$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa File: aa969370-7f24-3b6a-8011-acd3cfea4b49.roa (raw, json) Hash identifier: 57yNmOQNeEjZmS+nXWvIqaXFQ5DfXKTP3QGSC6OxgbI= Subject key identifier: D3:F5:7D:AC:F9:B5:C6:E1:B4:0B:BB:51:2D:94:3B:85:2B:2A:B2:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A93207CB6B50284372FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 40.142.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:93:20:7c:b6:b5:02:84:37:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=91cfad62-7fa5-4928-b353-3c2ea8339b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:cf:29:9f:5f:15:3d:73:2a:5b:02:ee:8b: 78:63:5f:2e:e9:65:32:fe:50:ad:0d:e4:55:df:de: 1e:60:55:4a:ae:c8:75:03:c1:41:13:db:65:8d:09: 0d:09:e5:e2:08:a8:f2:8c:a5:28:91:3e:78:e7:0b: ad:d2:9e:8e:dd:d7:77:af:34:e0:fa:42:db:ed:71: 9f:0f:00:04:0b:97:5c:5c:90:ef:81:7f:fe:12:e3: b2:c9:8b:be:db:aa:90:b9:41:78:de:6f:98:71:b8: 63:61:24:86:48:50:9e:11:77:06:7e:4e:d6:d0:64: 29:1d:a8:84:fe:19:88:41:3b:5b:62:5e:c9:0f:4c: 7d:09:f0:8e:67:6b:f7:d4:b1:49:b3:12:14:14:ab: cf:0c:e7:f7:33:5d:f6:4d:b3:6b:22:fb:46:72:b1: a9:a0:f5:8a:b2:3e:f3:d0:46:c2:8c:30:45:01:23: 98:23:9e:ae:cd:b8:1c:73:d4:1d:e9:c3:a6:2f:c0: ec:ba:36:eb:ce:c3:be:3c:04:ca:f8:42:a5:79:6b: 84:00:c8:4f:4d:e2:88:18:16:5c:19:26:ab:f6:7f: 01:25:0d:ef:94:62:77:ea:39:2e:24:15:50:f8:ac: 9d:90:ea:4b:a7:3e:98:08:81:1f:20:f3:a9:3d:94: e1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F5:7D:AC:F9:B5:C6:E1:B4:0B:BB:51:2D:94:3B:85:2B:2A:B2:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa969370-7f24-3b6a-8011-acd3cfea4b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c3:8c:04:53:19:5b:a1:ef:4e:9f:8c:5a:0c:10:32:d9:eb: 04:38:db:dc:8b:72:21:8d:37:25:aa:5c:ec:4c:97:12:a7:5c: 55:94:25:65:d6:6a:ac:6c:78:d7:21:4f:e6:2e:83:5c:c1:7a: b9:b2:40:dd:f9:71:97:47:14:a1:c7:19:59:61:40:3e:eb:26: 23:9c:83:99:e6:bd:68:50:15:9b:8d:76:e3:5f:d7:a5:76:56: ce:81:49:92:7b:e4:ef:d4:72:72:cd:2d:88:af:97:21:99:93: e4:24:32:5b:a2:72:be:ca:ac:db:f7:a0:4b:30:f3:49:ee:ca: 1c:0c:cd:64:29:74:49:0d:4a:32:c7:2f:c9:3a:69:05:e8:ee: 71:63:7e:28:b3:46:c1:f1:b1:14:3a:4e:a5:c5:72:f9:69:22: 8f:8d:ab:5c:f1:66:2c:b5:4a:c1:0f:3f:da:43:2a:6f:c2:a2: e0:8a:fe:5a:c2:b5:b3:5d:ff:04:9f:3e:fd:e6:2b:17:d9:99: b8:1c:58:93:71:6f:9a:27:3b:f1:5d:a3:a5:33:16:56:5c:3d: 48:5a:6c:76:88:c6:bd:d4:88:73:b9:dc:2d:a7:86:57:ee:9e: 07:81:45:0a:86:d6:45:57:d0:b3:24:d3:59:df:81:06:a1:20: 12:53:f1:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpMgfLa1AoQ3L8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTFjZmFkNjItN2ZhNS00OTI4LWIzNTMtM2MyZWE4MzM5YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshTPKZ9fFT1zKlsC7ot4Y18u6WUy/lCtDeRV 394eYFVKrsh1A8FBE9tljQkNCeXiCKjyjKUokT545wut0p6O3dd3rzTg+kLb7XGf DwAEC5dcXJDvgX/+EuOyyYu+26qQuUF43m+YcbhjYSSGSFCeEXcGfk7W0GQpHaiE /hmIQTtbYl7JD0x9CfCOZ2v31LFJsxIUFKvPDOf3M132TbNrIvtGcrGpoPWKsj7z 0EbCjDBFASOYI56uzbgcc9Qd6cOmL8DsujbrzsO+PATK+EKleWuEAMhPTeKIGBZc GSar9n8BJQ3vlGJ36jkuJBVQ+KydkOpLpz6YCIEfIPOpPZThewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNP1faz5tcbhtAu7US2UO4UrKrK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWE5NjkzNzAtN2YyNC0z YjZhLTgwMTEtYWNkM2NmZWE0YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKI6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzDjARTGVuh706fjFoMEDLZ6wQ429yLciGNNyWqXOxMlxKnXFWUJWXW aqxseNchT+Yug1zBermyQN35cZdHFKHHGVlhQD7rJiOcg5nmvWhQFZuNduNf16V2 Vs6BSZJ75O/UcnLNLYivlyGZk+QkMluicr7KrNv3oEsw80nuyhwMzWQpdEkNSjLH L8k6aQXo7nFjfiizRsHxsRQ6TqXFcvlpIo+Nq1zxZiy1SsEPP9pDKm/CouCK/lrC tbNd/wSfPv3mKxfZmbgcWJNxb5onO/Fdo6UzFlZcPUhabHaIxr3UiHO53C2nhlfu ngeBRQqG1kVX0LMk01nfgQahIBJT8Tc= -----END CERTIFICATE-----Generated at Thu Mar 26 14:41:39 2026 by rpki-client