$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa File: 757bd253-cf95-3776-a157-b88b50e26f1b.roa (raw, json) Hash identifier: zwSC75igCkRQwOWdqsp0yL02LFwUfFPvY4v8tShfAns= Subject key identifier: F4:2D:2A:6B:5E:FE:6A:98:04:7B:6D:BC:4A:5E:62:FD:AA:49:A3:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A92DEE9B4410C34575980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 40.138.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:92:de:e9:b4:41:0c:34:57:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=348a073a-6a2d-48af-8928-7326a7dc7b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5f:7f:e8:15:00:59:0e:48:c7:32:13:f6:da: 48:a5:55:8d:1e:ab:cf:b4:d6:97:27:11:9e:58:f6: 8f:73:2d:4d:2f:20:62:0e:3b:bb:7c:67:f4:71:79: 46:64:97:7f:c5:b8:80:05:47:4e:e7:7f:7d:af:53: 14:1b:24:31:8f:c3:b8:82:85:14:58:0f:d2:b5:ac: e3:e8:57:12:6c:75:8f:b4:6d:3d:e1:b0:dd:0d:bd: 5e:1d:57:8a:bc:b0:24:3c:f4:11:49:61:2d:d4:d0: 16:20:55:8e:69:85:1d:5a:a0:fe:b5:8c:fb:ae:ac: 51:d0:8d:04:49:cc:f4:87:71:a7:d5:ba:c1:c1:e5: 79:37:a0:08:87:0f:65:89:f9:90:f9:86:8e:ee:11: bb:96:1d:18:c5:28:9f:d7:b7:95:c2:24:92:77:c0: 65:82:8b:8e:d7:ae:31:d8:74:05:73:d6:db:62:f6: ee:8c:0f:d3:60:c8:74:5a:31:00:e6:9f:1a:aa:5a: 20:a6:e9:fa:a0:a6:70:35:c0:53:83:b1:d6:94:e7: f7:71:b2:64:f7:81:47:0c:be:3f:95:22:a9:82:1b: 69:8a:f7:d8:a4:b2:ac:7a:0c:88:3b:83:7d:b7:3a: ee:2e:c7:a5:15:24:ce:a4:08:27:5b:29:8f:d9:ad: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2D:2A:6B:5E:FE:6A:98:04:7B:6D:BC:4A:5E:62:FD:AA:49:A3:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/757bd253-cf95-3776-a157-b88b50e26f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:dc:6b:c2:ac:ad:fc:29:1d:93:5a:b9:28:57:ad:61:9b:cf: 3d:00:07:de:ab:e3:ec:a6:80:89:74:4f:ab:19:94:ba:18:85: d5:59:6f:d3:aa:7a:7d:a2:49:07:c2:1d:aa:0c:49:10:33:53: 26:e3:f3:5d:31:15:55:4c:7c:bc:f3:b6:a5:46:25:46:9b:74: d2:05:59:d0:2a:a7:6f:1d:f7:e3:ca:1d:06:c8:b4:c0:da:4e: 62:06:83:11:a8:10:b2:c9:24:b6:94:28:e9:0b:55:37:c3:00: 3a:29:a2:d1:cb:5a:4f:a1:06:25:33:97:42:9f:97:f8:e3:6c: 8c:e1:59:2b:2b:9c:a5:8c:7e:0c:aa:fc:5f:8d:21:6f:b8:23: fe:2c:f0:ef:0c:04:6d:7c:d1:3f:3f:24:ed:fd:3e:9a:71:b5: c3:6d:f1:1a:29:8a:7c:c7:b4:3f:fb:bd:58:01:e8:9b:e4:18: 37:ec:27:c8:fc:00:29:81:fa:54:bb:14:74:d4:64:c8:3f:09: 42:e8:ea:45:00:75:f9:17:23:81:59:1f:11:29:2f:19:59:19: c1:85:0f:58:88:33:aa:8a:8a:60:f8:a7:d0:90:27:fd:b0:87: 2c:88:a0:e1:b6:ec:47:1f:2f:3c:e8:2b:76:4e:3d:91:a2:74: f1:ff:ad:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpLe6bRBDDRXWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MzQ4YTA3M2EtNmEyZC00OGFmLTg5MjgtNzMyNmE3ZGM3YjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg19/6BUAWQ5IxzIT9tpIpVWNHqvPtNaXJxGe WPaPcy1NLyBiDju7fGf0cXlGZJd/xbiABUdO5399r1MUGyQxj8O4goUUWA/Stazj 6FcSbHWPtG094bDdDb1eHVeKvLAkPPQRSWEt1NAWIFWOaYUdWqD+tYz7rqxR0I0E Scz0h3Gn1brBweV5N6AIhw9lifmQ+YaO7hG7lh0YxSif17eVwiSSd8BlgouO164x 2HQFc9bbYvbujA/TYMh0WjEA5p8aqlogpun6oKZwNcBTg7HWlOf3cbJk94FHDL4/ lSKpghtpivfYpLKsegyIO4N9tzruLselFSTOpAgnWymP2a1Q2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQtKmte/mqYBHttvEpeYv2qSaP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzU3YmQyNTMtY2Y5NS0z Nzc2LWExNTctYjg4YjUwZTI2ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFKIrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLca8KsrfwpHZNauShXrWGbzz0AB96r4+ymgIl0T6sZlLoYhdVZb9Oq en2iSQfCHaoMSRAzUybj810xFVVMfLzztqVGJUabdNIFWdAqp28d9+PKHQbItMDa TmIGgxGoELLJJLaUKOkLVTfDADopotHLWk+hBiUzl0Kfl/jjbIzhWSsrnKWMfgyq /F+NIW+4I/4s8O8MBG180T8/JO39PppxtcNt8RopinzHtD/7vVgB6JvkGDfsJ8j8 ACmB+lS7FHTUZMg/CULo6kUAdfkXI4FZHxEpLxlZGcGFD1iIM6qKimD4p9CQJ/2w hyyIoOG27EcfLzzoK3ZOPZGidPH/rR4= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:45 2026 by rpki-client