$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe0bef8a-bdac-3f7f-8501-306b6388c917.roa File: fe0bef8a-bdac-3f7f-8501-306b6388c917.roa (raw, json) Hash identifier: uVrL4quRX7lJL4JgGvbWLScSiIBcHvItXiSOyGwxnas= Subject key identifier: DE:EE:9C:84:F5:3F:24:06:2A:BE:52:95:52:6E:54:FD:0A:EF:01:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E35FFBF109A58764E37479200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe0bef8a-bdac-3f7f-8501-306b6388c917.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 7029 IP address blocks: 40.136.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:bf:10:9a:58:76:4e:37:47:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=1252db4a-3c94-44f5-8e51-55ea2fdb61b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:9b:b6:cb:63:7f:57:fe:4e:b9:d9:e2:a0: 76:fa:6a:a0:6e:9d:39:71:64:0e:82:92:86:06:63: 14:55:ed:1f:35:a4:e3:f2:6c:73:7e:77:b1:56:ee: 5f:d5:ac:36:98:8a:b7:96:d0:cc:01:41:29:b5:75: 20:b1:e7:83:de:61:9a:24:bf:00:0e:db:82:67:9a: e4:83:8e:8c:97:c5:3a:3b:68:7a:32:ab:93:55:d7: 54:16:3c:2f:20:43:6a:52:45:db:79:1a:e4:64:88: 25:1b:fc:c1:6c:13:0b:b8:ef:ee:d5:de:03:f2:fe: 15:5d:3a:aa:4d:ee:a2:91:9b:f5:e2:c9:27:48:54: c1:7b:cb:22:26:3b:11:a3:14:5e:b8:f7:af:50:8d: be:4a:8d:5b:83:1e:02:2e:4a:89:80:98:5c:9d:83: 2d:12:3d:18:75:cb:a4:a5:a2:04:66:de:0f:98:7c: a1:28:93:37:d6:96:27:28:91:79:f8:88:df:40:ed: 15:94:29:b8:52:68:2f:6a:96:33:ce:b8:44:77:e2: 86:e9:28:aa:65:42:87:02:f7:70:5f:68:5a:54:2c: 0c:8a:c0:a1:58:60:62:53:26:5b:06:5a:90:64:76: 23:3d:ec:93:4a:96:79:0d:f7:0b:18:db:ad:79:fd: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EE:9C:84:F5:3F:24:06:2A:BE:52:95:52:6E:54:FD:0A:EF:01:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe0bef8a-bdac-3f7f-8501-306b6388c917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:56:30:1c:ea:de:48:a5:02:fc:ce:5c:bd:0c:90:20:e8:d5: c0:e8:17:28:d0:03:45:3f:50:95:59:58:11:70:b4:19:74:35: 1c:37:cb:d0:e6:a3:7d:aa:21:3f:d0:61:55:ff:4f:83:b4:68: 8c:c0:7f:7b:3d:a6:a3:d2:d5:36:16:6d:f6:7b:c4:dd:70:f0: 67:db:09:df:3f:6a:b1:3c:91:b8:ea:fc:03:04:2a:1b:e7:e2: e6:0c:1a:1f:44:45:54:11:29:41:27:5b:a1:30:5a:3b:2d:de: f8:e4:c6:f1:66:67:24:ac:53:42:9e:b8:ed:76:a6:85:0c:50: f2:27:d1:09:09:93:9e:b1:3d:b9:63:ef:e7:3c:b8:ac:85:d4: d1:b9:0f:c1:98:47:d9:19:43:f3:5b:fa:7a:d1:90:63:50:ab: ae:b6:82:c9:b3:8f:7a:0d:d8:73:9e:69:4f:66:dd:9e:e7:47: 4d:e1:70:34:a7:34:08:77:78:c5:8b:53:65:00:06:09:cd:ff: f2:82:a8:07:f5:a1:25:f0:0c:3b:bf:c3:bb:cf:6f:0b:cb:fc: f4:c7:e3:75:98:1d:e2:75:0f:f6:ba:49:6f:85:12:6e:ac:98: 55:70:0a:ad:d8:de:52:34:69:8e:82:a5:43:90:67:57:63:03: 5b:49:a7:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/78Qmlh2TjdHkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk MTI1MmRiNGEtM2M5NC00NGY1LThlNTEtNTVlYTJmZGI2MWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxqbtstjf1f+TrnZ4qB2+mqgbp05cWQOgpKG BmMUVe0fNaTj8mxzfnexVu5f1aw2mIq3ltDMAUEptXUgseeD3mGaJL8ADtuCZ5rk g46Ml8U6O2h6MquTVddUFjwvIENqUkXbeRrkZIglG/zBbBMLuO/u1d4D8v4VXTqq Te6ikZv14sknSFTBe8siJjsRoxReuPevUI2+So1bgx4CLkqJgJhcnYMtEj0Ydcuk paIEZt4PmHyhKJM31pYnKJF5+IjfQO0VlCm4UmgvapYzzrhEd+KG6SiqZUKHAvdw X2haVCwMisChWGBiUyZbBlqQZHYjPeyTSpZ5DfcLGNutef1VFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7unIT1PyQGKr5SlVJuVP0K7wEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmUwYmVmOGEtYmRhYy0z ZjdmLTg1MDEtMzA2YjYzODhjOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKIioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBWMBzq3kilAvzOXL0MkCDo1cDoFyjQA0U/UJVZWBFwtBl0NRw3y9Dm o32qIT/QYVX/T4O0aIzAf3s9pqPS1TYWbfZ7xN1w8GfbCd8/arE8kbjq/AMEKhvn 4uYMGh9ERVQRKUEnW6EwWjst3vjkxvFmZySsU0KeuO12poUMUPIn0QkJk56xPblj 7+c8uKyF1NG5D8GYR9kZQ/Nb+nrRkGNQq662gsmzj3oN2HOeaU9m3Z7nR03hcDSn NAh3eMWLU2UABgnN//KCqAf1oSXwDDu/w7vPbwvL/PTH43WYHeJ1D/a6SW+FEm6s mFVwCq3Y3lI0aY6CpUOQZ1djA1tJpwI= -----END CERTIFICATE-----Generated at Mon Jul 13 07:21:35 2026 by rpki-client