$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ed43167-3d55-396e-b7f5-63a15906bbb8.roa File: 8ed43167-3d55-396e-b7f5-63a15906bbb8.roa (raw, json) Hash identifier: R+fDUkadY4Ow4ctoRsuTOrCUeeUMXyGbDB2DTMP6O5Y= Subject key identifier: A7:3B:6C:7C:58:84:DB:C7:ED:CB:A6:BA:0C:5E:FB:05:7B:29:9D:AB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024235C657963BCBBA430740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ed43167-3d55-396e-b7f5-63a15906bbb8.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 40.131.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:35:c6:57:96:3b:cb:ba:43:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=1842c24a-9ea6-4518-b690-0471eb201ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:12:ea:50:43:04:3c:5c:f5:a1:90:be:ed: 51:00:29:d2:7d:a0:da:2e:38:81:e8:03:20:24:f7: 8a:95:6b:4a:91:a8:1d:c1:8b:a2:88:1f:20:b0:91: c8:41:60:e9:8d:91:be:55:6f:02:27:a8:3f:f2:2d: 2f:e1:d6:bf:a2:36:1d:14:5e:45:9a:9e:9c:e2:29: 8f:c3:d1:b8:88:b8:a3:9b:48:03:ff:c3:0f:2a:65: f6:7e:cd:07:f9:e9:22:71:83:8a:57:34:4c:4f:9d: 8c:7f:20:cd:e4:d8:a2:b1:60:20:3e:50:ca:b4:df: f2:8a:85:53:07:7f:de:44:90:15:b4:56:7e:e0:51: 23:c7:9e:0a:2e:b4:eb:fe:70:6d:a2:c8:a0:07:94: 09:6a:41:7f:8a:f7:f3:1a:c3:e4:0c:27:24:63:d9: c1:f7:8e:b4:db:48:19:5c:3c:f8:61:6d:d2:5b:49: e6:a3:02:ae:76:9d:d8:01:da:b6:b7:35:63:df:b7: e5:97:33:e1:6b:db:3b:26:e1:e2:9d:b2:9b:71:fa: fa:1f:ff:83:e4:66:c5:41:de:a0:15:41:ac:e8:5e: 84:dc:7a:43:70:d1:ef:e9:56:51:e6:7e:ac:e3:b1: 2f:7a:56:ba:10:4f:9a:45:12:82:fd:4c:29:78:89: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3B:6C:7C:58:84:DB:C7:ED:CB:A6:BA:0C:5E:FB:05:7B:29:9D:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ed43167-3d55-396e-b7f5-63a15906bbb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.131.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6b:f0:d4:a0:1d:dd:35:81:43:cf:6d:c2:c3:75:68:7d:45: 49:bb:a7:d0:16:3d:30:2c:ce:b6:f7:5b:1e:4f:6e:68:98:f1: 71:24:58:78:25:66:54:3e:87:72:02:a5:fc:ad:39:ca:d3:76: 72:39:99:e4:b2:83:77:2c:ce:b6:80:28:7a:e9:5b:7a:00:c9: 05:62:96:7e:fd:2b:23:f3:f3:43:84:3a:1b:11:b9:45:ce:ba: 50:04:2e:56:e8:37:1a:dc:43:7c:4f:b3:27:25:24:ad:66:17: fc:aa:0e:10:89:74:66:15:f1:85:66:c9:da:3a:51:df:ca:29: 64:81:b9:bf:27:e9:47:9f:ce:bd:a1:1b:1c:92:cc:73:dd:ff: a7:20:04:77:f9:00:a1:5a:f4:94:53:1e:71:0b:ca:25:17:59: 2b:29:53:bd:1d:ea:46:64:11:b8:9f:9f:94:f4:cf:7c:86:71: a7:61:19:22:ac:b8:f1:ee:5b:85:96:18:eb:7c:f9:e5:02:cc: 00:30:8f:11:55:b9:73:0d:84:84:18:d9:23:8c:f4:73:76:b6: 54:57:52:6d:3a:4d:47:9a:eb:1c:89:14:c7:4d:ca:95:5a:53: e2:b1:c5:3b:e5:9f:46:d0:0c:a6:2b:01:68:1d:54:22:01:3e: 9d:3f:36:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjXGV5Y7y7pDB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MTg0MmMyNGEtOWVhNi00NTE4LWI2OTAtMDQ3MWViMjAxZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8US6lBDBDxc9aGQvu1RACnSfaDaLjiB6AMg JPeKlWtKkagdwYuiiB8gsJHIQWDpjZG+VW8CJ6g/8i0v4da/ojYdFF5Fmp6c4imP w9G4iLijm0gD/8MPKmX2fs0H+ekicYOKVzRMT52MfyDN5NiisWAgPlDKtN/yioVT B3/eRJAVtFZ+4FEjx54KLrTr/nBtosigB5QJakF/ivfzGsPkDCckY9nB946020gZ XDz4YW3SW0nmowKudp3YAdq2tzVj37fllzPha9s7JuHinbKbcfr6H/+D5GbFQd6g FUGs6F6E3HpDcNHv6VZR5n6s47Evela6EE+aRRKC/UwpeImfJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKc7bHxYhNvH7cumugxe+wV7KZ2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGVkNDMxNjctM2Q1NS0z OTZlLWI3ZjUtNjNhMTU5MDZiYmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxr8NSgHd01gUPPbcLDdWh9RUm7p9AWPTAszrb3Wx5PbmiY8XEkWHgl ZlQ+h3ICpfytOcrTdnI5meSyg3cszraAKHrpW3oAyQViln79KyPz80OEOhsRuUXO ulAELlboNxrcQ3xPsyclJK1mF/yqDhCJdGYV8YVmydo6Ud/KKWSBub8n6Uefzr2h GxySzHPd/6cgBHf5AKFa9JRTHnELyiUXWSspU70d6kZkEbifn5T0z3yGcadhGSKs uPHuW4WWGOt8+eUCzAAwjxFVuXMNhIQY2SOM9HN2tlRXUm06TUea6xyJFMdNypVa U+KxxTvln0bQDKYrAWgdVCIBPp0/Nug= -----END CERTIFICATE-----Generated at Tue Sep 29 15:45:41 2026 by rpki-client