$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c14f9966-6f62-388e-b16d-46eb78fa4a94.roa File: c14f9966-6f62-388e-b16d-46eb78fa4a94.roa (raw, json) Hash identifier: Hrbx2UDLOvYpCU/4XElZGT5SDxLYB7pC8fhti1BRqUI= Subject key identifier: CF:DA:3F:AD:C8:67:D4:DF:86:3B:CD:55:61:23:6F:09:70:24:CA:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F431B1B53705914FBB3788BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c14f9966-6f62-388e-b16d-46eb78fa4a94.roa Signing time: Tue 22 Sep 2026 18:29:14 +0000 ROA not before: Tue 22 Sep 2026 18:29:14 +0000 ROA not after: Mon 21 Dec 2026 19:29:14 +0000 asID: 7029 IP address blocks: 40.142.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:1b:1b:53:70:59:14:fb:b3:78:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 22 18:29:14 2026 GMT Not After : Dec 21 19:29:14 2026 GMT Subject: CN=9aac50ad-3b9b-4913-9c53-5f2a93b21fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:01:7b:44:6e:89:5f:f2:41:f7:f9:5f:05: 3c:ed:b7:4f:7d:51:a8:00:c6:40:24:26:c2:4f:a2: 90:73:8a:cf:81:be:8f:2c:d0:d3:d0:bb:15:c2:53: 86:26:6f:ef:7e:7a:15:70:0e:ac:fd:28:c7:4c:cb: 5c:98:05:bb:ba:ed:01:65:9c:94:07:b1:80:55:4c: 28:95:e9:57:09:62:e6:2c:84:f0:24:a2:29:d9:b1: 1d:ca:8b:14:e4:45:21:1a:41:a3:fc:52:60:a7:0f: 59:af:85:01:02:98:38:56:54:1b:09:fc:76:57:99: 9d:0d:3e:84:c1:59:e0:fb:81:af:df:60:b7:14:40: b4:fd:4a:0e:ee:aa:b2:63:6a:b6:6e:76:42:ce:fc: 46:f9:08:2c:f2:38:8f:50:6a:de:e7:f1:9b:73:76: 5e:3b:03:da:9b:2a:92:35:59:b9:10:3a:4c:10:bd: 26:03:6e:63:7d:54:5e:07:f8:44:3a:5e:54:2b:21: 38:05:43:dd:2d:e1:92:fb:9d:fd:a5:39:cd:4c:00: 32:50:27:16:21:e0:98:de:54:ad:3b:73:16:6b:a5: c7:29:6a:f0:61:c5:05:22:ae:e0:4a:7a:08:29:4e: 16:e3:b1:74:3b:53:d1:41:f2:16:4d:e5:46:36:df: e5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DA:3F:AD:C8:67:D4:DF:86:3B:CD:55:61:23:6F:09:70:24:CA:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c14f9966-6f62-388e-b16d-46eb78fa4a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:37:d3:de:c2:c9:1e:56:00:f3:cc:e3:d9:a1:24:a6:2e:09: 0b:77:a0:57:0d:78:2a:f8:2e:32:f0:58:24:d2:9b:0e:a8:fe: 94:52:4a:60:99:52:4d:80:d9:9b:0c:67:c8:56:dd:c2:2a:53: e0:ac:e3:d4:38:9b:4f:6d:dc:aa:01:a8:ae:ae:c1:03:df:11: 35:5a:d2:04:79:b8:58:10:6b:5e:3f:8d:fa:af:3f:9a:01:f4: 6d:95:a9:33:63:03:09:6d:6b:dd:1e:ce:df:e1:f3:52:5f:55: e7:c8:d7:9f:3b:a8:95:f4:73:92:9c:c3:cd:5f:94:5c:47:6c: 96:a2:81:9c:8b:d2:03:53:34:29:62:a0:28:45:7b:01:a8:1e: ec:17:6d:84:1f:4f:24:62:d4:6b:8b:8a:45:c7:84:96:dd:bc: e7:e4:de:96:8e:b5:38:70:85:b2:b8:c0:2a:4d:fe:ac:2e:46: ad:b8:c2:de:bc:c8:2b:6f:19:6e:d3:11:89:db:20:b2:b2:0c: 66:18:e0:3d:22:b4:49:70:4a:e3:dd:12:b6:e7:a6:7e:4f:ab: e9:3d:28:4b:af:7b:81:d6:d1:b1:78:31:1f:4f:45:23:34:a7: d4:a4:9b:e3:2b:ba:7c:cc:90:3e:23:67:06:24:10:81:a5:ef: d6:8f:8c:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9DGxtTcFkU+7N4i8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyMjE4MjkxNFoXDTI2MTIyMTE5MjkxNFowLzEtMCsGA1UEAxMk OWFhYzUwYWQtM2I5Yi00OTEzLTljNTMtNWYyYTkzYjIxZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRYBe0RuiV/yQff5XwU87bdPfVGoAMZAJCbC T6KQc4rPgb6PLNDT0LsVwlOGJm/vfnoVcA6s/SjHTMtcmAW7uu0BZZyUB7GAVUwo lelXCWLmLITwJKIp2bEdyosU5EUhGkGj/FJgpw9Zr4UBApg4VlQbCfx2V5mdDT6E wVng+4Gv32C3FEC0/UoO7qqyY2q2bnZCzvxG+Qgs8jiPUGre5/Gbc3ZeOwPamyqS NVm5EDpMEL0mA25jfVReB/hEOl5UKyE4BUPdLeGS+539pTnNTAAyUCcWIeCY3lSt O3MWa6XHKWrwYcUFIq7gSnoIKU4W47F0O1PRQfIWTeVGNt/l3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/aP63IZ9TfhjvNVWEjbwlwJMoyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzE0Zjk5NjYtNmY2Mi0z ODhlLWIxNmQtNDZlYjc4ZmE0YTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI6PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA3097CyR5WAPPM49mhJKYuCQt3oFcNeCr4LjLwWCTSmw6o/pRSSmCZ Uk2A2ZsMZ8hW3cIqU+Cs49Q4m09t3KoBqK6uwQPfETVa0gR5uFgQa14/jfqvP5oB 9G2VqTNjAwlta90ezt/h81JfVefI1587qJX0c5Kcw81flFxHbJaigZyL0gNTNCli oChFewGoHuwXbYQfTyRi1GuLikXHhJbdvOfk3paOtThwhbK4wCpN/qwuRq24wt68 yCtvGW7TEYnbILKyDGYY4D0itElwSuPdErbnpn5Pq+k9KEuve4HW0bF4MR9PRSM0 p9Skm+MrunzMkD4jZwYkEIGl79aPjOs= -----END CERTIFICATE-----Generated at Sun Sep 27 10:39:10 2026 by rpki-client