$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa File: 4c7661b5-4727-3944-9cf3-442581b9861b.roa (raw, json) Hash identifier: EuB52UJuxlxcXu9k3YFE9Sn+aPPQiNBMtZ7LnSfMG9M= Subject key identifier: 9A:37:89:AA:0B:AD:E0:58:9F:1F:8E:B9:50:C8:A4:A1:AB:25:DD:BC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D723A8F1E3502853A5000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 40.138.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:72:3a:8f:1e:35:02:85:3a:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=9b19f231-35b1-4c22-b057-83538b95b8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:8f:b8:e3:82:95:e3:5d:fc:ba:09:f3:2e: f4:46:51:8e:fa:79:f4:6f:4c:d2:2e:ee:f1:3a:2d: ae:13:d6:f8:da:f8:fc:5e:d7:3a:fd:e8:b4:64:e6: 13:0f:d4:10:6b:fa:a2:2c:46:67:86:1d:e6:91:9b: 63:af:c9:1d:ad:f4:c6:20:4c:f5:73:a9:2e:6b:b3: d2:90:31:8e:02:78:5f:e2:19:16:55:1f:fb:50:71: 75:d4:b4:4c:88:87:12:b5:27:3d:b8:4d:8b:f9:0a: 9f:d2:92:0b:6a:14:dd:bf:04:42:5b:0a:3f:b3:d6: 73:45:b2:a5:11:5a:1c:8a:9d:66:85:b7:61:8e:45: c5:f7:2e:e3:26:a7:03:52:d6:73:d9:2c:e4:54:3b: db:52:d0:04:0b:57:04:d4:12:23:8b:d6:38:60:9b: ac:7c:58:88:39:7d:e9:f3:47:4f:b0:d5:b7:ad:a2: 49:02:26:b5:4e:e7:1d:4b:37:37:46:7c:f9:ed:e7: 0f:ac:73:63:5e:8e:64:8c:d9:2f:f3:dd:09:0e:b7: 9d:6a:5f:11:04:e2:a5:f4:2d:9f:c6:47:81:e7:42: 39:10:01:6f:07:b2:59:1c:f9:c8:2e:7f:be:aa:eb: 9c:5c:c0:ce:ee:81:b4:c9:27:44:42:20:0a:f7:83: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:37:89:AA:0B:AD:E0:58:9F:1F:8E:B9:50:C8:A4:A1:AB:25:DD:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:79:5d:35:42:5d:14:b3:7d:27:81:39:ce:e5:7d:ba:02:a5: 5a:e3:6b:d5:20:4d:b9:36:ef:11:83:39:89:55:ea:90:23:a3: c0:c9:b2:31:2c:82:d9:0d:e5:0f:bb:75:82:41:19:12:44:d9: 76:45:75:c7:42:9c:66:8c:7b:b8:5a:6d:1a:56:f5:f1:41:34: 33:6a:34:5c:da:a6:f2:42:21:1d:dc:02:1d:c6:32:f4:a5:5c: b9:52:61:09:d0:e0:e5:b1:27:80:b4:04:b2:10:f1:82:c5:83: 6d:3f:f6:f6:c9:26:64:c8:0a:d1:02:11:38:85:70:9a:7b:1f: c0:c8:ed:8c:e8:e6:f6:de:de:45:7e:cb:96:ae:ba:55:e0:d2: e6:2f:3c:f8:ad:1e:08:a5:bc:76:73:80:e6:d0:e1:84:ab:d8: be:26:bc:89:e9:e1:be:1f:ee:0a:8c:61:b2:91:89:f8:fe:b1: 75:cc:50:7e:a3:6a:62:e2:68:a8:5f:18:a9:0b:c7:bb:da:c8: f9:6c:52:48:78:76:25:52:32:2d:57:35:58:fa:97:ae:04:38: cf:a3:28:1f:f8:00:32:c2:2b:c0:09:9b:84:b1:3d:df:c9:91: 2f:21:5a:a4:f3:56:7e:8d:cf:17:31:9c:c4:74:36:3f:be:e8: 7b:67:f2:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXI6jx41AoU6UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OWIxOWYyMzEtMzViMS00YzIyLWIwNTctODM1MzhiOTViOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhmPuOOCleNd/LoJ8y70RlGO+nn0b0zSLu7x Oi2uE9b42vj8Xtc6/ei0ZOYTD9QQa/qiLEZnhh3mkZtjr8kdrfTGIEz1c6kua7PS kDGOAnhf4hkWVR/7UHF11LRMiIcStSc9uE2L+Qqf0pILahTdvwRCWwo/s9ZzRbKl EVocip1mhbdhjkXF9y7jJqcDUtZz2SzkVDvbUtAEC1cE1BIji9Y4YJusfFiIOX3p 80dPsNW3raJJAia1TucdSzc3Rnz57ecPrHNjXo5kjNkv890JDredal8RBOKl9C2f xkeB50I5EAFvB7JZHPnILn++quucXMDO7oG0ySdEQiAK94M3SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJo3iaoLreBYnx+OuVDIpKGrJd28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM3NjYxYjUtNDcyNy0z OTQ0LTljZjMtNDQyNTgxYjk4NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ5XTVCXRSzfSeBOc7lfboCpVrja9UgTbk27xGDOYlV6pAjo8DJsjEs gtkN5Q+7dYJBGRJE2XZFdcdCnGaMe7habRpW9fFBNDNqNFzapvJCIR3cAh3GMvSl XLlSYQnQ4OWxJ4C0BLIQ8YLFg20/9vbJJmTICtECETiFcJp7H8DI7Yzo5vbe3kV+ y5auulXg0uYvPPitHgilvHZzgObQ4YSr2L4mvInp4b4f7gqMYbKRifj+sXXMUH6j amLiaKhfGKkLx7vayPlsUkh4diVSMi1XNVj6l64EOM+jKB/4ADLCK8AJm4SxPd/J kS8hWqTzVn6NzxcxnMR0Nj++6Htn8jU= -----END CERTIFICATE-----Generated at Sun Oct 4 23:16:27 2026 by rpki-client