$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66577e42-18f9-31c2-80a7-d2ee0d532984.roa File: 66577e42-18f9-31c2-80a7-d2ee0d532984.roa (raw, json) Hash identifier: pU8kbWcsEUH2XD91vlCi369p/64k3zzKaQv3VtaDbv0= Subject key identifier: AB:44:E5:6D:EA:0F:B2:4D:82:1D:C8:E6:36:7E:6F:0A:7F:BD:32:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F42C240FC950EB73C225BC8E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66577e42-18f9-31c2-80a7-d2ee0d532984.roa Signing time: Tue 22 Sep 2026 15:30:12 +0000 ROA not before: Tue 22 Sep 2026 15:30:12 +0000 ROA not after: Mon 21 Dec 2026 16:30:12 +0000 asID: 7029 IP address blocks: 40.142.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:c2:40:fc:95:0e:b7:3c:22:5b:c8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 22 15:30:12 2026 GMT Not After : Dec 21 16:30:12 2026 GMT Subject: CN=e28c1e7b-bab9-4d2c-9b68-e0adae75c52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:82:b5:cc:5f:62:f0:10:b3:1c:ae:aa:74: f5:20:5f:71:5a:20:38:ca:51:13:e4:e7:40:a8:b6: fe:67:88:5e:47:18:93:0c:cf:cf:6c:bb:a7:9c:bb: ee:72:c5:44:8f:71:54:f0:7c:58:18:a6:c5:4e:e2: ff:9c:87:ec:89:d1:61:2a:53:25:e4:a1:4d:dd:d1: 81:1e:02:1c:34:6d:83:fc:0a:06:19:47:f3:a7:0f: 3d:41:5c:42:72:6f:05:aa:f0:b7:da:bf:25:f0:77: 1e:c9:13:b1:08:a3:67:6b:6a:2d:fe:8f:04:75:20: 49:7c:b7:50:7d:06:7d:4c:d7:e0:d6:2a:91:fd:c9: 5d:26:aa:bd:4d:7d:d5:d9:09:7b:b9:40:0e:61:b4: 5d:3f:b4:d4:0a:43:c0:88:2c:38:81:c8:3f:39:4f: 37:77:a6:64:36:77:10:2a:a1:15:e7:d1:80:3d:57: 9e:bf:23:3b:39:1c:ad:bd:f8:15:f2:13:3d:41:c3: b7:4b:6d:75:e9:6c:e7:cb:88:bc:f2:25:35:dc:bc: fc:0b:36:8d:ea:7b:34:a8:ef:1d:5f:9d:5f:37:d7: 8a:87:92:a5:28:28:da:13:01:b7:53:b2:27:b4:01: 89:e8:57:51:19:e9:6b:5b:9f:4d:ed:48:01:85:c1: f7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:44:E5:6D:EA:0F:B2:4D:82:1D:C8:E6:36:7E:6F:0A:7F:BD:32:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/66577e42-18f9-31c2-80a7-d2ee0d532984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c6:2e:af:3c:62:26:89:02:6b:52:ff:1c:64:1d:e0:42:f5: 64:0a:c6:51:e2:d2:0d:a1:24:44:53:a8:d1:ef:25:a6:92:8c: a8:35:85:0a:79:fe:ad:d2:c2:c0:76:08:08:04:19:a2:7a:2f: 8f:02:13:72:f6:8a:92:c4:f4:dd:a7:bf:d2:ac:35:ab:e4:66: 56:98:b6:96:2f:bc:a4:9b:ce:ca:0c:9f:29:a0:f1:76:00:4b: fc:07:61:d1:0f:a1:75:80:eb:8f:6e:2f:05:50:31:9f:1e:6d: af:86:6a:bf:14:d9:37:77:03:71:c5:b0:0c:95:0f:83:05:ec: 86:55:26:8d:08:22:62:41:98:56:76:49:a8:3c:6b:76:e1:dc: 83:2c:72:06:65:ac:dc:79:73:bb:91:ad:45:c6:97:4c:28:99: a9:ef:3f:27:61:46:8b:3c:34:b5:b4:2f:37:b1:be:b4:85:78: 04:11:04:a6:b7:8f:9c:9b:1c:93:9c:0c:45:86:3e:8c:ca:25: 00:71:83:81:f0:2d:de:c9:a4:e1:8b:1d:de:a8:22:71:55:69: 4a:32:a2:c2:29:93:0e:01:0c:05:91:b9:57:3f:64:bc:19:9c: 19:c8:0e:4f:fd:b3:24:19:7c:d6:d2:d2:c1:1a:4a:a4:60:56: eb:97:bb:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CwkD8lQ63PCJbyOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyMjE1MzAxMloXDTI2MTIyMTE2MzAxMlowLzEtMCsGA1UEAxMk ZTI4YzFlN2ItYmFiOS00ZDJjLTliNjgtZTBhZGFlNzVjNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzICCtcxfYvAQsxyuqnT1IF9xWiA4ylET5OdA qLb+Z4heRxiTDM/PbLunnLvucsVEj3FU8HxYGKbFTuL/nIfsidFhKlMl5KFN3dGB HgIcNG2D/AoGGUfzpw89QVxCcm8FqvC32r8l8HceyROxCKNna2ot/o8EdSBJfLdQ fQZ9TNfg1iqR/cldJqq9TX3V2Ql7uUAOYbRdP7TUCkPAiCw4gcg/OU83d6ZkNncQ KqEV59GAPVeevyM7ORytvfgV8hM9QcO3S2116Wzny4i88iU13Lz8CzaN6ns0qO8d X51fN9eKh5KlKCjaEwG3U7IntAGJ6FdRGelrW59N7UgBhcH3VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtE5W3qD7JNgh3I5jZ+bwp/vTJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjY1NzdlNDItMThmOS0z MWMyLTgwYTctZDJlZTBkNTMyOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI6LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3GLq88YiaJAmtS/xxkHeBC9WQKxlHi0g2hJERTqNHvJaaSjKg1hQp5 /q3SwsB2CAgEGaJ6L48CE3L2ipLE9N2nv9KsNavkZlaYtpYvvKSbzsoMnymg8XYA S/wHYdEPoXWA649uLwVQMZ8eba+Gar8U2Td3A3HFsAyVD4MF7IZVJo0IImJBmFZ2 Sag8a3bh3IMscgZlrNx5c7uRrUXGl0womanvPydhRos8NLW0LzexvrSFeAQRBKa3 j5ybHJOcDEWGPozKJQBxg4HwLd7JpOGLHd6oInFVaUoyosIpkw4BDAWRuVc/ZLwZ nBnIDk/9syQZfNbS0sEaSqRgVuuXu1k= -----END CERTIFICATE-----Generated at Wed Sep 23 10:48:24 2026 by rpki-client