$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa File: ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa (raw, json) Hash identifier: NRqjBZdzFH8dNMQPijs1dqZs8PKuBCTpe3KiottuizM= Subject key identifier: 20:97:FD:9F:A1:53:13:15:74:2D:F0:6A:7A:19:9F:C3:71:47:20:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED8648B74097728C96AD79780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 40.132.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:8b:74:09:77:28:c9:6a:d7:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=476640b8-98a4-4cdf-a73e-5216ac586b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:aa:b3:81:66:e2:5e:6b:a7:cb:68:5b:ba: 37:35:3c:75:09:02:e7:6f:f1:53:16:9c:48:bb:b8: d5:dc:37:35:fc:d0:fd:79:a7:1f:3c:6a:9d:bd:b8: 0a:76:b6:be:c8:90:ed:32:f2:c5:3e:05:1a:e7:ca: 06:2b:7a:23:cd:2d:97:72:e2:57:3e:c4:38:f0:e5: 3c:a9:e8:7e:32:35:9f:1b:e3:c4:d8:2d:0e:8d:33: 87:68:b3:5b:fb:7e:a5:1d:a0:26:53:44:f8:79:3c: 03:ec:8d:1f:c9:cf:30:d5:03:44:e8:9f:1a:a5:49: 91:38:a3:ab:03:0f:14:ee:8e:a2:67:07:69:e6:a0: 68:50:8c:b0:a0:09:0b:75:a5:b2:b7:70:6f:64:3d: a1:c2:07:95:71:b6:87:1f:69:bb:3b:14:a0:e2:7e: 7d:9c:41:58:b0:74:3f:96:c7:df:10:76:fe:29:58: 49:03:19:80:da:04:e9:0b:76:4d:b5:03:1a:72:7c: b6:5c:28:db:a6:99:d5:23:59:59:37:80:81:83:b0: 6f:6b:a0:95:1c:ed:af:5a:41:72:ff:13:47:b1:bf: a0:0b:ca:89:d4:2c:8e:e4:41:07:ea:d4:19:b0:46: 67:1d:ef:f7:f8:4d:f7:63:66:47:de:8c:f5:49:9c: 71:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:97:FD:9F:A1:53:13:15:74:2D:F0:6A:7A:19:9F:C3:71:47:20:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.132.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:cd:07:08:63:8e:6c:ba:4c:9e:ea:29:65:f0:02:96:c6:02: ab:8e:45:63:01:1e:02:63:1d:9f:7c:cf:e8:38:33:2b:b0:58: eb:4f:d6:0a:f4:cd:45:97:cb:e0:bb:73:ad:ef:c8:43:6f:60: 83:4a:60:6d:a4:ec:7f:f8:af:6b:db:38:9b:8b:03:90:c2:7e: 5f:9a:ab:45:f9:e8:6f:ea:ae:5b:1c:21:40:89:15:e8:32:b3: 10:b8:9d:32:de:15:63:51:a9:36:8c:f9:8d:a7:4d:21:ad:bf: ae:68:93:68:89:ed:be:ce:9f:f7:38:b3:64:a7:5f:53:f1:ae: c6:58:57:c8:70:bd:93:49:c9:cc:79:0c:d0:7a:b0:68:5e:e8: 6a:d2:cd:3b:a1:ab:fd:a5:74:4b:5f:bb:f6:2a:1d:93:51:0c: 2f:90:6d:ac:b0:94:4c:d1:76:5d:d0:f7:5d:57:14:27:b7:ea: d1:26:bf:73:b1:55:4c:ce:74:4a:64:66:cc:b5:19:99:03:fc: 08:db:ae:a9:cc:33:49:9a:c7:e4:d6:23:02:24:f5:e7:2b:54: 7b:c2:85:a5:39:69:ac:11:8f:bd:11:fd:6e:54:6c:3a:9f:a0: 87:9d:87:25:4d:00:20:f9:c4:11:ba:73:5d:61:83:46:60:d5: 19:5d:00:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZIt0CXcoyWrXl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NDc2NjQwYjgtOThhNC00Y2RmLWE3M2UtNTIxNmFjNTg2YjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvyqs4Fm4l5rp8toW7o3NTx1CQLnb/FTFpxI u7jV3Dc1/ND9eacfPGqdvbgKdra+yJDtMvLFPgUa58oGK3ojzS2XcuJXPsQ48OU8 qeh+MjWfG+PE2C0OjTOHaLNb+36lHaAmU0T4eTwD7I0fyc8w1QNE6J8apUmROKOr Aw8U7o6iZwdp5qBoUIywoAkLdaWyt3BvZD2hwgeVcbaHH2m7OxSg4n59nEFYsHQ/ lsffEHb+KVhJAxmA2gTpC3ZNtQMacny2XCjbppnVI1lZN4CBg7Bva6CVHO2vWkFy /xNHsb+gC8qJ1CyO5EEH6tQZsEZnHe/3+E33Y2ZH3oz1SZxxDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCX/Z+hUxMVdC3wanoZn8NxRyD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY4MTdhOWItMzM1Ni0z ZmYzLThlMTMtZTAzYjQ0ZjNmYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKITQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7NBwhjjmy6TJ7qKWXwApbGAquORWMBHgJjHZ98z+g4MyuwWOtP1gr0 zUWXy+C7c63vyENvYINKYG2k7H/4r2vbOJuLA5DCfl+aq0X56G/qrlscIUCJFegy sxC4nTLeFWNRqTaM+Y2nTSGtv65ok2iJ7b7On/c4s2SnX1PxrsZYV8hwvZNJycx5 DNB6sGhe6GrSzTuhq/2ldEtfu/YqHZNRDC+QbaywlEzRdl3Q911XFCe36tEmv3Ox VUzOdEpkZsy1GZkD/AjbrqnMM0max+TWIwIk9ecrVHvChaU5aawRj70R/W5UbDqf oIedhyVNACD5xBG6c11hg0Zg1RldAAM= -----END CERTIFICATE-----Generated at Thu Aug 27 12:25:56 2026 by rpki-client