$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7858d667-e6fa-3f96-bdaf-8712e64c5159.roa File: 7858d667-e6fa-3f96-bdaf-8712e64c5159.roa (raw, json) Hash identifier: hRopfsLlVw1ovmLkT9uJfxrWz/m5+2heiCNsAdzfwoY= Subject key identifier: CF:E0:F7:32:85:36:75:F8:DE:8C:C4:EF:A6:BC:5D:FB:A6:B2:4C:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA14C9085611B4E4CDAB40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7858d667-e6fa-3f96-bdaf-8712e64c5159.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 40.142.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:14:c9:08:56:11:b4:e4:cd:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=25e83a32-b420-4dbc-8f58-652a7855aa48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d2:2c:31:03:45:7f:33:54:46:50:36:11:ea: b9:0f:b8:87:a1:16:aa:5c:43:b1:c7:bd:51:27:0a: eb:49:98:22:6e:26:54:bc:26:e2:4b:f7:bc:55:7c: 32:98:79:35:2b:54:5d:40:07:6e:7b:59:92:32:dd: ca:fd:40:b7:17:11:5e:35:d0:7c:f5:5e:ca:6d:c8: 2e:49:56:c8:a7:cd:a8:20:3e:4e:aa:32:5a:10:30: 3e:5d:c3:46:2d:27:60:d9:55:13:0f:5e:b0:60:e6: d0:20:c5:29:08:61:d2:02:c4:d8:ce:75:b4:e0:46: 23:98:94:4f:66:ac:52:ce:74:fd:08:b3:ff:64:b9: 65:e3:a4:1a:93:97:51:63:05:5e:fd:a4:21:5e:d4: fa:8b:35:ee:fc:6e:57:f0:2c:43:7f:f8:bb:64:12: aa:dd:3a:39:75:c9:ca:b2:82:f5:af:98:53:3b:c6: 39:a7:43:44:fc:1e:8c:75:0f:64:b5:25:fd:12:cb: 77:c9:d8:15:7c:94:fa:f1:e4:e9:c2:35:e3:54:39: 92:9a:4f:9b:a3:ef:21:84:0c:97:e8:5a:b7:82:37: a6:7d:6f:5d:3d:54:3e:92:f9:ff:d8:7f:f5:16:69: 10:79:a8:70:2a:17:c7:c6:d9:97:47:2e:e4:14:e6: cf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E0:F7:32:85:36:75:F8:DE:8C:C4:EF:A6:BC:5D:FB:A6:B2:4C:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7858d667-e6fa-3f96-bdaf-8712e64c5159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:4b:bf:91:a3:5b:cc:5c:60:d4:71:20:05:35:d8:71:ec:25: c4:d7:2f:18:0c:85:1a:a6:e0:93:26:4a:4c:db:54:0f:af:94: 59:ce:b5:5a:cf:a6:96:85:41:d1:96:68:51:a1:45:b3:22:99: 00:5e:27:f9:ae:59:74:c0:0f:4c:b9:bc:a2:05:c3:6b:1c:eb: 9b:7d:0f:75:cc:95:a7:1a:91:1e:53:09:4b:f3:8d:3b:67:18: f2:54:bb:07:7c:19:66:d2:82:fa:d5:80:fa:ca:eb:ba:79:58: 08:4d:b0:a1:bb:7d:be:f6:82:28:ef:08:08:dc:f3:ac:1b:65: ff:3e:8c:bf:fe:6f:89:40:76:df:d2:1b:c8:14:78:0f:88:af: 95:c5:fc:8e:42:51:8e:86:6e:89:fa:3c:ad:6c:d0:6a:74:a3: 18:19:dc:90:58:88:36:30:9e:ee:b4:1b:b9:7e:6e:68:0a:5a: 8b:16:0c:b3:ca:07:47:ef:08:17:f6:31:f3:0a:65:a4:b0:f4: 92:7c:00:cc:0c:dd:c0:1a:e5:f2:22:c8:ff:74:9c:d9:96:78: 2a:ac:44:eb:59:8e:f2:f9:cd:4f:24:91:11:76:c1:09:4f:35: fa:42:ad:71:89:bf:44:ba:cd:e0:89:61:b0:d6:2b:8f:ba:9e: cd:dd:9b:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hTJCFYRtOTNq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MjVlODNhMzItYjQyMC00ZGJjLThmNTgtNjUyYTc4NTVhYTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtIsMQNFfzNURlA2Eeq5D7iHoRaqXEOxx71R JwrrSZgibiZUvCbiS/e8VXwymHk1K1RdQAdue1mSMt3K/UC3FxFeNdB89V7Kbcgu SVbIp82oID5OqjJaEDA+XcNGLSdg2VUTD16wYObQIMUpCGHSAsTYznW04EYjmJRP ZqxSznT9CLP/ZLll46Qak5dRYwVe/aQhXtT6izXu/G5X8CxDf/i7ZBKq3To5dcnK soL1r5hTO8Y5p0NE/B6MdQ9ktSX9Est3ydgVfJT68eTpwjXjVDmSmk+bo+8hhAyX 6Fq3gjemfW9dPVQ+kvn/2H/1FmkQeahwKhfHxtmXRy7kFObP6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/g9zKFNnX43ozE76a8Xfumsky9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzg1OGQ2NjctZTZmYS0z Zjk2LWJkYWYtODcxMmU2NGM1MTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKI6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNLv5GjW8xcYNRxIAU12HHsJcTXLxgMhRqm4JMmSkzbVA+vlFnOtVrP ppaFQdGWaFGhRbMimQBeJ/muWXTAD0y5vKIFw2sc65t9D3XMlacakR5TCUvzjTtn GPJUuwd8GWbSgvrVgPrK67p5WAhNsKG7fb72gijvCAjc86wbZf8+jL/+b4lAdt/S G8gUeA+Ir5XF/I5CUY6Gbon6PK1s0Gp0oxgZ3JBYiDYwnu60G7l+bmgKWosWDLPK B0fvCBf2MfMKZaSw9JJ8AMwM3cAa5fIiyP90nNmWeCqsROtZjvL5zU8kkRF2wQlP NfpCrXGJv0S6zeCJYbDWK4+6ns3dm4Y= -----END CERTIFICATE-----Generated at Thu Mar 26 11:34:49 2026 by rpki-client