$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d7ea20-7764-3514-bd6b-25b304f423e7.roa File: a4d7ea20-7764-3514-bd6b-25b304f423e7.roa (raw, json) Hash identifier: VA6oawyroQqCLckja6QHgVe9SzL4XpmlpIAimruTHnM= Subject key identifier: CD:E6:DE:89:53:B4:A9:FC:F3:05:EC:F3:28:F5:59:07:51:F9:DD:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA391E5BFA85C78F6FBC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d7ea20-7764-3514-bd6b-25b304f423e7.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7896 IP address blocks: 40.135.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a3:91:e5:bf:a8:5c:78:f6:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d6fa696c-c59b-46df-924d-9aefe85f42f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:05:97:48:11:4f:b3:d5:3c:ab:0a:98:c6:cb: 2a:66:00:fe:d5:e3:2a:23:69:a8:11:55:6b:f1:08: 52:db:cd:f0:c3:9e:e2:df:67:6e:d6:b8:ca:c5:1b: 70:87:d4:52:10:39:80:b9:2c:47:7f:7b:af:0f:3a: 0a:51:ed:44:c1:18:06:43:01:d9:bb:1f:7f:a8:ba: db:f7:b8:72:de:0f:d9:99:62:c7:62:0c:5a:ee:8b: 37:c5:0f:68:20:5f:70:30:54:c6:31:25:ba:1d:68: d4:b9:54:36:72:91:64:70:7e:60:7d:2e:7f:e9:42: 62:59:f4:f3:61:ab:c6:13:99:09:eb:88:a2:51:99: cc:51:01:7a:7b:80:52:29:d4:eb:fc:a9:54:b3:02: 00:29:b0:0e:29:62:24:6a:b7:ff:4f:3c:88:e4:18: 75:fa:a4:ed:e5:0a:db:4d:b6:22:56:0d:7d:bc:00: 5e:2b:04:69:1e:2f:cb:45:37:82:30:52:6b:3a:ad: 6a:66:48:97:8b:7c:d7:0e:bb:f0:eb:09:15:2b:d8: 3d:9a:47:73:1c:68:63:6e:27:a7:ef:4e:89:72:41: 26:e2:46:2d:50:18:a9:ab:d2:bb:d1:38:97:09:ed: 28:99:9c:62:2c:3a:80:27:40:dc:1e:20:0a:62:22: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E6:DE:89:53:B4:A9:FC:F3:05:EC:F3:28:F5:59:07:51:F9:DD:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4d7ea20-7764-3514-bd6b-25b304f423e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.135.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:70:ca:85:eb:7b:85:81:cf:0c:f6:f0:5c:c8:6e:a0:95:8b: aa:88:f0:e9:9d:ee:d4:c2:e1:71:3d:fd:98:51:9a:97:df:09: c4:d2:a3:86:72:0f:d2:cd:cf:c7:2a:5f:7e:05:e4:21:1a:e5: b0:e8:bf:c5:f9:bb:43:c8:d3:bf:00:73:64:81:a5:8e:eb:c6: 0e:ef:e2:8d:68:70:47:d4:f5:b6:51:1b:48:35:47:ec:51:43: 27:32:b1:67:04:05:45:28:6d:fd:c5:ac:d7:af:51:a6:ae:74: 9a:77:e6:36:c6:e0:9c:b7:50:95:a8:d4:29:20:97:d2:04:b7: 40:f9:0a:8b:cb:1f:23:8e:9e:2c:d4:4d:a8:07:d1:d2:cc:31: 1a:4f:be:95:2a:d0:70:07:19:97:10:d1:ac:54:d3:78:e6:c2: 89:a0:49:54:ec:23:6d:3f:7b:3c:9b:fd:fc:fa:a6:88:b1:51: 8e:29:3d:7d:b0:02:43:a0:79:31:55:c2:aa:11:38:e6:ff:04: b0:f7:09:7c:10:1e:b4:af:f3:ee:2a:19:5b:58:87:eb:8d:ee: 9c:f4:06:3e:01:99:4b:9e:52:9f:09:0e:63:74:eb:d1:27:15: ee:72:23:af:8c:30:ad:6c:4f:01:3c:b1:e8:81:51:4f:3c:98: 3a:a8:f2:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqOR5b+oXHj2+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDZmYTY5NmMtYzU5Yi00NmRmLTkyNGQtOWFlZmU4NWY0MmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wWXSBFPs9U8qwqYxssqZgD+1eMqI2moEVVr 8QhS283ww57i32du1rjKxRtwh9RSEDmAuSxHf3uvDzoKUe1EwRgGQwHZux9/qLrb 97hy3g/ZmWLHYgxa7os3xQ9oIF9wMFTGMSW6HWjUuVQ2cpFkcH5gfS5/6UJiWfTz YavGE5kJ64iiUZnMUQF6e4BSKdTr/KlUswIAKbAOKWIkarf/TzyI5Bh1+qTt5Qrb TbYiVg19vABeKwRpHi/LRTeCMFJrOq1qZkiXi3zXDrvw6wkVK9g9mkdzHGhjbien 706JckEm4kYtUBipq9K70TiXCe0omZxiLDqAJ0DcHiAKYiKg3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3m3olTtKn88wXs8yj1WQdR+d32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTRkN2VhMjAtNzc2NC0z NTE0LWJkNmItMjViMzA0ZjQyM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIcZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENwyoXre4WBzwz28FzIbqCVi6qI8Omd7tTC4XE9/ZhRmpffCcTSo4Zy D9LNz8cqX34F5CEa5bDov8X5u0PI078Ac2SBpY7rxg7v4o1ocEfU9bZRG0g1R+xR QycysWcEBUUobf3FrNevUaaudJp35jbG4Jy3UJWo1Ckgl9IEt0D5CovLHyOOnizU TagH0dLMMRpPvpUq0HAHGZcQ0axU03jmwomgSVTsI20/ezyb/fz6poixUY4pPX2w AkOgeTFVwqoROOb/BLD3CXwQHrSv8+4qGVtYh+uN7pz0Bj4BmUueUp8JDmN069En Fe5yI6+MMK1sTwE8seiBUU88mDqo8tY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:24:40 2026 by rpki-client