$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa File: f642a687-a386-3ce5-8205-1067458f0238.roa (raw, json) Hash identifier: si9E/ori5o5w3iiOj0I4b7nf5oT2KI/fz4GcCp13nOM= Subject key identifier: 79:69:6E:25:32:F4:AE:BE:AB:E3:7A:1F:A6:0B:DA:87:ED:A1:A4:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7783576008405BDE2F6DE200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 40.142.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:57:60:08:40:5b:de:2f:6d:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=6f8744c0-dbec-4810-a435-f30fc6cb12b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9c:fc:f5:2d:f1:88:ff:47:1d:87:74:7b:7d: 0b:a1:8a:cb:ff:b8:80:8e:b2:c7:9b:11:6a:c2:f2: f0:79:cd:83:45:14:a9:9d:72:75:46:2c:92:ed:a3: 91:6e:74:99:c6:34:81:3b:63:27:11:19:fb:f2:d1: 83:94:c1:a5:48:6f:87:af:50:d5:d4:e6:be:f6:5e: 08:d9:ec:31:81:72:cb:85:0d:8d:f1:c0:aa:5a:9e: 6a:89:63:03:d9:ea:cf:87:f8:9d:cb:4d:68:b6:b2: 64:f5:a2:c2:37:8d:e0:d7:61:ce:c5:2f:67:53:9e: 6b:28:6a:73:14:6f:0f:dc:32:83:02:9d:2e:7d:59: 78:2d:d8:5c:a1:21:a2:32:5f:47:e6:33:f3:08:b2: aa:09:8a:b0:98:c3:73:51:49:52:e4:d7:4f:56:3d: e9:af:83:26:93:d0:de:f3:b2:09:d6:0c:12:1a:10: 50:07:0a:22:48:a7:53:03:89:34:c5:5a:43:22:88: 06:6c:f6:96:92:77:7b:4f:ec:eb:4d:a5:27:a5:52: 3d:55:93:20:d5:97:1d:54:e6:4a:c5:d7:4a:d3:8a: ba:5e:82:93:78:52:a1:03:02:be:f6:97:3c:9a:c9: 32:2d:f2:6d:cd:81:fa:93:2b:86:f1:2d:3d:8f:5b: 6f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:69:6E:25:32:F4:AE:BE:AB:E3:7A:1F:A6:0B:DA:87:ED:A1:A4:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f642a687-a386-3ce5-8205-1067458f0238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:08:77:c3:08:f9:0b:4f:88:cf:78:91:a3:10:4b:13:98:6b: bf:53:b9:12:5a:ff:37:8d:00:ca:f3:6f:73:71:bd:be:0a:36: 92:69:74:ae:f5:e9:09:8d:20:6c:7d:f6:b4:86:a7:3e:0a:68: 17:96:7d:7c:73:9c:3e:ec:b4:a1:af:c0:9e:07:a8:6e:4c:9e: 00:d8:b5:51:21:01:31:80:08:45:5f:8d:eb:7c:68:8d:59:9c: 57:b2:5a:d4:98:64:ce:96:58:09:10:d8:26:d4:46:83:fb:27: 01:69:1f:35:2c:ec:ed:2f:97:87:79:81:0a:50:17:0e:c3:d6: 00:08:bc:71:29:6d:9d:21:77:db:b5:12:fa:fb:f4:6a:7a:c6: a1:9e:69:87:8d:0c:0a:d8:f0:ba:13:01:e0:1d:82:ab:70:33: 2a:0d:3a:bf:79:6f:1f:83:59:3e:fc:9d:45:8a:2c:44:31:0e: 26:aa:ee:9a:dd:1a:4d:55:6b:80:dc:98:e4:20:85:f5:cf:79: ec:c5:f7:9c:8f:f4:4a:f0:46:5d:ba:87:17:fc:60:52:ea:d1: bd:a1:af:04:be:77:7f:81:60:73:5d:8f:ba:69:fa:84:84:bf: eb:a5:ad:f9:96:df:1e:c0:22:3b:a7:3a:43:ab:3a:78:9b:50: 76:01:9a:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g1dgCEBb3i9t4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NmY4NzQ0YzAtZGJlYy00ODEwLWE0MzUtZjMwZmM2Y2IxMmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZz89S3xiP9HHYd0e30LoYrL/7iAjrLHmxFq wvLwec2DRRSpnXJ1RiyS7aORbnSZxjSBO2MnERn78tGDlMGlSG+Hr1DV1Oa+9l4I 2ewxgXLLhQ2N8cCqWp5qiWMD2erPh/idy01otrJk9aLCN43g12HOxS9nU55rKGpz FG8P3DKDAp0ufVl4LdhcoSGiMl9H5jPzCLKqCYqwmMNzUUlS5NdPVj3pr4Mmk9De 87IJ1gwSGhBQBwoiSKdTA4k0xVpDIogGbPaWknd7T+zrTaUnpVI9VZMg1ZcdVOZK xddK04q6XoKTeFKhAwK+9pc8mskyLfJtzYH6kyuG8S09j1tvuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlpbiUy9K6+q+N6H6YL2oftoaRQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjY0MmE2ODctYTM4Ni0z Y2U1LTgyMDUtMTA2NzQ1OGYwMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKI6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIId8MI+QtPiM94kaMQSxOYa79TuRJa/zeNAMrzb3Nxvb4KNpJpdK71 6QmNIGx99rSGpz4KaBeWfXxznD7stKGvwJ4HqG5MngDYtVEhATGACEVfjet8aI1Z nFeyWtSYZM6WWAkQ2CbURoP7JwFpHzUs7O0vl4d5gQpQFw7D1gAIvHEpbZ0hd9u1 Evr79Gp6xqGeaYeNDArY8LoTAeAdgqtwMyoNOr95bx+DWT78nUWKLEQxDiaq7prd Gk1Va4DcmOQghfXPeezF95yP9ErwRl26hxf8YFLq0b2hrwS+d3+BYHNdj7pp+oSE v+ulrfmW3x7AIjunOkOrOnibUHYBmrc= -----END CERTIFICATE-----Generated at Wed Oct 14 15:35:53 2026 by rpki-client