$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b1290a89-ed91-3aef-878d-0910878e2abc.roa File: b1290a89-ed91-3aef-878d-0910878e2abc.roa (raw, json) Hash identifier: k5wbKHlI85zeDgEmCULnM+fSGY177vLqdHGanaQqjRE= Subject key identifier: E9:B3:BA:72:7B:33:5A:36:50:E6:25:9E:5C:11:31:58:04:21:3F:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A679773CD0328043C8080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b1290a89-ed91-3aef-878d-0910878e2abc.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 40.140.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:67:97:73:cd:03:28:04:3c:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=7a5f132e-0721-4e4a-bb32-fdc1a4f1e9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:3b:95:53:67:29:26:af:62:ad:4f:7a:be: 4f:4d:ef:86:ca:39:d0:f2:fe:9f:91:00:90:3d:60: cc:1d:bb:44:2c:99:da:c0:35:e0:73:0a:18:eb:10: 77:26:71:4e:bd:13:29:11:29:5e:20:70:ce:91:42: 8c:76:6c:ff:c1:5b:09:16:85:76:25:bf:65:e2:88: 74:81:c0:0d:f5:c0:4e:a5:6c:73:93:ab:35:03:da: 10:cd:d4:f7:44:9a:15:f8:1c:98:21:73:ef:f8:35: 0b:b6:0d:9f:b7:9e:62:b4:79:a7:89:a3:25:e3:27: f1:f5:f8:b6:ac:4e:d8:a8:58:1c:c7:ca:c5:8b:97: 11:f6:52:4d:5f:9e:54:d8:3d:32:30:17:f1:2d:02: 84:57:5b:e5:af:7a:ee:03:b9:4c:9e:9b:00:12:21: 5e:07:bd:ee:2e:f3:c9:20:e1:ac:8d:8c:b6:b9:32: 00:ab:27:1e:df:32:27:2b:d8:1c:37:15:b5:b8:3e: 6f:cb:0c:8b:c3:c8:d4:a5:9b:ed:d6:dc:4d:f4:e2: 91:b3:e1:d9:65:83:ea:95:f7:cf:15:47:d2:cd:8f: ba:57:53:71:73:45:ca:5f:64:53:57:5e:1c:a6:7c: b0:13:70:3b:51:d6:87:44:18:9f:b9:27:de:0b:29: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B3:BA:72:7B:33:5A:36:50:E6:25:9E:5C:11:31:58:04:21:3F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b1290a89-ed91-3aef-878d-0910878e2abc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.140.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a9:73:8f:cc:03:93:e0:e9:d5:f3:b5:00:53:dd:e8:22:4d: 9d:9a:68:f2:a7:c0:56:40:71:3f:26:49:17:ae:63:6e:d0:49: 7f:32:28:10:25:df:5f:1c:9f:53:7d:e4:1a:b0:1a:12:84:92: ec:38:9b:92:e5:02:f5:da:21:41:0c:90:42:49:0c:8d:02:f4: b7:36:cb:d0:09:81:96:ae:4e:a2:f5:a3:66:b3:be:78:6f:ba: 88:3b:20:f5:e9:38:7b:56:9d:29:0b:db:65:17:2a:cf:48:91: bb:4d:73:76:65:81:96:c2:d2:81:5d:0a:58:f2:9f:b9:be:8e: 55:8f:4d:dc:21:08:fd:21:00:6c:c4:ea:53:13:23:13:fb:3c: 81:12:26:53:69:06:e6:8b:cc:ae:c5:da:b8:f4:c9:10:5d:1f: 17:ea:43:13:99:eb:a3:c2:97:fa:2c:29:06:49:5a:8a:a2:f0: e3:63:6c:91:c5:c7:75:19:6a:c4:56:18:3c:20:15:b0:a0:be: 74:d2:f1:2b:d7:0f:31:65:ab:7f:10:d5:a2:7e:8b:23:37:ad: 84:ca:bb:c3:3f:ab:52:25:8f:fb:43:4e:65:93:d0:9f:4b:f4: 35:00:bd:63:6b:4d:fe:92:8c:fb:c4:2f:a4:2f:39:3a:8e:47: 60:ed:a2:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmeXc80DKAQ8gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk N2E1ZjEzMmUtMDcyMS00ZTRhLWJiMzItZmRjMWE0ZjFlOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ig7lVNnKSavYq1Per5PTe+GyjnQ8v6fkQCQ PWDMHbtELJnawDXgcwoY6xB3JnFOvRMpESleIHDOkUKMdmz/wVsJFoV2Jb9l4oh0 gcAN9cBOpWxzk6s1A9oQzdT3RJoV+ByYIXPv+DULtg2ft55itHmniaMl4yfx9fi2 rE7YqFgcx8rFi5cR9lJNX55U2D0yMBfxLQKEV1vlr3ruA7lMnpsAEiFeB73uLvPJ IOGsjYy2uTIAqyce3zInK9gcNxW1uD5vywyLw8jUpZvt1txN9OKRs+HZZYPqlffP FUfSzY+6V1Nxc0XKX2RTV14cpnywE3A7UdaHRBifuSfeCyn+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmzunJ7M1o2UOYlnlwRMVgEIT/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjEyOTBhODktZWQ5MS0z YWVmLTg3OGQtMDkxMDg3OGUyYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKIz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+pc4/MA5Pg6dXztQBT3egiTZ2aaPKnwFZAcT8mSReuY27QSX8yKBAl 318cn1N95BqwGhKEkuw4m5LlAvXaIUEMkEJJDI0C9Lc2y9AJgZauTqL1o2azvnhv uog7IPXpOHtWnSkL22UXKs9IkbtNc3ZlgZbC0oFdCljyn7m+jlWPTdwhCP0hAGzE 6lMTIxP7PIESJlNpBuaLzK7F2rj0yRBdHxfqQxOZ66PCl/osKQZJWoqi8ONjbJHF x3UZasRWGDwgFbCgvnTS8SvXDzFlq38Q1aJ+iyM3rYTKu8M/q1Ilj/tDTmWT0J9L 9DUAvWNrTf6SjPvEL6QvOTqOR2DtokM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:09 2026 by rpki-client