$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa File: f642a687-a386-3ce5-8205-1067458f0238.roa (raw, json) Hash identifier: juV69+ncRV/hL/momQvF/8b2/KvdmHZytIwoCchFC5Y= Subject key identifier: 19:E0:07:05:35:3D:1B:5C:32:67:31:A2:3C:AD:62:CF:03:68:69:E5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED43254E43F717B3516F3F9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 40.142.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:54:e4:3f:71:7b:35:16:f3:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=9e8da0a4-f154-425d-9b35-577527415225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b3:cf:e1:45:87:e9:04:3d:9c:14:28:8f:d9: 44:d8:bb:43:0d:73:2d:dd:8e:0f:22:d4:54:fa:e8: 53:e6:2a:f9:7f:de:fe:96:c8:ab:08:13:fb:3c:84: 71:88:14:8a:b9:9b:a8:8d:3b:45:4a:7a:e3:7d:22: 38:f7:0b:31:f7:95:a2:ee:50:eb:d2:1c:94:af:d8: 07:52:3f:04:de:d3:74:f0:ab:f5:a4:ba:50:cd:5e: d3:73:35:4f:d7:4e:8c:38:2e:d9:cd:ac:88:b7:c5: c6:01:fc:4d:c4:0f:15:b6:4f:46:74:ad:88:7f:ef: cb:92:ca:7d:a1:ca:f7:46:4c:1f:85:e4:ec:90:0d: 0b:3a:0e:b6:1c:e9:23:a0:dd:4b:32:29:ea:32:1b: a8:5f:24:d4:10:b7:ec:5d:da:b1:36:87:fc:68:8c: d7:70:b6:a8:45:55:bd:1f:e6:1b:5e:03:50:ad:dc: e1:28:a5:5f:5c:a0:5f:2d:a5:10:1c:54:2b:9e:c1: 15:f5:87:5d:57:ff:d8:48:20:ec:44:ad:1f:fe:f6: 54:b5:be:b7:ca:c4:46:c1:94:38:81:cc:e0:c0:50: 3f:2e:21:3d:42:87:99:f6:4e:22:10:73:4d:0c:70: 49:27:df:85:0d:32:2a:05:b1:b8:a0:03:66:3b:e1: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E0:07:05:35:3D:1B:5C:32:67:31:A2:3C:AD:62:CF:03:68:69:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:7e:82:61:7c:67:60:00:80:95:fc:87:83:45:04:b0:8a:7d: 9a:ce:08:d4:cd:d9:9a:49:e1:08:bc:28:79:55:7a:2c:3a:4e: 6a:33:8d:99:ee:47:94:54:e3:a6:a3:45:41:46:77:7c:e6:40: d3:61:36:22:3e:4b:0a:27:ea:02:82:98:c0:44:68:6b:ff:f4: 8d:15:44:7b:31:49:97:f8:a2:e2:93:9d:00:c5:48:94:30:fd: 5f:10:db:3a:11:6c:d9:35:cf:14:ea:e0:6d:88:6a:05:f7:3e: 62:05:8e:87:40:07:29:f6:8c:c6:80:f5:45:13:03:e1:9b:08: d5:4e:51:03:d1:dc:07:32:62:d6:83:ed:c2:00:d5:d4:61:4c: 22:24:ca:0c:b4:43:60:0f:c7:8b:8f:1b:d6:af:48:03:08:b7: 99:08:95:3c:7d:7f:69:be:4b:7d:1f:c1:de:83:2a:93:d5:af: 9b:c7:01:b0:ed:ef:cb:27:6a:6a:99:d4:9d:b6:1d:e8:06:67: 9d:a4:c2:a2:1d:5f:e4:c8:97:ad:a9:f6:05:0c:4a:d3:08:5a: 3f:0d:83:e0:22:c2:2f:3b:85:24:1b:df:97:a7:67:9f:89:2f: 81:e9:e2:b4:e4:0a:ff:f5:ab:c9:db:4e:9b:f8:ad:37:d9:e4: 7d:0d:4a:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlTkP3F7NRbz+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk OWU4ZGEwYTQtZjE1NC00MjVkLTliMzUtNTc3NTI3NDE1MjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbPP4UWH6QQ9nBQoj9lE2LtDDXMt3Y4PItRU +uhT5ir5f97+lsirCBP7PIRxiBSKuZuojTtFSnrjfSI49wsx95Wi7lDr0hyUr9gH Uj8E3tN08Kv1pLpQzV7TczVP106MOC7ZzayIt8XGAfxNxA8Vtk9GdK2If+/Lksp9 ocr3RkwfheTskA0LOg62HOkjoN1LMinqMhuoXyTUELfsXdqxNof8aIzXcLaoRVW9 H+YbXgNQrdzhKKVfXKBfLaUQHFQrnsEV9YddV//YSCDsRK0f/vZUtb63ysRGwZQ4 gczgwFA/LiE9QoeZ9k4iEHNNDHBJJ9+FDTIqBbG4oANmO+HeSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBngBwU1PRtcMmcxojytYs8DaGnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjY0MmE2ODctYTM4Ni0z Y2U1LTgyMDUtMTA2NzQ1OGYwMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKI6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJB+gmF8Z2AAgJX8h4NFBLCKfZrOCNTN2ZpJ4Qi8KHlVeiw6TmozjZnu R5RU46ajRUFGd3zmQNNhNiI+Swon6gKCmMBEaGv/9I0VRHsxSZf4ouKTnQDFSJQw /V8Q2zoRbNk1zxTq4G2IagX3PmIFjodAByn2jMaA9UUTA+GbCNVOUQPR3AcyYtaD 7cIA1dRhTCIkygy0Q2APx4uPG9avSAMIt5kIlTx9f2m+S30fwd6DKpPVr5vHAbDt 78snamqZ1J22HegGZ52kwqIdX+TIl62p9gUMStMIWj8Ng+Aiwi87hSQb35enZ5+J L4Hp4rTkCv/1q8nbTpv4rTfZ5H0NSks= -----END CERTIFICATE-----Generated at Thu Aug 27 09:50:27 2026 by rpki-client