$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7d68f2b9-309d-3f0d-a145-5cfd59ae5d57.roa File: 7d68f2b9-309d-3f0d-a145-5cfd59ae5d57.roa (raw, json) Hash identifier: I97KXbirgpilFM7PREr6Lkn6LipzxEDb6Ap8bYd00mk= Subject key identifier: 2F:69:C6:22:D8:11:3B:F9:D2:39:13:93:20:7B:DB:C0:20:D8:A1:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA94AABAB72007D938E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7d68f2b9-309d-3f0d-a145-5cfd59ae5d57.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 40.142.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a9:4a:ab:ab:72:00:7d:93:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=833fb7af-d9cc-495b-aba2-c3205d2a3eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ed:a3:71:5a:83:15:39:fd:e7:1d:27:08:db: dd:54:a7:d4:e0:2d:9a:2c:01:23:f8:c8:47:c1:ab: f0:6b:15:76:e6:fe:cf:19:95:a3:44:cb:6e:56:bd: 7b:c8:68:f4:f9:09:96:92:1d:8b:bc:d1:1d:a9:75: 3e:91:36:d2:7c:26:39:4a:41:89:b2:fc:00:52:bf: 97:db:6e:71:11:4e:4d:d7:97:00:c1:45:b1:3a:74: 2c:86:e4:4d:33:87:78:8a:d4:f1:8d:3b:7c:87:dc: a5:d0:94:3a:c7:b9:67:91:fe:f8:51:49:92:15:14: c0:54:47:e1:d4:41:90:7c:b8:4d:b9:94:c3:88:96: 18:34:4e:0b:d3:46:e8:7f:a6:38:39:d3:06:a5:40: b9:19:9e:fe:63:73:6d:6d:a4:9c:02:74:31:6c:41: d2:57:a9:1d:9d:96:47:43:7d:3c:ba:07:05:12:03: 56:75:a4:9d:b3:e1:cb:7e:e3:7c:f7:26:1d:cf:35: 54:82:43:1a:5c:55:f2:3c:0d:0f:ce:06:7d:1b:41: 63:72:5b:e6:b1:4c:9a:74:41:60:a2:78:55:78:04: 1b:42:25:07:32:c3:f1:55:a6:34:32:f6:40:f8:c5: fc:34:5f:ce:ab:81:63:1d:2b:cb:64:45:4e:27:a0: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:69:C6:22:D8:11:3B:F9:D2:39:13:93:20:7B:DB:C0:20:D8:A1:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7d68f2b9-309d-3f0d-a145-5cfd59ae5d57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6d:9c:ab:e3:a5:cd:7d:81:c8:0b:3a:51:f3:e7:16:7b:3c: 50:f4:fe:3a:c1:f0:78:3f:f3:a1:80:b8:59:79:a4:e4:7a:e7: 47:69:dc:8b:bc:21:fe:3e:13:57:83:f7:1c:fa:60:46:53:96: 53:a5:05:b3:f7:ae:ea:78:3f:2b:6e:c7:31:d2:4e:f3:35:d2: 11:92:30:bb:54:4a:bc:04:2f:7c:0f:11:09:41:73:4f:7c:7c: 6d:be:3a:5e:98:cf:df:a8:72:3d:82:b3:3f:cc:b0:5a:94:45: fc:e8:ae:d0:69:38:4c:8a:f2:97:48:f1:17:de:4b:48:a8:2c: b8:d8:a9:0e:b1:5c:ff:96:8b:4c:38:ad:70:40:a3:d8:0a:03: 54:13:f1:ee:a2:38:12:84:b9:47:48:96:36:2e:ba:46:e7:88: fe:f6:90:31:bc:15:24:a7:36:d7:3b:b0:d4:88:79:d0:cf:c5: f6:75:c5:ca:54:35:db:98:14:ec:cf:45:eb:c1:a7:13:f4:07: 7e:ec:46:66:1a:a5:d0:95:92:ff:f2:44:e5:6d:9a:31:f3:78: b8:07:bb:dd:7f:bf:84:ce:3c:26:49:d0:6b:dc:14:89:66:c5: 14:ee:67:b6:c2:be:b8:eb:ad:56:dd:da:59:82:da:09:f3:64: 67:26:21:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqlKq6tyAH2TjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ODMzZmI3YWYtZDljYy00OTViLWFiYTItYzMyMDVkMmEzZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou2jcVqDFTn95x0nCNvdVKfU4C2aLAEj+MhH wavwaxV25v7PGZWjRMtuVr17yGj0+QmWkh2LvNEdqXU+kTbSfCY5SkGJsvwAUr+X 225xEU5N15cAwUWxOnQshuRNM4d4itTxjTt8h9yl0JQ6x7lnkf74UUmSFRTAVEfh 1EGQfLhNuZTDiJYYNE4L00bof6Y4OdMGpUC5GZ7+Y3NtbaScAnQxbEHSV6kdnZZH Q308ugcFEgNWdaSds+HLfuN89yYdzzVUgkMaXFXyPA0PzgZ9G0FjclvmsUyadEFg onhVeAQbQiUHMsPxVaY0MvZA+MX8NF/Oq4FjHSvLZEVOJ6CE7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9pxiLYETv50jkTkyB728Ag2KHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2Q2OGYyYjktMzA5ZC0z ZjBkLWExNDUtNWNmZDU5YWU1ZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKI6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGttnKvjpc19gcgLOlHz5xZ7PFD0/jrB8Hg/86GAuFl5pOR650dp3Iu8 If4+E1eD9xz6YEZTllOlBbP3rup4PytuxzHSTvM10hGSMLtUSrwEL3wPEQlBc098 fG2+Ol6Yz9+ocj2Csz/MsFqURfzortBpOEyK8pdI8RfeS0ioLLjYqQ6xXP+Wi0w4 rXBAo9gKA1QT8e6iOBKEuUdIljYuukbniP72kDG8FSSnNtc7sNSIedDPxfZ1xcpU NduYFOzPRevBpxP0B37sRmYapdCVkv/yROVtmjHzeLgHu91/v4TOPCZJ0GvcFIlm xRTuZ7bCvrjrrVbd2lmC2gnzZGcmIWo= -----END CERTIFICATE-----Generated at Thu Mar 26 09:08:52 2026 by rpki-client