$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8197e1eb-06b5-329d-84ff-7798bc2eed67.roa File: 8197e1eb-06b5-329d-84ff-7798bc2eed67.roa (raw, json) Hash identifier: fVnmTf5iDjucGorlWsS8JMaRUGfuOHk9Cy3LF8x1VTY= Subject key identifier: 01:CD:CC:F0:D5:87:5C:9C:8A:A3:8A:65:7F:3A:66:46:16:28:F5:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A76BD9C1D2CE74DBDF340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8197e1eb-06b5-329d-84ff-7798bc2eed67.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 14439 IP address blocks: 40.135.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:76:bd:9c:1d:2c:e7:4d:bd:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=28b2ba7c-9f87-424f-8d75-95bee9b87200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:73:64:fd:79:bf:8a:c0:45:9b:57:fc:43: dc:20:24:f7:95:7f:56:63:f2:ae:67:e9:96:1d:57: 3e:84:7b:9a:e8:d2:51:cc:45:1c:55:68:08:27:07: 8c:1d:29:5a:8d:9a:cc:45:21:c7:aa:22:88:6f:d1: 88:ef:18:b6:a0:da:34:4c:32:d1:74:17:31:3e:e6: c3:63:6b:68:25:96:de:ad:8a:d4:2f:a5:e7:69:eb: 7d:4f:ed:69:b0:5d:e4:9e:10:e7:fa:7c:70:4d:ac: 36:1e:48:f1:61:3c:c7:9a:90:01:b8:53:02:b4:ef: b0:64:36:8c:37:49:8d:67:4b:95:2e:5c:22:81:cb: 84:ed:34:33:09:6a:66:75:6e:24:02:de:ed:3a:11: 95:cc:72:a7:0c:ae:ea:ff:67:a8:4a:05:bd:e8:9f: 07:49:a7:15:53:ba:b8:7e:40:6f:be:cf:0f:68:a7: 24:9e:b4:f9:50:a7:17:db:c3:4b:46:f7:95:92:71: 9f:0f:77:c9:27:1a:65:8b:58:24:bc:af:6f:84:5a: 72:d0:ca:01:05:72:e5:e0:1a:bd:ab:02:16:f3:35: 89:47:66:19:f7:f3:ff:09:9b:c4:e6:8c:12:1e:28: 1f:91:bf:f6:a5:63:c2:ac:5d:56:ca:fd:73:bb:0e: 0f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CD:CC:F0:D5:87:5C:9C:8A:A3:8A:65:7F:3A:66:46:16:28:F5:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8197e1eb-06b5-329d-84ff-7798bc2eed67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.135.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f8:fd:68:0e:4a:98:cf:cd:ee:d8:8a:f9:32:e3:dd:e2:47: 04:1f:38:51:cb:c5:51:e8:f5:7f:50:3c:74:ad:19:f6:2c:05: ac:fb:b1:25:94:56:0e:89:ce:a8:33:3a:3b:8b:8c:ed:e3:3f: 96:2a:07:6a:5b:89:3a:96:f8:a4:77:e2:c3:fc:42:76:d9:07: 19:f2:d3:e6:8c:dc:ff:2b:b1:ba:d4:be:59:a0:87:cf:ee:df: fb:70:29:38:70:aa:02:07:83:a7:05:2d:ea:b7:48:ec:55:a9: c5:2c:f8:a6:cd:ae:2b:2b:27:9d:41:77:a3:0c:96:48:90:ce: 41:81:e1:40:92:e9:b3:5d:aa:7d:0a:16:d4:a7:0c:f3:ae:d1: 91:40:d4:2b:99:8b:e1:5e:97:d6:30:99:3d:b9:57:8d:68:0f: 61:45:9c:9f:e8:1f:ce:37:9c:f1:d2:62:a5:81:19:83:a0:04: 4c:63:68:8b:83:1f:3e:4a:83:48:84:e7:7a:1f:8d:58:7c:47: 77:0d:a6:8a:83:a5:dc:11:34:62:61:1b:43:bf:be:ac:fa:57: 79:e0:3d:5a:86:8e:be:51:09:01:93:e1:53:1e:82:8d:28:11: 17:c8:23:d2:5f:1c:50:fe:28:26:28:29:d1:6e:4d:2a:ec:a7: 3e:23:25:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCna9nB0s502980AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjhiMmJhN2MtOWY4Ny00MjRmLThkNzUtOTViZWU5Yjg3MjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB1zZP15v4rARZtX/EPcICT3lX9WY/KuZ+mW HVc+hHua6NJRzEUcVWgIJweMHSlajZrMRSHHqiKIb9GI7xi2oNo0TDLRdBcxPubD Y2toJZberYrUL6Xnaet9T+1psF3knhDn+nxwTaw2HkjxYTzHmpABuFMCtO+wZDaM N0mNZ0uVLlwigcuE7TQzCWpmdW4kAt7tOhGVzHKnDK7q/2eoSgW96J8HSacVU7q4 fkBvvs8PaKcknrT5UKcX28NLRveVknGfD3fJJxpli1gkvK9vhFpy0MoBBXLl4Bq9 qwIW8zWJR2YZ9/P/CZvE5owSHigfkb/2pWPCrF1Wyv1zuw4P5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHNzPDVh1yciqOKZX86ZkYWKPX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODE5N2UxZWItMDZiNS0z MjlkLTg0ZmYtNzc5OGJjMmVlZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIcSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX4/WgOSpjPze7Yivky493iRwQfOFHLxVHo9X9QPHStGfYsBaz7sSWU Vg6JzqgzOjuLjO3jP5YqB2pbiTqW+KR34sP8QnbZBxny0+aM3P8rsbrUvlmgh8/u 3/twKThwqgIHg6cFLeq3SOxVqcUs+KbNrisrJ51Bd6MMlkiQzkGB4UCS6bNdqn0K FtSnDPOu0ZFA1CuZi+Fel9YwmT25V41oD2FFnJ/oH843nPHSYqWBGYOgBExjaIuD Hz5Kg0iE53ofjVh8R3cNpoqDpdwRNGJhG0O/vqz6V3ngPVqGjr5RCQGT4VMego0o ERfII9JfHFD+KCYoKdFuTSrspz4jJZg= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:58 2026 by rpki-client