$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64eab06a-7ceb-3420-94b9-b229128b9869.roa File: 64eab06a-7ceb-3420-94b9-b229128b9869.roa (raw, json) Hash identifier: 5si8Twh4AJyj8qQwNFeFaFocCzyhuo9upswPNwv9uwI= Subject key identifier: A4:E6:31:4F:6E:F8:15:1C:58:DA:07:EF:85:49:7A:D3:AF:6C:68:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6730FACAB2B95D49FB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64eab06a-7ceb-3420-94b9-b229128b9869.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 40.138.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:67:30:fa:ca:b2:b9:5d:49:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=158d5b00-9f55-431b-8970-7455b1495c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:3f:35:e3:0f:31:57:d2:b0:a9:f1:cf:8a: 43:2c:8c:75:3c:44:27:18:9e:36:45:68:8b:53:7a: 1d:cf:eb:59:26:6e:87:06:e6:26:14:0d:0f:ee:83: cd:d9:5f:ec:19:ad:01:90:d2:61:87:d5:9e:10:9f: 97:d6:29:df:c1:0d:51:2d:91:7e:57:aa:dc:fc:92: 89:b1:b3:2d:e3:24:cb:5d:2b:a9:fe:28:37:21:97: 20:03:03:66:71:8b:ca:bd:cc:ae:96:e7:79:ca:28: 3f:cc:28:96:c3:e3:e8:e5:ab:b2:63:33:f8:cf:0a: 07:4e:33:d6:3a:b4:81:ba:ba:17:fb:73:e3:23:21: 60:f0:f5:49:1b:de:3e:19:50:c2:01:e7:3f:ee:e5: e8:5e:31:34:54:d4:e9:b8:e3:ac:7c:c4:62:2c:f0: cc:38:90:3f:37:f2:8d:b0:bd:0b:8c:8d:d4:3b:0d: cf:05:57:4f:01:ad:41:66:03:a8:73:3e:ea:4c:ac: d4:e9:12:75:8d:5d:fb:36:8e:dd:f9:0a:ab:d2:a4: 46:63:9f:6f:9f:3a:a5:04:ee:eb:c0:81:3a:02:4c: 5b:68:15:07:96:02:87:d4:de:8a:1c:1b:db:ca:33: 21:2c:a0:0b:0c:ef:95:f3:33:ef:09:75:01:17:ee: f1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E6:31:4F:6E:F8:15:1C:58:DA:07:EF:85:49:7A:D3:AF:6C:68:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64eab06a-7ceb-3420-94b9-b229128b9869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:68:a6:f7:0f:46:2c:42:0f:39:b6:7c:56:9e:5d:cd:8c:30: d6:9f:f4:1a:9f:b1:15:fb:ff:76:9a:b1:16:c9:93:f8:09:ee: 4a:2e:e0:3d:3d:28:85:3c:78:3d:11:c9:0e:7e:e7:96:69:48: c9:05:4a:4d:75:e6:5b:06:37:b9:52:c8:f0:06:2e:9d:f5:ca: 05:91:b4:3e:d0:f2:4d:40:27:a3:98:99:b1:5d:5f:cb:05:0e: 1a:97:9c:2d:f7:8d:2a:57:09:6c:cf:70:cb:3a:e0:58:b1:63: e3:f3:d5:32:60:b7:cf:4a:5a:a6:f0:fc:12:8f:e2:28:37:b6: 01:a3:fb:ac:d0:2c:bb:05:01:85:c1:8d:8c:af:8b:8a:4a:ec: e6:91:d3:26:7e:3d:a2:2b:17:b5:27:11:95:7a:f3:d4:78:8b: a6:a6:ee:39:7a:e1:63:ac:91:e5:6d:e9:50:89:9e:cd:6b:aa: bd:9e:6d:47:db:55:a3:55:31:fb:5c:38:75:1b:69:c3:43:f6: 52:4d:7e:f7:c1:83:61:cf:4f:10:94:d5:df:96:7b:7f:64:e6: 10:57:31:8e:8f:f2:26:7a:f2:9e:08:54:27:d7:eb:46:b1:1f: 8c:f3:18:28:c1:98:54:0e:c9:f4:98:97:22:a7:ac:e4:31:d3: 87:c8:0b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmcw+sqyuV1J+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTU4ZDViMDAtOWY1NS00MzFiLTg5NzAtNzQ1NWIxNDk1YzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb8/NeMPMVfSsKnxz4pDLIx1PEQnGJ42RWiL U3odz+tZJm6HBuYmFA0P7oPN2V/sGa0BkNJhh9WeEJ+X1infwQ1RLZF+V6rc/JKJ sbMt4yTLXSup/ig3IZcgAwNmcYvKvcyulud5yig/zCiWw+Po5auyYzP4zwoHTjPW OrSBuroX+3PjIyFg8PVJG94+GVDCAec/7uXoXjE0VNTpuOOsfMRiLPDMOJA/N/KN sL0LjI3UOw3PBVdPAa1BZgOocz7qTKzU6RJ1jV37No7d+Qqr0qRGY59vnzqlBO7r wIE6AkxbaBUHlgKH1N6KHBvbyjMhLKALDO+V8zPvCXUBF+7x8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTmMU9u+BUcWNoH74VJetOvbGgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRlYWIwNmEtN2NlYi0z NDIwLTk0YjktYjIyOTEyOGI5ODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItopvcPRixCDzm2fFaeXc2MMNaf9BqfsRX7/3aasRbJk/gJ7kou4D09 KIU8eD0RyQ5+55ZpSMkFSk115lsGN7lSyPAGLp31ygWRtD7Q8k1AJ6OYmbFdX8sF DhqXnC33jSpXCWzPcMs64FixY+Pz1TJgt89KWqbw/BKP4ig3tgGj+6zQLLsFAYXB jYyvi4pK7OaR0yZ+PaIrF7UnEZV689R4i6am7jl64WOskeVt6VCJns1rqr2ebUfb VaNVMftcOHUbacND9lJNfvfBg2HPTxCU1d+We39k5hBXMY6P8iZ68p4IVCfX60ax H4zzGCjBmFQOyfSYlyKnrOQx04fICw4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:44 2026 by rpki-client