$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa File: ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa (raw, json) Hash identifier: 8wt8+lQJ6lgpGT6HK52thCURGmA4LaJxkLtU5iYOEbg= Subject key identifier: D5:4C:94:AB:C7:CE:30:2B:17:7F:A7:1E:40:80:B4:46:BE:20:4A:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A502872654D86FCB2821500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 40.132.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:28:72:65:4d:86:fc:b2:82:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=b451d163-aad2-4f68-b0f3-162d79d989d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:98:b1:ce:6a:8f:af:a1:bc:72:55:c5:b3:b8: 54:89:0a:89:cf:aa:d3:37:75:04:09:03:41:ee:27: 2d:fb:1a:f4:26:38:e5:59:f2:a0:a3:26:88:80:95: 03:a5:34:73:9b:5b:8f:8b:bf:88:1c:ab:66:da:0b: e4:c8:dd:cf:43:3e:ab:6c:02:fb:3b:4c:8a:27:1d: c5:fe:ee:16:cd:ef:5e:75:38:4b:ad:4e:fa:c8:8d: e2:d3:ac:cb:44:f7:56:75:52:29:9e:b3:b7:dc:71: 24:5e:87:87:3b:6a:9c:23:33:07:df:8d:2e:2a:cf: 40:7d:27:f5:6a:11:5d:d7:4a:d1:d7:15:b0:b5:62: 88:5e:71:b2:4f:48:b9:bf:60:81:0a:8a:bd:f7:a2: b3:d7:ab:4a:b6:ba:0b:fd:88:bb:71:2f:b7:ee:40: 22:36:84:92:2e:17:be:e9:c1:f5:60:55:7b:45:a2: 59:88:7e:66:b3:6b:9b:92:13:a4:5b:77:7e:d1:98: 5a:e0:c4:54:a9:40:f6:2d:34:98:bf:01:21:6e:3e: e0:0c:d3:8f:d8:37:8e:7f:27:c6:25:fd:d1:ce:21: 69:0f:5b:1c:14:b2:c6:e9:2f:0e:f8:51:14:a5:07: ec:b1:21:31:e7:c1:80:33:0f:ee:25:b4:ce:79:2e: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4C:94:AB:C7:CE:30:2B:17:7F:A7:1E:40:80:B4:46:BE:20:4A:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.132.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:19:89:d6:69:95:f5:0b:43:dd:71:c4:b2:65:3a:97:a7:72: 07:7d:75:72:ff:09:f7:36:46:90:61:e0:13:76:a6:4a:f6:d0: 9c:b7:e6:07:f3:e2:34:e3:43:32:d2:57:ee:ac:26:c3:ad:1c: a2:2a:c9:da:e2:c7:90:71:82:f1:dd:b0:2b:c0:0e:89:64:cc: 8e:8c:5c:8b:31:57:ff:3e:75:a8:d9:14:e3:c7:6f:47:48:00: c3:f5:0f:43:33:36:b3:d8:ca:45:27:be:92:33:68:b9:b2:02: 75:c9:f3:7c:56:0f:f2:fb:b7:8f:33:23:a6:2e:91:88:f5:e3: 90:79:72:3a:76:a1:17:05:e6:e7:32:19:60:81:33:61:f9:b8: 78:da:1c:73:01:0d:cb:3f:5a:b8:6a:4a:a2:03:9c:b9:e5:7c: 31:c6:1e:05:05:45:07:ca:e7:72:a2:7d:c3:2c:87:d1:ab:bc: 3f:b1:70:a0:95:eb:72:12:2f:23:71:c6:cb:2f:cb:ff:92:87: cf:a4:1b:df:f0:51:16:20:ae:0d:ad:c1:fd:24:82:4c:e3:cb: 7b:fa:ff:39:41:d4:b6:55:bc:8e:5c:48:19:ad:2f:48:76:c3: d6:0d:35:29:9a:65:65:0e:a7:09:0a:18:8f:9a:b9:ca:5a:a9: 66:6d:bf:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UChyZU2G/LKCFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YjQ1MWQxNjMtYWFkMi00ZjY4LWIwZjMtMTYyZDc5ZDk4OWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpixzmqPr6G8clXFs7hUiQqJz6rTN3UECQNB 7ict+xr0JjjlWfKgoyaIgJUDpTRzm1uPi7+IHKtm2gvkyN3PQz6rbAL7O0yKJx3F /u4Wze9edThLrU76yI3i06zLRPdWdVIpnrO33HEkXoeHO2qcIzMH340uKs9AfSf1 ahFd10rR1xWwtWKIXnGyT0i5v2CBCoq996Kz16tKtroL/Yi7cS+37kAiNoSSLhe+ 6cH1YFV7RaJZiH5ms2ubkhOkW3d+0Zha4MRUqUD2LTSYvwEhbj7gDNOP2DeOfyfG Jf3RziFpD1scFLLG6S8O+FEUpQfssSEx58GAMw/uJbTOeS5ACwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVMlKvHzjArF3+nHkCAtEa+IErhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY4MTdhOWItMzM1Ni0z ZmYzLThlMTMtZTAzYjQ0ZjNmYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKITQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEZidZplfULQ91xxLJlOpencgd9dXL/Cfc2RpBh4BN2pkr20Jy35gfz 4jTjQzLSV+6sJsOtHKIqydrix5BxgvHdsCvADolkzI6MXIsxV/8+dajZFOPHb0dI AMP1D0MzNrPYykUnvpIzaLmyAnXJ83xWD/L7t48zI6YukYj145B5cjp2oRcF5ucy GWCBM2H5uHjaHHMBDcs/WrhqSqIDnLnlfDHGHgUFRQfK53KifcMsh9GrvD+xcKCV 63ISLyNxxssvy/+Sh8+kG9/wURYgrg2twf0kgkzjy3v6/zlB1LZVvI5cSBmtL0h2 w9YNNSmaZWUOpwkKGI+aucpaqWZtv+w= -----END CERTIFICATE-----Generated at Tue Oct 13 09:12:53 2026 by rpki-client