$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce712daa-5c39-35a6-8573-f31e51558203.roa File: ce712daa-5c39-35a6-8573-f31e51558203.roa (raw, json) Hash identifier: kbHoh0s8bqngiXZfPH84k3vWkNmeJmjW73wB4j+rslA= Subject key identifier: F2:8C:68:27:1B:27:A7:21:32:55:45:85:5B:ED:8E:04:F6:81:7B:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A929B1CAF62A5F13432C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce712daa-5c39-35a6-8573-f31e51558203.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 40.128.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:92:9b:1c:af:62:a5:f1:34:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=13a01911-a1eb-4a9c-bf90-e91e08323b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8e:3b:7e:34:a1:44:78:52:ac:08:0b:65:5a: 2d:dc:6c:58:f0:ae:5c:13:c8:c6:36:8d:cd:d4:e6: 2f:ff:c3:f9:87:06:1f:40:02:09:38:61:26:4e:ca: 06:cf:80:ea:81:b2:52:69:23:59:25:cd:db:c1:74: cf:93:36:d9:d8:f4:a5:d8:02:be:ab:f3:d0:7a:79: 76:7b:9c:fe:8b:25:78:d3:c3:d0:15:21:b0:c3:81: 80:97:5d:6a:d1:7c:19:16:c5:a1:28:da:62:76:53: e5:60:f6:c9:a8:6c:3d:b1:14:61:da:fa:6b:8c:49: 72:21:7e:0a:63:52:75:10:e7:c6:72:6b:55:46:23: 0f:bf:c2:e4:a1:ed:2d:80:6c:13:6c:55:34:07:e1: 84:3d:80:91:bc:d2:ce:89:e0:74:62:de:fb:2c:a9: 28:1b:96:33:3a:70:77:d1:1d:4f:2e:aa:08:75:fe: 94:81:1e:5c:7e:f1:10:5a:56:bc:2f:ab:b3:cb:5d: fd:57:21:ce:a7:6b:16:3f:98:30:ce:5b:ae:45:12: 2d:51:58:87:e1:6c:41:ef:2d:e2:11:95:57:d8:33: 71:81:d1:60:73:74:9c:2b:ac:ec:0f:ef:69:f3:2d: 64:26:1a:00:5a:02:4b:44:86:ec:dd:90:eb:91:2a: ce:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8C:68:27:1B:27:A7:21:32:55:45:85:5B:ED:8E:04:F6:81:7B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce712daa-5c39-35a6-8573-f31e51558203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.128.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a8:f9:58:8e:f3:3c:0b:ce:66:a0:75:e8:e8:ff:01:11:60: 8d:b2:97:0a:94:8d:29:b4:5b:54:e6:73:12:52:1b:97:07:80: 2f:e1:a4:6b:0c:c0:c8:f4:3f:f2:84:cc:30:b4:83:bd:7a:a2: 48:ab:3e:78:76:60:49:5a:bd:76:1a:6b:71:f9:69:61:62:ee: 6c:3d:90:77:55:70:8b:d7:26:c5:2c:7d:3b:f0:46:e3:ee:bb: 2e:eb:70:d3:2b:5c:d5:56:5d:1d:11:10:99:cb:8d:a0:ef:17: 19:d2:b0:1e:cb:ca:93:ff:5d:b7:f0:8a:df:c6:32:a3:99:c8: 93:ff:31:19:cf:e6:ba:12:db:73:f5:76:6d:bf:b5:fc:34:0d: 4c:ab:e7:85:6c:ca:5c:19:e1:02:d1:a6:5f:ee:26:2c:eb:f5: 19:9a:99:75:93:50:4f:f9:5a:3b:64:c9:94:5f:e7:64:20:98: ac:7b:91:6f:29:ca:4b:53:56:27:f9:ba:da:8a:b4:d1:e8:ff: cc:00:63:a2:b4:29:48:f7:df:6c:ed:e0:a1:9d:59:47:c0:73: cf:dc:f6:a1:6d:43:4d:ef:4e:60:f0:4e:6c:0f:1d:6c:e5:f1: a2:35:1c:9c:f5:09:74:92:c1:32:92:52:d1:5b:a6:79:3e:5f: c5:eb:a7:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpKbHK9ipfE0MsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTNhMDE5MTEtYTFlYi00YTljLWJmOTAtZTkxZTA4MzIzYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio47fjShRHhSrAgLZVot3GxY8K5cE8jGNo3N 1OYv/8P5hwYfQAIJOGEmTsoGz4DqgbJSaSNZJc3bwXTPkzbZ2PSl2AK+q/PQenl2 e5z+iyV408PQFSGww4GAl11q0XwZFsWhKNpidlPlYPbJqGw9sRRh2vprjElyIX4K Y1J1EOfGcmtVRiMPv8Lkoe0tgGwTbFU0B+GEPYCRvNLOieB0Yt77LKkoG5YzOnB3 0R1PLqoIdf6UgR5cfvEQWla8L6uzy139VyHOp2sWP5gwzluuRRItUViH4WxB7y3i EZVX2DNxgdFgc3ScK6zsD+9p8y1kJhoAWgJLRIbs3ZDrkSrOEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKMaCcbJ6chMlVFhVvtjgT2gXtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2U3MTJkYWEtNWMzOS0z NWE2LTg1NzMtZjMxZTUxNTU4MjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIB1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECo+ViO8zwLzmagdejo/wERYI2ylwqUjSm0W1TmcxJSG5cHgC/hpGsM wMj0P/KEzDC0g716okirPnh2YElavXYaa3H5aWFi7mw9kHdVcIvXJsUsfTvwRuPu uy7rcNMrXNVWXR0REJnLjaDvFxnSsB7LypP/Xbfwit/GMqOZyJP/MRnP5roS23P1 dm2/tfw0DUyr54VsylwZ4QLRpl/uJizr9RmamXWTUE/5WjtkyZRf52QgmKx7kW8p yktTVif5utqKtNHo/8wAY6K0KUj332zt4KGdWUfAc8/c9qFtQ03vTmDwTmwPHWzl 8aI1HJz1CXSSwTKSUtFbpnk+X8Xrp/E= -----END CERTIFICATE-----Generated at Thu Mar 26 21:36:53 2026 by rpki-client