$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64eab06a-7ceb-3420-94b9-b229128b9869.roa File: 64eab06a-7ceb-3420-94b9-b229128b9869.roa (raw, json) Hash identifier: VQIml3UN4jjYrXouSmsVhqlRAJHIl+uv+cQBZLnA6fs= Subject key identifier: EF:D2:EA:33:9D:EF:90:71:5B:33:90:D0:63:8F:8A:D2:C1:AB:80:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D72525DA8540CFBBBD350 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64eab06a-7ceb-3420-94b9-b229128b9869.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 40.138.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:72:52:5d:a8:54:0c:fb:bb:d3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=43ab307b-37ac-49a0-baf9-20de3217abcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:61:47:d3:23:b5:41:53:58:80:75:3b:79:34: e3:07:41:6a:7d:46:c3:11:13:16:8b:0a:b2:c2:f9: d5:ad:4e:a5:0d:31:85:19:5d:4d:35:bd:25:68:35: 4f:97:1c:91:0c:5e:f9:4c:96:96:a9:c3:a9:72:df: 43:be:9e:81:4e:57:4f:9c:ca:2b:35:23:e9:98:3f: 95:49:e8:b2:a7:b3:2c:c0:45:7f:d7:a5:32:85:c3: 97:f7:07:a3:21:c2:7e:b6:e3:4a:c9:a8:42:04:49: 5b:67:45:d7:33:fa:b3:52:4f:68:1f:db:6c:9d:e6: b8:cc:9a:a8:f8:7c:d9:95:13:4a:12:cd:04:f2:b8: 8f:f1:78:2d:00:d3:0f:23:9c:b6:5e:4c:9b:67:00: 88:14:9d:c4:f8:7b:87:b4:4b:fd:1e:81:ce:fe:1b: 75:e4:78:21:2e:e6:1b:e1:6c:cd:02:9e:cb:65:1f: 9b:31:e6:cc:35:7b:2a:e4:4a:25:66:e2:4e:90:e6: 30:32:06:47:ed:de:d1:ef:f4:80:9a:4a:64:78:26: 34:13:53:31:a5:63:5d:10:cc:74:42:0b:72:06:9a: 67:9e:4e:01:39:82:94:1a:57:42:e6:39:09:aa:9c: 65:92:1c:b8:61:b4:24:e2:09:d2:0e:f7:0a:4e:62: 66:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D2:EA:33:9D:EF:90:71:5B:33:90:D0:63:8F:8A:D2:C1:AB:80:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64eab06a-7ceb-3420-94b9-b229128b9869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a2:57:c2:04:37:b0:78:fb:fa:1f:aa:9f:1a:b4:74:db:2a: 5a:7b:98:fe:9e:80:41:f5:fd:52:76:61:ad:fc:d7:02:a9:e7: 3d:88:de:71:fa:c3:04:cb:bb:06:ce:b6:ac:de:e5:da:d2:7d: 12:04:f1:ec:85:9e:4c:a3:88:ad:53:46:43:1f:91:83:f4:b9: 21:3d:a8:c1:26:8f:db:bd:25:69:a0:16:e2:04:f9:08:5d:c2: a8:25:ec:77:d8:2b:ec:2d:68:3d:02:83:28:9c:97:49:02:b3: e2:e0:21:43:9a:51:8c:e8:62:88:3a:4b:e6:5f:cd:ee:ca:cc: 96:71:55:cc:45:e2:58:21:6d:95:98:76:51:50:fa:4d:bc:b4: df:dd:a2:24:29:43:a3:0a:42:69:b8:e1:de:6d:9e:52:2e:31: c1:bd:3f:f9:37:09:b6:79:bc:d5:0a:1c:c0:56:59:99:2a:58: 52:bb:1b:76:15:dc:cc:e8:9d:fe:f9:28:4f:14:1f:92:cd:2d: e0:f2:5a:b7:57:ca:37:35:4a:a4:03:5b:ea:f7:8e:97:2b:d0: b3:7f:ff:86:2b:ed:d4:fd:42:d7:55:70:3d:ac:95:ab:f3:5a: d4:09:69:0c:b8:c3:5b:99:c5:5a:09:ad:03:a7:36:7c:13:20: 40:96:70:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXJSXahUDPu701AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NDNhYjMwN2ItMzdhYy00OWEwLWJhZjktMjBkZTMyMTdhYmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2FH0yO1QVNYgHU7eTTjB0FqfUbDERMWiwqy wvnVrU6lDTGFGV1NNb0laDVPlxyRDF75TJaWqcOpct9Dvp6BTldPnMorNSPpmD+V Seiyp7MswEV/16UyhcOX9wejIcJ+tuNKyahCBElbZ0XXM/qzUk9oH9tsnea4zJqo +HzZlRNKEs0E8riP8XgtANMPI5y2XkybZwCIFJ3E+HuHtEv9HoHO/ht15HghLuYb 4WzNAp7LZR+bMebMNXsq5EolZuJOkOYwMgZH7d7R7/SAmkpkeCY0E1MxpWNdEMx0 QgtyBppnnk4BOYKUGldC5jkJqpxlkhy4YbQk4gnSDvcKTmJmbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/S6jOd75BxWzOQ0GOPitLBq4C9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRlYWIwNmEtN2NlYi0z NDIwLTk0YjktYjIyOTEyOGI5ODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOiV8IEN7B4+/ofqp8atHTbKlp7mP6egEH1/VJ2Ya381wKp5z2I3nH6 wwTLuwbOtqze5drSfRIE8eyFnkyjiK1TRkMfkYP0uSE9qMEmj9u9JWmgFuIE+Qhd wqgl7HfYK+wtaD0Cgyicl0kCs+LgIUOaUYzoYog6S+Zfze7KzJZxVcxF4lghbZWY dlFQ+k28tN/doiQpQ6MKQmm44d5tnlIuMcG9P/k3CbZ5vNUKHMBWWZkqWFK7G3YV 3Mzonf75KE8UH5LNLeDyWrdXyjc1SqQDW+r3jpcr0LN//4Yr7dT9QtdVcD2slavz WtQJaQy4w1uZxVoJrQOnNnwTIECWcMM= -----END CERTIFICATE-----Generated at Tue Sep 29 20:24:47 2026 by rpki-client