$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/030d9054-3788-368e-bdb2-e988acaf43e2.roa File: 030d9054-3788-368e-bdb2-e988acaf43e2.roa (raw, json) Hash identifier: QHdyJHSvNnYY1qQ+kxc4Ej1IkXbPPy3Il27n69NVGWo= Subject key identifier: BD:C5:CF:4F:9F:CA:6C:8F:C1:E2:BB:FB:93:2F:90:54:8A:A2:93:A7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A67647A2559EC348FF600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/030d9054-3788-368e-bdb2-e988acaf43e2.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 40.139.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:67:64:7a:25:59:ec:34:8f:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=5094e52a-6762-4eb8-a3be-230f8ab949df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e2:16:dc:eb:f1:16:bd:d7:3a:7d:bd:18:d4: c3:d8:87:90:7e:c8:87:ea:e0:70:6d:2e:40:39:7c: a3:67:f6:2c:b9:86:eb:4b:31:8a:3e:8e:6e:60:da: ea:8f:71:1f:1c:a1:45:c2:c8:b1:20:f0:97:c6:f2: bf:8a:0b:ce:80:6c:71:04:5f:dd:ae:63:09:3b:45: b8:c5:64:6d:bf:b0:98:e1:f1:67:ec:20:50:30:c4: 75:f4:22:8e:24:1c:79:72:b6:52:a1:58:46:d5:6d: 7c:b2:82:92:80:67:95:6b:9f:76:14:41:be:8a:ed: 5f:47:17:06:1b:b8:47:18:e8:92:09:94:6a:3f:b3: 60:d3:3a:8b:46:52:1b:30:e5:d9:b9:eb:a6:7c:8f: d5:68:09:90:a8:96:60:dc:cf:3e:b2:c4:20:0f:72: b5:b1:bc:a1:d0:1c:5d:73:6c:0c:d3:09:92:b8:35: 60:a9:94:a7:94:f0:11:27:ea:bc:f1:b0:5a:bd:9a: 52:21:7f:1a:b2:99:2c:d5:db:75:92:41:9c:5e:ad: dd:12:e5:14:c5:11:07:6c:2d:0b:2e:3b:28:2f:cc: a4:02:48:8c:58:62:e6:61:31:31:da:7a:23:af:ee: 17:6b:f5:61:13:d8:ea:23:4d:2e:fa:c1:a8:60:a4: 74:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C5:CF:4F:9F:CA:6C:8F:C1:E2:BB:FB:93:2F:90:54:8A:A2:93:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/030d9054-3788-368e-bdb2-e988acaf43e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.139.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:74:e0:90:f9:32:52:55:95:e7:7c:7d:6e:02:8a:bb:4e:44: 3e:96:7a:6d:cf:77:74:85:06:4b:9d:10:c3:da:4a:0a:6b:be: f1:8e:3c:62:3c:a2:8c:c5:53:bc:5b:00:1a:19:46:7b:d3:13: fd:c9:85:cf:f3:85:91:11:23:d5:1e:5a:9f:db:2f:45:01:30: 3d:1a:7b:d5:5f:78:2b:8e:e8:13:39:99:4d:72:5c:b4:21:20: 2d:2e:a9:35:b9:56:36:97:55:db:47:4a:53:4f:59:3c:1a:57: ae:a9:93:43:fa:82:98:f8:d0:b6:89:1e:2f:de:80:9b:a2:d3: 2e:c8:b4:c5:c7:39:b5:bb:93:e6:c8:e6:52:b3:33:d7:9b:40: d8:85:b2:a3:0c:6c:41:f9:b0:9c:23:2a:66:b1:72:67:12:e1: 28:01:fa:a3:b6:19:cb:b8:e0:4d:ad:30:88:98:a4:85:bf:c5: 26:a3:51:45:f7:5e:5c:9e:77:49:48:64:4b:95:72:bf:a0:5c: 10:2d:3f:e9:5e:42:43:68:dd:cb:20:a3:72:f0:48:73:df:c3: 97:e9:7f:25:03:b2:3a:3a:f4:27:7a:63:c0:ab:4b:92:73:b7: 98:63:bf:56:d3:d7:9e:16:d2:1c:e0:31:7f:6d:24:fd:48:86: 50:13:e8:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmdkeiVZ7DSP9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTA5NGU1MmEtNjc2Mi00ZWI4LWEzYmUtMjMwZjhhYjk0OWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeIW3OvxFr3XOn29GNTD2IeQfsiH6uBwbS5A OXyjZ/YsuYbrSzGKPo5uYNrqj3EfHKFFwsixIPCXxvK/igvOgGxxBF/drmMJO0W4 xWRtv7CY4fFn7CBQMMR19CKOJBx5crZSoVhG1W18soKSgGeVa592FEG+iu1fRxcG G7hHGOiSCZRqP7Ng0zqLRlIbMOXZueumfI/VaAmQqJZg3M8+ssQgD3K1sbyh0Bxd c2wM0wmSuDVgqZSnlPARJ+q88bBavZpSIX8aspks1dt1kkGcXq3dEuUUxREHbC0L LjsoL8ykAkiMWGLmYTEx2nojr+4Xa/VhE9jqI00u+sGoYKR0GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3Fz0+fymyPweK7+5MvkFSKopOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDMwZDkwNTQtMzc4OC0z NjhlLWJkYjItZTk4OGFjYWY0M2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIvRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF04JD5MlJVled8fW4CirtORD6Wem3Pd3SFBkudEMPaSgprvvGOPGI8 oozFU7xbABoZRnvTE/3Jhc/zhZERI9UeWp/bL0UBMD0ae9VfeCuO6BM5mU1yXLQh IC0uqTW5VjaXVdtHSlNPWTwaV66pk0P6gpj40LaJHi/egJui0y7ItMXHObW7k+bI 5lKzM9ebQNiFsqMMbEH5sJwjKmaxcmcS4SgB+qO2Gcu44E2tMIiYpIW/xSajUUX3 Xlyed0lIZEuVcr+gXBAtP+leQkNo3csgo3LwSHPfw5fpfyUDsjo69Cd6Y8CrS5Jz t5hjv1bT154W0hzgMX9tJP1IhlAT6AY= -----END CERTIFICATE-----Generated at Thu Mar 26 08:34:43 2026 by rpki-client