$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa File: ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa (raw, json) Hash identifier: 9/qL5cKmwMZ5SThkeDsY+1Png0/4HdKSJV/U7nhHdAE= Subject key identifier: EE:E0:62:F8:A4:A1:37:30:CF:FE:08:B2:84:D5:CC:62:C6:43:4F:BB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E3601800256A4792B59A8A660 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 7029 IP address blocks: 40.132.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:01:80:02:56:a4:79:2b:59:a8:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=3929625c-e9f4-4ed7-b496-48a1a82c44ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:31:f7:c2:78:68:86:4e:7d:4c:67:b5:03:ec: de:2a:5b:6a:28:aa:e5:8e:76:3c:c3:35:82:28:b2: b3:2d:f7:2d:35:8d:e4:b8:d7:80:68:1e:a4:9e:2f: c6:3e:12:73:47:8a:d2:45:04:85:63:e7:17:b9:6b: d7:70:08:35:1b:cc:fb:15:03:ab:a3:47:3f:0c:1a: c1:4d:47:a3:89:53:13:eb:02:2a:01:ed:6d:72:e5: f7:3d:df:86:fe:ed:36:94:b2:af:ad:4c:ad:d5:f6: 36:e0:b4:1e:86:0f:57:53:26:7a:1d:e8:7e:90:4f: 01:a1:bd:a2:c3:04:eb:1d:5c:e1:e1:08:fa:b0:10: 64:8b:04:59:7a:43:d4:f1:cc:3c:45:32:cf:22:09: ed:9f:79:93:4b:d4:01:e4:98:e8:2d:48:e4:3c:64: 10:d6:23:3e:52:fd:ec:74:0c:18:b0:c8:87:4b:76: 66:19:5b:bf:63:3c:10:b2:14:b7:38:6a:53:9b:f4: 60:45:6e:d8:44:5c:04:a4:77:71:1b:c3:84:de:03: 95:ef:f9:f3:a6:e9:b1:ba:01:b9:25:47:a5:f6:61: ee:2c:6f:bb:bd:33:3c:00:4c:51:af:4c:a6:b5:be: 15:49:de:26:0b:7f:40:fd:c2:bd:1b:1c:f8:e0:61: 06:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E0:62:F8:A4:A1:37:30:CF:FE:08:B2:84:D5:CC:62:C6:43:4F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff817a9b-3356-3ff3-8e13-e03b44f3faaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.132.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d0:24:97:5a:fb:b2:1d:e7:45:4c:7f:d0:3f:36:a5:f4:5a: f9:d6:49:7b:95:d3:0c:4f:c3:44:1b:7f:ae:d6:ec:1a:9a:23: b8:e1:df:3b:de:74:b7:80:61:9e:69:4a:78:7f:54:2d:42:2c: 28:23:2a:7a:ae:28:54:a7:1e:79:56:b6:ef:d9:f2:ee:be:0c: c4:75:f0:41:44:37:df:b2:86:ca:6a:84:05:0c:b3:57:65:b7: 15:df:9f:b8:67:24:7c:3a:a0:a6:32:c9:e3:78:71:bb:16:34: 80:74:82:64:3c:28:ec:b5:ba:a5:ed:c6:33:ba:5a:79:4c:bc: 0b:f3:4b:a1:75:c1:15:37:dc:4c:7c:88:b8:9c:be:9e:99:17: f6:5e:2d:38:59:52:26:15:04:ff:87:f0:d5:1c:ec:9f:85:87: 9c:76:86:22:53:5d:9f:e7:ef:9d:a0:00:d0:22:9f:95:f7:07: 2c:32:1a:b8:55:3b:63:c1:c8:fd:27:2a:8c:a6:66:ad:b1:0a: d3:a1:43:05:10:12:da:e5:53:a1:1a:3d:37:db:01:1e:69:e2: 5d:e1:81:3c:72:f4:14:a8:db:74:e9:92:33:2d:11:01:4a:9e: 8a:b0:4d:b3:ab:55:b5:65:65:0e:ce:db:c2:fc:67:ce:f5:84: 06:43:24:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AYACVqR5K1mopmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk MzkyOTYyNWMtZTlmNC00ZWQ3LWI0OTYtNDhhMWE4MmM0NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjH3wnhohk59TGe1A+zeKltqKKrljnY8wzWC KLKzLfctNY3kuNeAaB6kni/GPhJzR4rSRQSFY+cXuWvXcAg1G8z7FQOro0c/DBrB TUejiVMT6wIqAe1tcuX3Pd+G/u02lLKvrUyt1fY24LQehg9XUyZ6Heh+kE8Bob2i wwTrHVzh4Qj6sBBkiwRZekPU8cw8RTLPIgntn3mTS9QB5JjoLUjkPGQQ1iM+Uv3s dAwYsMiHS3ZmGVu/YzwQshS3OGpTm/RgRW7YRFwEpHdxG8OE3gOV7/nzpumxugG5 JUel9mHuLG+7vTM8AExRr0ymtb4VSd4mC39A/cK9Gxz44GEGQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7gYvikoTcwz/4IsoTVzGLGQ0+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY4MTdhOWItMzM1Ni0z ZmYzLThlMTMtZTAzYjQ0ZjNmYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKITQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrQJJda+7Id50VMf9A/NqX0WvnWSXuV0wxPw0Qbf67W7BqaI7jh3zve dLeAYZ5pSnh/VC1CLCgjKnquKFSnHnlWtu/Z8u6+DMR18EFEN9+yhspqhAUMs1dl txXfn7hnJHw6oKYyyeN4cbsWNIB0gmQ8KOy1uqXtxjO6WnlMvAvzS6F1wRU33Ex8 iLicvp6ZF/ZeLThZUiYVBP+H8NUc7J+Fh5x2hiJTXZ/n752gANAin5X3BywyGrhV O2PByP0nKoymZq2xCtOhQwUQEtrlU6EaPTfbAR5p4l3hgTxy9BSo23TpkjMtEQFK noqwTbOrVbVlZQ7O28L8Z871hAZDJNc= -----END CERTIFICATE-----Generated at Mon Jul 13 05:50:21 2026 by rpki-client