$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53cce2d4-8960-3a07-953b-6c289ddfd81e.roa File: 53cce2d4-8960-3a07-953b-6c289ddfd81e.roa (raw, json) Hash identifier: 4l7BTuHvpOENkWNMEMkOzT6OhBHQNfB4OIf2aChsLS0= Subject key identifier: 9E:F3:DC:88:EA:BC:4B:83:98:EE:14:8F:C8:8A:C3:5F:86:8B:A7:6B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F19B28843E3283DA7BE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53cce2d4-8960-3a07-953b-6c289ddfd81e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 40.138.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:19:b2:88:43:e3:28:3d:a7:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6b1f34eb-a3dc-4b53-9120-a16863137194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:ef:02:b4:a5:2b:d0:6c:d3:39:f5:fc:cb: 77:13:68:8f:2e:55:ba:0b:83:bc:b9:1f:00:2d:e4: 70:9c:74:04:ea:3c:d9:27:8b:f5:7d:33:f0:50:c7: e8:e8:d1:05:04:80:1c:06:ad:14:32:a0:44:27:8c: e6:0b:2f:b1:a9:cd:c4:39:0f:91:e1:1c:8a:da:6f: 18:3d:ec:a3:27:bb:57:0e:de:5f:83:21:4f:99:1c: 09:ef:68:73:24:a7:d6:f4:78:57:eb:24:f3:dd:27: a5:10:13:bc:ed:66:91:89:c8:09:63:0c:d5:40:12: b2:a2:55:3d:68:3f:9f:05:fc:34:89:b4:d6:a2:6e: 97:ca:9d:99:4f:c2:27:f7:06:7a:12:47:a8:e7:c2: dc:e1:0e:e0:2c:66:68:13:2b:c6:77:36:c1:e8:07: 6e:7e:ea:45:82:d6:a4:b0:b3:1c:2a:3b:c1:3c:b1: 32:3e:ae:6a:0e:8a:fa:af:4a:8c:d0:45:3c:b5:b8: 25:b5:1d:e2:fa:d5:7e:14:18:20:16:00:dc:18:ac: 90:8c:0c:11:1e:88:aa:52:a6:21:19:74:9c:75:73: 4f:a3:ae:7a:4b:7d:bc:eb:b1:a9:32:3f:48:98:f1: 35:22:bc:6c:50:10:bc:57:6b:50:37:08:63:c9:49: 5a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F3:DC:88:EA:BC:4B:83:98:EE:14:8F:C8:8A:C3:5F:86:8B:A7:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53cce2d4-8960-3a07-953b-6c289ddfd81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:41:81:ef:1d:eb:66:1f:5c:59:01:97:94:ce:3c:87:92:4d: 97:f6:cc:97:01:65:b4:fc:2f:d6:b7:f6:24:2d:11:03:5d:dd: 8f:02:f7:d0:df:cd:d3:a9:da:1d:33:aa:18:4c:11:63:ce:45: f6:ca:03:af:a0:53:0d:e0:03:69:a3:3e:99:d7:67:63:1d:d4: 3f:f8:12:ee:43:e8:e8:b8:13:9e:ee:c7:2b:e2:5d:85:5a:0b: 43:df:40:7e:6a:da:79:2c:ce:79:e9:13:f3:a2:c9:0f:b7:64: 81:5a:0c:91:12:ea:32:62:12:b0:41:1b:35:6a:00:b4:8d:c7: 92:03:fa:65:95:03:f9:09:e2:6a:a9:8b:08:06:6b:95:4d:c5: 6c:ad:af:ba:3b:25:56:aa:03:82:01:aa:d6:7d:8d:60:bb:13: 7b:a5:78:c3:cf:97:96:db:ff:7a:e0:71:3f:5f:fc:b6:de:6c: 2d:e7:6c:ab:c4:37:af:2c:e0:a9:3b:0d:ec:eb:6a:c0:3c:c1: 19:de:f2:aa:bd:6e:57:ed:46:6e:ac:7e:c6:26:23:fa:ec:85: 29:be:bd:8c:41:f7:b1:51:af:a1:97:61:e2:e6:17:01:fc:ab: d9:96:87:11:ca:ca:8a:e4:f0:64:13:83:94:c6:7e:d3:15:09: ac:91:f6:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfxmyiEPjKD2nvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmIxZjM0ZWItYTNkYy00YjUzLTkxMjAtYTE2ODYzMTM3MTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlnvArSlK9Bs0zn1/Mt3E2iPLlW6C4O8uR8A LeRwnHQE6jzZJ4v1fTPwUMfo6NEFBIAcBq0UMqBEJ4zmCy+xqc3EOQ+R4RyK2m8Y PeyjJ7tXDt5fgyFPmRwJ72hzJKfW9HhX6yTz3SelEBO87WaRicgJYwzVQBKyolU9 aD+fBfw0ibTWom6Xyp2ZT8In9wZ6Ekeo58Lc4Q7gLGZoEyvGdzbB6AdufupFgtak sLMcKjvBPLEyPq5qDor6r0qM0EU8tbgltR3i+tV+FBggFgDcGKyQjAwRHoiqUqYh GXScdXNPo656S32867GpMj9ImPE1IrxsUBC8V2tQNwhjyUlaMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7z3IjqvEuDmO4Uj8iKw1+Gi6drMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTNjY2UyZDQtODk2MC0z YTA3LTk1M2ItNmMyODlkZGZkODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhBge8d62YfXFkBl5TOPIeSTZf2zJcBZbT8L9a39iQtEQNd3Y8C99Df zdOp2h0zqhhMEWPORfbKA6+gUw3gA2mjPpnXZ2Md1D/4Eu5D6Oi4E57uxyviXYVa C0PfQH5q2nksznnpE/OiyQ+3ZIFaDJES6jJiErBBGzVqALSNx5ID+mWVA/kJ4mqp iwgGa5VNxWytr7o7JVaqA4IBqtZ9jWC7E3uleMPPl5bb/3rgcT9f/LbebC3nbKvE N68s4Kk7DezrasA8wRne8qq9blftRm6sfsYmI/rshSm+vYxB97FRr6GXYeLmFwH8 q9mWhxHKyork8GQTg5TGftMVCayR9jY= -----END CERTIFICATE-----Generated at Fri Oct 2 18:40:20 2026 by rpki-client