0MmE2ODctYTM4Ni0z Y2U1LTgyMDUtMTA2NzQ1OGYwMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKI6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4uHX/zEmJxigoCipO53zaHqWl9Ma44q4G4HrbdpKzQNDbhjLmT1LEY pb/AWdwnrn5RVwbq5KkLc+c52G2ux/vnc8DWGJebGrIzWV2ipWL6Gn1GNgkoAuSw PEahxQzFrVfEpDwRmcb1gEHAaOAB66cxXWHcOvOQBQkWS9SJ9FXGaMt/bHpyCbR1 KRX4rZmgMdx3geeuU5gTxbweGxrmvWi0OwiuiQiRVo3r5qgmcYkdSDxxO0aJOO6L CEb4IxjeYWSny65bCvkbNbmLUMHkz+1HB9AbrR4dqnxxTMZRG2et+05XXjPGWBzb 4e/ks7mwV+MqP2lGCMPA3Ni2rJYW3kY= -----END CERTIFICATE-----Generated at Mon Apr 13 13:07:23 2026 by rpki-client