$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe0bef8a-bdac-3f7f-8501-306b6388c917.roa File: fe0bef8a-bdac-3f7f-8501-306b6388c917.roa (raw, json) Hash identifier: svMWB50R7S4HIvYXL+RCgRKu41lzIIOqD3Vha22pL6w= Subject key identifier: 5F:63:AE:0D:C7:90:9B:51:EC:DF:01:47:D3:31:25:B1:FF:B4:46:03 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED862928DC9658920F162F180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe0bef8a-bdac-3f7f-8501-306b6388c917.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 40.136.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:92:8d:c9:65:89:20:f1:62:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=b70b0843-42a5-4531-ba2f-8d5c3c9233eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3d:f3:5b:75:d2:97:0e:a1:7a:3f:02:68:16: 99:95:31:0b:1d:1d:cf:08:78:ba:c5:6d:f7:99:90: 48:53:8e:25:16:84:93:33:a2:51:5c:79:a3:89:0d: 58:ba:10:4c:f7:67:7a:21:f7:c5:c1:97:61:80:0b: 33:05:f3:b0:b2:c1:55:fd:c0:8d:4a:6e:7a:9f:d4: 1f:a5:45:dd:d7:3f:db:b7:80:4b:6a:c5:cc:7a:0a: 11:c4:97:55:f4:0a:6e:2e:30:62:6e:2b:ef:73:5d: 77:1a:58:f7:94:0d:bd:14:7a:f9:99:3d:25:b0:95: a0:db:75:c9:51:53:de:4a:5d:d5:fc:b2:61:16:53: 3c:e2:76:61:0b:23:fb:a2:d2:35:58:d6:53:87:e8: 17:b4:a1:2b:79:83:cd:39:c9:63:89:bc:16:cb:5f: 19:77:05:81:5b:33:23:73:f0:ae:fe:55:01:61:1a: c0:91:ca:81:bd:0a:a9:c8:3c:b8:3a:88:d1:e2:43: 54:58:da:e7:c6:a0:1a:9c:45:aa:38:48:21:c6:70: 53:0d:d1:a2:28:55:51:cb:c2:0d:c3:6d:0a:26:68: ac:31:12:6e:70:94:c3:6a:a9:32:c5:dd:06:b0:e8: 21:7f:56:54:80:d1:77:7b:fe:a9:d3:50:29:97:c3: f4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:63:AE:0D:C7:90:9B:51:EC:DF:01:47:D3:31:25:B1:FF:B4:46:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe0bef8a-bdac-3f7f-8501-306b6388c917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:99:eb:80:f1:48:45:79:38:4a:91:78:03:de:c8:f5:eb:80: 67:06:cc:48:72:77:38:06:7d:d3:50:c7:06:8b:e2:5e:ec:f9: 31:3b:a8:96:68:e5:3a:50:67:be:25:4d:88:51:6f:99:58:54: 18:0e:8e:fe:80:ed:ea:df:a4:8b:61:4f:33:ab:91:fc:90:e6: 15:0d:3b:c5:35:01:57:80:da:fb:df:2c:46:64:1f:83:50:2d: 4f:44:8c:c6:93:74:c7:8f:dc:0c:12:1c:5e:e0:a0:23:4c:6b: 75:f2:b4:e7:c7:b0:eb:95:da:d5:e2:18:cc:17:b4:ba:d5:d1: 2d:0c:3f:45:33:04:4c:2a:0e:e1:ae:4b:81:84:c5:a0:e9:10: 18:53:f3:31:aa:d8:1a:3f:7c:92:3d:f9:a9:e6:e8:14:4f:2b: 44:f5:a2:a1:1f:50:4c:ec:b3:01:f0:04:9e:05:fa:79:c3:ac: 1f:ac:ea:2c:b3:b8:5b:99:f2:6e:66:7f:a0:c7:1c:f8:1c:8f: 84:b6:68:cd:6e:5b:5a:1e:88:fc:c6:9d:f2:4a:5c:e4:57:b4: 22:4c:8c:89:72:a5:f3:f9:1a:c1:af:e5:9b:53:1d:28:0e:60: 55:28:4a:c2:73:98:b1:9a:d7:b3:36:2e:79:3d:b4:b1:a6:9a: d8:51:2c:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYpKNyWWJIPFi8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YjcwYjA4NDMtNDJhNS00NTMxLWJhMmYtOGQ1YzNjOTIzM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T3zW3XSlw6hej8CaBaZlTELHR3PCHi6xW33 mZBIU44lFoSTM6JRXHmjiQ1YuhBM92d6IffFwZdhgAszBfOwssFV/cCNSm56n9Qf pUXd1z/bt4BLasXMegoRxJdV9ApuLjBibivvc113Glj3lA29FHr5mT0lsJWg23XJ UVPeSl3V/LJhFlM84nZhCyP7otI1WNZTh+gXtKEreYPNOcljibwWy18ZdwWBWzMj c/Cu/lUBYRrAkcqBvQqpyDy4OojR4kNUWNrnxqAanEWqOEghxnBTDdGiKFVRy8IN w20KJmisMRJucJTDaqkyxd0GsOghf1ZUgNF3e/6p01Apl8P0gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9jrg3HkJtR7N8BR9MxJbH/tEYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmUwYmVmOGEtYmRhYy0z ZjdmLTg1MDEtMzA2YjYzODhjOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKIioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESZ64DxSEV5OEqReAPeyPXrgGcGzEhydzgGfdNQxwaL4l7s+TE7qJZo 5TpQZ74lTYhRb5lYVBgOjv6A7erfpIthTzOrkfyQ5hUNO8U1AVeA2vvfLEZkH4NQ LU9EjMaTdMeP3AwSHF7goCNMa3XytOfHsOuV2tXiGMwXtLrV0S0MP0UzBEwqDuGu S4GExaDpEBhT8zGq2Bo/fJI9+anm6BRPK0T1oqEfUEzsswHwBJ4F+nnDrB+s6iyz uFuZ8m5mf6DHHPgcj4S2aM1uW1oeiPzGnfJKXORXtCJMjIlypfP5GsGv5ZtTHSgO YFUoSsJzmLGa17M2Lnk9tLGmmthRLLg= -----END CERTIFICATE-----Generated at Thu Aug 27 12:29:06 2026 by rpki-client