$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0866f524-d9d4-3406-8c4b-94f6c357db6e.roa File: 0866f524-d9d4-3406-8c4b-94f6c357db6e.roa (raw, json) Hash identifier: U3NB/u0AAh/m1NYcbadFPPM26KXw/+etD/cCL76sMvg= Subject key identifier: 1E:51:63:B9:A9:92:6E:AD:D1:A0:AB:1E:DF:07:DF:7B:C2:1C:04:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7C4DB4F2AF75EC252520 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0866f524-d9d4-3406-8c4b-94f6c357db6e.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 393278 IP address blocks: 40.136.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7c:4d:b4:f2:af:75:ec:25:25:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=7bf1e4ae-557f-4ece-97e4-3d3b8c6cd5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:1f:b3:43:a4:df:e1:42:88:df:14:b6:34: 4c:f1:ec:f2:f0:c9:68:44:7d:bc:4d:4f:b8:08:90: f9:bb:24:62:79:a1:33:53:dd:2a:ce:c4:8f:f4:8b: f9:f8:b0:41:89:f0:d0:5b:e7:fd:84:29:8e:46:15: af:aa:28:0d:0d:c9:f2:b9:b5:1b:fe:52:ce:28:08: c2:72:f8:4f:46:06:50:d6:e2:72:c5:37:7b:30:8a: 73:89:c6:c5:6a:d1:25:2a:60:15:23:d3:4f:68:40: 89:34:02:f4:39:99:78:27:59:97:8b:d5:10:31:9b: d5:68:e1:57:96:14:ec:84:51:f2:0f:6c:00:a0:b7: d5:a8:df:a6:c3:99:bc:cb:4e:a2:42:6f:22:06:48: e1:57:c6:02:5d:f0:10:bf:48:5d:0c:58:6e:9c:c2: 2d:40:44:6d:09:99:e2:02:f9:5d:5d:19:df:05:f4: f7:fe:3d:d1:29:78:95:ee:7c:96:a8:22:f6:bc:c5: db:12:69:0f:5a:ad:7a:c8:ba:7c:97:1d:24:c6:61: 65:16:dd:c3:e1:ac:53:97:85:78:42:3f:3b:74:cc: 25:15:c2:6b:d7:c9:05:f4:68:36:e3:a4:c9:04:51: 9b:6a:36:72:a3:df:c1:3d:d2:64:90:f0:a1:e4:3e: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:51:63:B9:A9:92:6E:AD:D1:A0:AB:1E:DF:07:DF:7B:C2:1C:04:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0866f524-d9d4-3406-8c4b-94f6c357db6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:87:a8:45:11:11:b4:59:3c:02:ce:f5:e7:b6:6a:4f:e3:d7: 5f:cf:00:aa:6e:7e:f9:fd:1a:7d:f0:b2:8f:c5:ec:82:9d:29: e3:63:63:99:c3:0c:cd:02:be:2c:63:a9:c3:9f:47:20:43:a0: fd:ab:1b:ae:ed:42:34:3e:8b:24:5f:ad:ed:bc:0e:4a:49:24: 73:b5:a5:30:80:e9:35:5f:10:de:ef:da:86:c0:42:fb:b9:38: 5a:52:8f:eb:25:5a:21:38:79:c3:62:83:dd:65:3d:b1:49:3f: ed:36:98:b9:61:b5:1a:4f:00:91:9e:ce:a8:47:0e:70:6d:10: 6b:55:af:42:84:d3:e0:3e:b2:4a:09:27:c1:b6:ec:34:3e:6e: b3:7a:50:f6:ef:76:8e:e4:07:93:c6:70:50:73:37:ca:6d:0f: 78:5f:39:96:fe:d4:eb:d4:22:a3:29:bd:01:f6:a2:1e:38:f3: 22:db:a5:a3:b0:d1:66:b1:49:94:cb:9b:b6:fa:c8:a3:11:5d: 76:02:1d:c4:db:ec:80:37:9b:93:d1:70:45:57:26:c2:ac:a5: fb:d1:ab:a6:fb:11:e0:0b:77:91:1a:92:b4:8c:5e:4e:fc:68: f5:4b:de:7b:06:f2:c1:a3:1c:78:dd:6d:19:33:b4:b2:34:b2: 8a:46:9b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnxNtPKvdewlJSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk N2JmMWU0YWUtNTU3Zi00ZWNlLTk3ZTQtM2QzYjhjNmNkNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntIfs0Ok3+FCiN8UtjRM8ezy8MloRH28TU+4 CJD5uyRieaEzU90qzsSP9Iv5+LBBifDQW+f9hCmORhWvqigNDcnyubUb/lLOKAjC cvhPRgZQ1uJyxTd7MIpzicbFatElKmAVI9NPaECJNAL0OZl4J1mXi9UQMZvVaOFX lhTshFHyD2wAoLfVqN+mw5m8y06iQm8iBkjhV8YCXfAQv0hdDFhunMItQERtCZni AvldXRnfBfT3/j3RKXiV7nyWqCL2vMXbEmkPWq16yLp8lx0kxmFlFt3D4axTl4V4 Qj87dMwlFcJr18kF9Gg246TJBFGbajZyo9/BPdJkkPCh5D6ppwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5RY7mpkm6t0aCrHt8H33vCHAQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDg2NmY1MjQtZDlkNC0z NDA2LThjNGItOTRmNmMzNTdkYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+HqEUREbRZPALO9ee2ak/j11/PAKpufvn9Gn3wso/F7IKdKeNjY5nD DM0CvixjqcOfRyBDoP2rG67tQjQ+iyRfre28DkpJJHO1pTCA6TVfEN7v2obAQvu5 OFpSj+slWiE4ecNig91lPbFJP+02mLlhtRpPAJGezqhHDnBtEGtVr0KE0+A+skoJ J8G27DQ+brN6UPbvdo7kB5PGcFBzN8ptD3hfOZb+1OvUIqMpvQH2oh448yLbpaOw 0WaxSZTLm7b6yKMRXXYCHcTb7IA3m5PRcEVXJsKspfvRq6b7EeALd5EakrSMXk78 aPVL3nsG8sGjHHjdbRkztLI0sopGm1o= -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:25 2026 by rpki-client