$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a518fe46-53d7-31a1-b495-fd5e01ede4b1.roa File: a518fe46-53d7-31a1-b495-fd5e01ede4b1.roa (raw, json) Hash identifier: +VMTG53iLwFvjUtMv0wz624dngrKWcHcCtaCY3CF0w8= Subject key identifier: 87:73:AE:EE:38:7B:9C:46:9A:58:87:95:C6:AE:FE:2E:83:8C:67:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F42C3F8D128E03BDDD7A7F0C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a518fe46-53d7-31a1-b495-fd5e01ede4b1.roa Signing time: Tue 22 Sep 2026 15:33:40 +0000 ROA not before: Tue 22 Sep 2026 15:33:40 +0000 ROA not after: Mon 21 Dec 2026 16:33:40 +0000 asID: 7029 IP address blocks: 40.142.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:c3:f8:d1:28:e0:3b:dd:d7:a7:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 22 15:33:40 2026 GMT Not After : Dec 21 16:33:40 2026 GMT Subject: CN=d29fbebd-d80a-404d-b951-a149efde816d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:d8:e0:1e:2e:d1:38:94:c4:cf:ab:ff:00: 6c:18:da:b8:64:f0:77:be:36:8b:4b:a8:5d:63:30: 2c:7d:1f:2c:76:6f:9c:81:4a:ca:b7:42:b4:8f:32: 80:96:8b:e7:cf:28:a1:8c:c7:84:7c:86:4b:83:14: 98:b8:a8:e8:89:c7:cc:21:45:7d:90:ec:e1:7b:64: 0d:6f:5e:78:85:a9:3d:35:0c:1a:9b:3e:f0:85:95: bc:c3:5b:bf:ef:2b:15:4d:f7:e9:bf:8e:6c:a2:ac: 2a:a3:7c:b2:2e:1c:ee:e5:44:f8:f4:66:53:7f:f4: bb:7e:03:fc:db:13:eb:05:01:00:a8:b9:90:01:7f: 95:59:12:20:68:65:ed:04:2f:a1:e8:ec:45:b2:df: 03:6a:b0:04:55:42:91:5c:7d:58:37:b0:75:9c:ff: a5:fd:25:e9:7b:71:94:87:e9:2c:72:e3:16:86:2e: 2a:da:97:96:b3:b7:d1:9f:73:56:1d:c6:0f:b6:70: 42:3b:79:f9:92:96:64:24:b8:7d:9f:2a:cd:57:46: a6:75:ca:2a:da:fd:ef:a1:8d:58:22:a6:97:dc:a1: 72:98:7b:48:eb:f2:99:b1:1f:93:d5:40:79:de:80: c0:82:69:d3:2f:1a:76:c3:3b:b1:21:3a:f5:fb:2b: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:73:AE:EE:38:7B:9C:46:9A:58:87:95:C6:AE:FE:2E:83:8C:67:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a518fe46-53d7-31a1-b495-fd5e01ede4b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:0e:c7:f6:f0:ec:ad:d4:00:f3:20:6f:b6:9d:36:69:a6:92: 7e:a1:67:c6:db:e7:9f:25:5f:1a:88:7f:3c:82:ec:6e:14:10: de:22:75:56:fc:1e:92:ca:58:86:be:70:e6:ed:8c:71:1a:10: a5:c9:05:e5:5f:72:4f:bb:15:21:17:53:68:1d:30:76:c2:5d: 00:23:65:b3:04:9a:b1:cd:62:1c:95:90:b2:a6:37:1b:f4:6e: e9:4f:20:63:43:2e:f5:dd:af:0e:a1:21:d0:4a:1b:65:74:a3: f8:04:17:28:b4:f3:76:01:36:7a:d2:73:68:5a:76:62:c2:ec: 6a:53:02:c3:ae:ab:35:33:1a:d5:62:a0:40:0d:e2:f2:8c:72: d1:51:55:0b:5d:05:88:41:02:ca:ca:7c:aa:05:50:1c:78:ff: d5:38:9e:e5:fc:63:8a:1d:27:e1:e0:73:76:90:b7:9b:c6:0f: 41:f2:8a:c2:fb:8b:21:3b:bf:81:8d:86:f0:25:18:70:2b:71: 8e:36:bc:42:2f:db:9e:a4:ed:92:86:71:84:3a:4f:5f:8a:18: ab:09:8c:f1:fe:0b:43:e4:dd:5e:42:82:2f:84:cb:aa:8c:7b: 31:51:b5:41:1c:50:f9:43:a6:7e:32:2f:fb:24:7d:42:6e:fb: 49:ca:5d:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cw/jRKOA73den8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyMjE1MzM0MFoXDTI2MTIyMTE2MzM0MFowLzEtMCsGA1UEAxMk ZDI5ZmJlYmQtZDgwYS00MDRkLWI5NTEtYTE0OWVmZGU4MTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD3Y4B4u0TiUxM+r/wBsGNq4ZPB3vjaLS6hd YzAsfR8sdm+cgUrKt0K0jzKAlovnzyihjMeEfIZLgxSYuKjoicfMIUV9kOzhe2QN b154hak9NQwamz7whZW8w1u/7ysVTffpv45soqwqo3yyLhzu5UT49GZTf/S7fgP8 2xPrBQEAqLmQAX+VWRIgaGXtBC+h6OxFst8DarAEVUKRXH1YN7B1nP+l/SXpe3GU h+kscuMWhi4q2peWs7fRn3NWHcYPtnBCO3n5kpZkJLh9nyrNV0amdcoq2v3voY1Y IqaX3KFymHtI6/KZsR+T1UB53oDAgmnTLxp2wzuxITr1+ytDRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdzru44e5xGmliHlcau/i6DjGdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTUxOGZlNDYtNTNkNy0z MWExLWI0OTUtZmQ1ZTAxZWRlNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI6OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIOx/bw7K3UAPMgb7adNmmmkn6hZ8bb558lXxqIfzyC7G4UEN4idVb8 HpLKWIa+cObtjHEaEKXJBeVfck+7FSEXU2gdMHbCXQAjZbMEmrHNYhyVkLKmNxv0 bulPIGNDLvXdrw6hIdBKG2V0o/gEFyi083YBNnrSc2hadmLC7GpTAsOuqzUzGtVi oEAN4vKMctFRVQtdBYhBAsrKfKoFUBx4/9U4nuX8Y4odJ+Hgc3aQt5vGD0HyisL7 iyE7v4GNhvAlGHArcY42vEIv256k7ZKGcYQ6T1+KGKsJjPH+C0Pk3V5Cgi+Ey6qM ezFRtUEcUPlDpn4yL/skfUJu+0nKXXQ= -----END CERTIFICATE-----Generated at Sat Sep 26 13:14:26 2026 by rpki-client