$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa File: 51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa (raw, json) Hash identifier: qEb4lflesv1YQR24+zVpk5oFGOuFBmUVM9CDhAo/9fQ= Subject key identifier: 8B:41:38:5F:8D:CD:B7:C3:47:FB:78:10:C1:D1:19:34:4E:69:47:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA052145998354380FF7C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 40.136.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:05:21:45:99:83:54:38:0f:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=602d446c-5165-4fe5-8a76-7bea6f085c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1d:5c:7c:ab:04:8c:a3:e8:75:d4:85:52:3f: fb:0d:db:4f:7f:d2:ef:a0:d2:29:2a:f9:6e:89:0d: a8:e7:b8:30:ab:16:c6:e9:18:b4:4c:7a:8e:35:c0: b0:98:61:59:0f:57:9f:b2:ba:03:5f:d8:59:d7:d7: f4:b8:d1:2b:7c:64:78:ca:58:05:e7:1f:90:a7:89: f4:b2:8e:74:97:0a:cd:80:97:e3:32:7a:9a:6f:9e: 49:ff:07:b7:93:82:58:62:36:95:a6:fa:13:e3:ff: cc:54:b0:81:28:d5:f8:b6:a7:a8:37:7a:09:41:c2: c6:e8:4a:99:f2:08:7d:01:1f:35:86:c7:9c:7c:5b: 29:8b:e8:b8:65:cc:32:a2:68:e0:4b:fb:fe:1e:00: 79:c8:5e:05:85:6d:4d:40:8a:9b:89:a7:c6:94:c4: dd:50:c8:e1:fa:30:78:a1:ed:2d:cc:0c:66:d3:9a: 7a:07:0b:f9:1f:53:1b:2d:54:b3:b6:8a:b0:b6:cb: d6:07:7c:8c:86:19:22:eb:3c:ab:78:09:82:b0:c3: 1c:b2:fe:47:c0:60:1e:84:15:a3:43:fa:f1:9c:36: 63:9f:72:68:ad:eb:03:85:c7:4b:60:6b:10:45:96: 42:a5:fd:e5:81:59:bc:7e:7e:8d:eb:8b:a8:b6:b7: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:41:38:5F:8D:CD:B7:C3:47:FB:78:10:C1:D1:19:34:4E:69:47:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51fa7036-5dd2-3f69-86ff-7d953b9f6b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ba:9f:4f:9d:ee:47:72:96:17:bd:13:4a:d9:36:c0:1e:d7: 5f:ad:c9:ea:8e:28:e2:bb:d9:c3:ff:7d:f3:c3:5f:db:4f:96: d2:37:f2:6f:95:b2:aa:06:77:0b:85:29:12:7d:80:7b:31:42: 5b:20:3c:cc:cd:a1:ec:c4:78:12:79:ed:c4:bf:12:b4:52:49: 14:44:e5:a8:02:dd:a6:e3:45:90:b1:4f:5b:64:16:00:5a:19: 36:23:f0:5d:c4:13:8f:63:35:95:0c:bb:07:79:4b:16:64:f5: 5d:75:b9:e0:f0:74:14:f2:db:83:46:09:22:d3:7d:30:df:7b: 56:2f:04:f4:2b:d4:d3:4a:b0:ff:09:bf:79:e2:d0:ea:75:1f: bf:a2:8c:a6:2d:7e:ee:e5:56:d5:85:e6:a7:fd:3f:8e:35:b0: 14:b1:66:03:e8:45:a3:5b:54:43:65:39:4a:a1:a6:9e:4b:84: 83:1e:95:52:5b:f2:5d:a2:96:ab:57:4b:a3:d7:36:87:10:1b: 64:3c:5c:5b:50:4b:1a:d2:55:21:e3:71:13:e3:d5:2d:c3:c9: f6:b0:ce:2e:de:7f:87:a1:54:12:e8:ff:d7:1c:89:60:b6:a5: 67:03:31:84:45:28:4d:b6:1b:13:11:69:6e:58:d0:2e:db:66: f8:34:ad:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gUhRZmDVDgP98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NjAyZDQ0NmMtNTE2NS00ZmU1LThhNzYtN2JlYTZmMDg1YzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh1cfKsEjKPoddSFUj/7DdtPf9LvoNIpKvlu iQ2o57gwqxbG6Ri0THqONcCwmGFZD1efsroDX9hZ19f0uNErfGR4ylgF5x+Qp4n0 so50lwrNgJfjMnqab55J/we3k4JYYjaVpvoT4//MVLCBKNX4tqeoN3oJQcLG6EqZ 8gh9AR81hsecfFspi+i4ZcwyomjgS/v+HgB5yF4FhW1NQIqbiafGlMTdUMjh+jB4 oe0tzAxm05p6Bwv5H1MbLVSztoqwtsvWB3yMhhki6zyreAmCsMMcsv5HwGAehBWj Q/rxnDZjn3JoresDhcdLYGsQRZZCpf3lgVm8fn6N64uotrdXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItBOF+NzbfDR/t4EMHRGTROaUfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTFmYTcwMzYtNWRkMi0z ZjY5LTg2ZmYtN2Q5NTNiOWY2YjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS6n0+d7kdylhe9E0rZNsAe11+tyeqOKOK72cP/ffPDX9tPltI38m+V sqoGdwuFKRJ9gHsxQlsgPMzNoezEeBJ57cS/ErRSSRRE5agC3abjRZCxT1tkFgBa GTYj8F3EE49jNZUMuwd5SxZk9V11ueDwdBTy24NGCSLTfTDfe1YvBPQr1NNKsP8J v3ni0Op1H7+ijKYtfu7lVtWF5qf9P441sBSxZgPoRaNbVENlOUqhpp5LhIMelVJb 8l2ilqtXS6PXNocQG2Q8XFtQSxrSVSHjcRPj1S3Dyfawzi7ef4ehVBLo/9cciWC2 pWcDMYRFKE22GxMRaW5Y0C7bZvg0rc0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:42 2026 by rpki-client