$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e065f2f-3c2a-3c3f-92f5-a9467ebae002.roa File: 4e065f2f-3c2a-3c3f-92f5-a9467ebae002.roa (raw, json) Hash identifier: 2F7s+weYcQMWNsxkfEztcDdCevPMVrAegKkmUpSXOC4= Subject key identifier: A2:AD:9A:28:29:5E:8A:77:41:83:07:A5:A4:0C:61:8F:3F:50:FB:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F864BF43E0C10184A71C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e065f2f-3c2a-3c3f-92f5-a9467ebae002.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 40.142.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:86:4b:f4:3e:0c:10:18:4a:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=b22140ff-b1f5-476b-b7d1-5022471bf7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:85:d8:5b:e1:f6:5b:05:e8:a3:46:72:a7:9f: 22:16:95:5c:d7:35:70:f5:82:68:3b:d0:aa:f4:24: 15:aa:b7:15:47:36:d9:f3:1d:b8:dd:1e:f9:76:1f: ff:77:be:71:ea:05:2c:8b:15:95:e2:86:b9:cc:81: a8:b8:3f:26:e8:34:08:80:38:1a:22:e4:01:43:69: e1:53:4a:65:79:08:7b:bc:89:8d:50:0a:e0:b8:2d: 59:63:57:3b:20:07:3d:58:a8:20:a8:69:3d:c0:6c: 6d:e7:bb:15:15:2b:23:25:aa:3b:ab:65:2d:93:ef: 87:37:d0:1b:db:6b:a7:7a:74:d2:40:82:68:1b:7a: 31:ea:a6:f8:69:64:96:2f:55:54:c2:e7:ff:31:8b: ad:fd:7a:29:89:e7:04:81:c9:19:a0:7f:6c:c3:f8: 20:58:8e:37:a3:4a:c0:0f:b3:46:e8:75:1b:c8:60: 73:7a:9d:05:64:c0:f9:03:f1:7c:40:c9:7e:9e:98: 05:15:ed:43:a3:7b:24:46:e9:4f:92:85:71:29:ee: 85:64:87:7f:5c:f2:9c:c6:8a:8e:00:cb:33:0b:01: ab:76:f6:da:a8:93:07:98:4d:aa:d4:0d:e5:9c:c6: ae:02:f1:1b:a9:e6:87:9a:fe:ea:ae:b3:a5:f0:ff: 40:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AD:9A:28:29:5E:8A:77:41:83:07:A5:A4:0C:61:8F:3F:50:FB:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e065f2f-3c2a-3c3f-92f5-a9467ebae002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d5:6a:63:ab:05:95:53:3f:92:5e:b3:2a:48:fd:2a:2b:92: ce:b5:d9:84:64:1c:ce:11:ac:2d:c2:60:fc:bd:1e:ab:82:26: b1:5c:f2:88:2b:2e:8b:14:93:47:a2:51:b2:6b:40:82:2c:cb: 81:15:15:bf:a0:83:a1:64:72:37:32:7d:a4:eb:02:ad:59:5f: 30:ec:f5:99:81:5d:3e:1b:92:ec:b3:6a:a3:f1:c6:dc:fa:f6: 69:87:68:55:ce:20:73:2a:91:08:25:b4:03:b8:37:40:18:24: cd:62:fe:6f:b6:ed:75:d9:fe:4a:8d:1e:5d:b0:a4:82:a9:7e: ed:e7:02:7c:f6:18:62:c4:aa:9d:cd:0a:22:0d:22:8e:99:33: 32:80:c5:61:af:57:89:a8:cf:93:fa:ba:4b:00:ff:a3:99:e4: 21:76:09:3c:1c:f0:80:6b:76:c6:0f:cb:f4:36:4f:2e:a7:28: 38:98:2a:de:29:0d:5b:e4:a6:e2:13:60:a2:fb:6d:42:78:02: b1:4c:b0:26:37:0b:65:31:0c:67:ce:66:fc:ce:8d:e0:49:3d: 29:bc:5d:48:aa:88:09:63:eb:c2:75:3e:62:54:c1:15:18:df: 07:56:e4:6e:05:cc:22:2f:31:79:0c:e8:bb:df:16:49:5e:e2: e1:a3:51:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4ZL9D4MEBhKccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YjIyMTQwZmYtYjFmNS00NzZiLWI3ZDEtNTAyMjQ3MWJmN2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4XYW+H2WwXoo0Zyp58iFpVc1zVw9YJoO9Cq 9CQVqrcVRzbZ8x243R75dh//d75x6gUsixWV4oa5zIGouD8m6DQIgDgaIuQBQ2nh U0pleQh7vImNUArguC1ZY1c7IAc9WKggqGk9wGxt57sVFSsjJao7q2Utk++HN9Ab 22unenTSQIJoG3ox6qb4aWSWL1VUwuf/MYut/XopiecEgckZoH9sw/ggWI43o0rA D7NG6HUbyGBzep0FZMD5A/F8QMl+npgFFe1Do3skRulPkoVxKe6FZId/XPKcxoqO AMszCwGrdvbaqJMHmE2q1A3lnMauAvEbqeaHmv7qrrOl8P9A8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKtmigpXop3QYMHpaQMYY8/UPsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGUwNjVmMmYtM2MyYS0z YzNmLTkyZjUtYTk0NjdlYmFlMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzVamOrBZVTP5JesypI/Sorks612YRkHM4RrC3CYPy9HquCJrFc8ogr LosUk0eiUbJrQIIsy4EVFb+gg6FkcjcyfaTrAq1ZXzDs9ZmBXT4bkuyzaqPxxtz6 9mmHaFXOIHMqkQgltAO4N0AYJM1i/m+27XXZ/kqNHl2wpIKpfu3nAnz2GGLEqp3N CiINIo6ZMzKAxWGvV4moz5P6uksA/6OZ5CF2CTwc8IBrdsYPy/Q2Ty6nKDiYKt4p DVvkpuITYKL7bUJ4ArFMsCY3C2UxDGfOZvzOjeBJPSm8XUiqiAlj68J1PmJUwRUY 3wdW5G4FzCIvMXkM6LvfFkle4uGjUf4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:43:08 2026 by rpki-client