$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8965329d-5d46-3e83-98fa-ea126d8c360b.roa File: 8965329d-5d46-3e83-98fa-ea126d8c360b.roa (raw, json) Hash identifier: 4s3gJw/F7E66f77VpEE/4AJALdWidekegpzfmibssNo= Subject key identifier: D6:53:AD:DE:B5:17:98:D4:58:2B:F7:D2:45:1F:88:9F:2C:AD:98:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA3AAA2A5978CE35264A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8965329d-5d46-3e83-98fa-ea126d8c360b.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 40.133.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3a:aa:2a:59:78:ce:35:26:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=4b269ec4-515c-4caa-92ad-99a98f46ac11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:81:7e:49:d3:37:e7:fd:5a:cd:62:cc:f6: e1:01:d1:80:09:86:08:71:e0:94:9d:2d:02:f3:a9: 2a:97:23:07:20:60:03:18:e0:51:16:12:a2:93:d3: 82:15:b0:b9:bb:c9:cd:83:81:86:0e:2d:5e:1a:86: 8c:a4:f2:d5:03:3e:4d:17:2c:74:d8:be:8d:6c:a6: eb:bf:ef:a6:fa:9b:4d:3a:15:11:d2:ea:bc:56:a0: fd:af:83:43:f4:3e:3d:c6:3f:2f:8c:33:dc:28:25: 9d:c5:b9:76:01:ec:e1:28:30:cd:0f:ba:78:c9:0f: 2f:ca:35:a3:7a:9d:73:51:6b:f9:c8:b3:4d:6f:77: d0:08:a5:93:40:13:cc:43:d1:02:5e:08:23:4d:ab: d7:15:3c:f8:3b:91:44:c5:5d:0b:c7:c2:9f:79:3b: c9:76:ac:e6:3b:ba:10:91:a7:89:cd:67:f0:5c:fd: ef:8d:ae:0b:6e:c7:80:0d:42:03:bc:a4:61:18:bb: 0d:96:71:80:e1:25:d0:13:37:14:44:4c:43:4a:6f: 0e:ed:8a:3d:a5:7f:da:6f:1c:f6:ef:a1:0b:f2:39: eb:0d:b9:88:b4:b7:9e:7b:1c:d0:35:ae:33:03:ca: 91:c0:f2:08:a0:20:bb:9f:ce:cb:21:88:71:97:64: 9d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:53:AD:DE:B5:17:98:D4:58:2B:F7:D2:45:1F:88:9F:2C:AD:98:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8965329d-5d46-3e83-98fa-ea126d8c360b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.133.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:16:b7:c6:5b:17:fc:55:71:c2:a7:74:9b:08:e9:d3:7b:46: 29:d6:50:e8:04:52:f1:cc:2d:5b:58:1e:f2:d9:01:a1:af:ef: dd:f2:bf:19:33:f8:50:9f:24:51:b3:76:43:f0:03:ba:70:4c: c3:21:b0:d1:df:c3:6f:9e:78:7c:fa:af:e1:68:39:92:78:e8: a8:d3:6c:a9:bc:ee:7b:c9:bc:a7:e2:cd:61:d3:ac:73:35:de: 1e:0e:25:fd:68:b1:b4:92:b6:8d:19:87:3a:42:e6:a8:c4:fd: d3:2c:92:20:22:9f:85:68:0c:75:d5:dc:26:8a:d2:01:ee:28: 44:d5:8b:c5:00:cc:13:34:63:15:d0:a0:39:d2:57:f8:23:13: 79:34:22:21:e3:48:18:40:34:1e:13:9e:c7:d2:b9:46:90:75: cf:5f:df:74:2f:0a:e7:ca:33:f8:9d:bd:d2:b8:cd:6e:73:b6: f6:23:82:37:5f:e3:6c:92:8c:de:3f:34:a9:44:c3:a0:66:d3: 53:cc:1c:d0:89:9d:73:cd:15:f4:11:65:82:37:7e:bd:15:6a: 91:f1:da:f0:d5:6b:6e:29:9c:68:b9:57:12:e9:89:98:26:83: b1:95:4c:da:ae:0e:ae:34:92:be:6a:1b:b5:83:01:79:d4:88: c7:3a:81:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jqqKll4zjUmSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NGIyNjllYzQtNTE1Yy00Y2FhLTkyYWQtOTlhOThmNDZhYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrGBfknTN+f9Ws1izPbhAdGACYYIceCUnS0C 86kqlyMHIGADGOBRFhKik9OCFbC5u8nNg4GGDi1eGoaMpPLVAz5NFyx02L6NbKbr v++m+ptNOhUR0uq8VqD9r4ND9D49xj8vjDPcKCWdxbl2AezhKDDND7p4yQ8vyjWj ep1zUWv5yLNNb3fQCKWTQBPMQ9ECXggjTavXFTz4O5FExV0Lx8KfeTvJdqzmO7oQ kaeJzWfwXP3vja4LbseADUIDvKRhGLsNlnGA4SXQEzcURExDSm8O7Yo9pX/abxz2 76EL8jnrDbmItLeeexzQNa4zA8qRwPIIoCC7n87LIYhxl2SdqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZTrd61F5jUWCv30kUfiJ8srZiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODk2NTMyOWQtNWQ0Ni0z ZTgzLTk4ZmEtZWExMjZkOGMzNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQWt8ZbF/xVccKndJsI6dN7RinWUOgEUvHMLVtYHvLZAaGv793yvxkz +FCfJFGzdkPwA7pwTMMhsNHfw2+eeHz6r+FoOZJ46KjTbKm87nvJvKfizWHTrHM1 3h4OJf1osbSSto0ZhzpC5qjE/dMskiAin4VoDHXV3CaK0gHuKETVi8UAzBM0YxXQ oDnSV/gjE3k0IiHjSBhANB4TnsfSuUaQdc9f33QvCufKM/idvdK4zW5ztvYjgjdf 42ySjN4/NKlEw6Bm01PMHNCJnXPNFfQRZYI3fr0VapHx2vDVa24pnGi5VxLpiZgm g7GVTNquDq40kr5qG7WDAXnUiMc6gak= -----END CERTIFICATE-----Generated at Thu Mar 26 10:21:46 2026 by rpki-client