$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfc46e75-2524-374a-bccb-2391f95825df.roa File: dfc46e75-2524-374a-bccb-2391f95825df.roa (raw, json) Hash identifier: PInKLy+K3U1CSWmMaViF5JafOIJUmSVe5ubfwfjrvOY= Subject key identifier: 23:F7:07:D3:2B:A9:FD:20:24:2D:6E:6D:B5:0B:D6:60:94:13:9B:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A67BA23D92D9BB146E980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfc46e75-2524-374a-bccb-2391f95825df.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 40.142.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:67:ba:23:d9:2d:9b:b1:46:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ebbf242f-2ad6-455d-ba7a-b0c550f95251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5f:d1:3e:fc:ce:75:46:57:a6:b9:67:b9:6d: 3f:81:f5:bc:09:9a:0e:4f:b7:ae:69:b0:c4:a7:c3: 0e:c1:1a:b6:e0:1c:7a:d3:86:6f:2d:83:6d:4a:97: 44:13:27:59:7e:49:d7:5c:bf:fe:27:7c:b6:1c:4c: 18:66:1c:ec:08:d1:f8:bd:8f:52:48:f9:b7:3e:9b: 68:b7:e5:7c:fd:cc:85:95:5d:89:e3:f6:93:b3:be: d6:ac:d1:81:b5:48:31:3c:1c:0d:c5:f8:d0:ef:c4: 9e:0c:bd:bb:ef:7c:ea:88:13:cf:88:43:37:55:42: 2a:51:60:f3:42:25:9d:8f:b3:1b:ff:a1:d7:e0:52: 8a:a8:fd:43:2d:4c:e0:11:2f:32:dc:7b:c2:e5:99: f3:d8:31:f9:68:91:79:3f:50:eb:c6:b2:bd:cb:35: fe:8b:c5:e4:1e:e7:d6:36:37:23:78:c4:ec:ca:6c: 9d:9e:0e:0f:a7:3c:19:81:dc:04:a7:93:90:1d:a6: c4:64:11:0b:d1:06:c5:ab:51:d0:b3:45:ee:10:35: 37:2b:c8:09:e9:bd:8b:75:25:82:a9:5e:06:95:99: 50:26:f1:f1:1c:4f:17:8e:e6:78:4e:1d:10:cf:0f: 14:ad:33:6d:c6:cf:11:eb:a2:8d:f0:e9:e4:50:18: 7d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F7:07:D3:2B:A9:FD:20:24:2D:6E:6D:B5:0B:D6:60:94:13:9B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfc46e75-2524-374a-bccb-2391f95825df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ca:36:87:0b:c9:cb:d0:02:2c:eb:0c:bd:50:d5:b9:e8:ec: 17:a4:78:a1:cb:ad:ce:16:4a:10:9b:e0:b9:9c:b0:c8:ff:73: a9:fb:04:af:80:e9:4c:97:8e:3c:d7:26:da:55:d4:9b:3d:31: 5c:01:ed:ff:f9:ca:64:da:f3:1d:7f:e2:cf:81:30:db:76:5d: 8c:19:98:91:7d:6c:9f:56:58:1c:8a:d3:a8:c1:69:b2:96:bb: 18:6c:31:1d:8f:d1:08:b8:1f:8a:d1:f7:dc:28:65:90:a1:1e: 71:d6:f3:52:a5:2a:6d:98:a7:ea:9c:12:eb:a8:7a:ee:aa:e0: 31:8f:dc:e4:36:8b:2b:2a:20:b7:dc:16:1d:36:10:74:a3:f3: bb:3e:4c:12:f9:21:3b:28:52:ab:00:f6:71:21:cc:51:a9:a8: 8d:22:52:f6:41:9c:6c:95:43:75:96:81:65:86:ab:96:21:c0: d8:82:0b:db:dc:1d:77:81:28:4f:f8:f2:ea:9b:e9:cf:99:66: 0c:60:ce:20:79:ed:69:ff:05:b2:8d:01:37:bb:d1:74:48:4b: c6:aa:3b:12:d5:49:a3:93:83:e5:f4:0d:4b:80:08:0a:4b:1a: ce:60:85:14:bb:cf:30:df:81:be:f8:51:bc:c0:23:6d:b1:cc: e0:b7:2f:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCme6I9ktm7FG6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZWJiZjI0MmYtMmFkNi00NTVkLWJhN2EtYjBjNTUwZjk1MjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1/RPvzOdUZXprlnuW0/gfW8CZoOT7euabDE p8MOwRq24Bx604ZvLYNtSpdEEydZfknXXL/+J3y2HEwYZhzsCNH4vY9SSPm3Ppto t+V8/cyFlV2J4/aTs77WrNGBtUgxPBwNxfjQ78SeDL2773zqiBPPiEM3VUIqUWDz QiWdj7Mb/6HX4FKKqP1DLUzgES8y3HvC5Znz2DH5aJF5P1DrxrK9yzX+i8XkHufW NjcjeMTsymydng4PpzwZgdwEp5OQHabEZBEL0QbFq1HQs0XuEDU3K8gJ6b2LdSWC qV4GlZlQJvHxHE8XjuZ4Th0Qzw8UrTNtxs8R66KN8OnkUBh9uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP3B9Mrqf0gJC1ubbUL1mCUE5s8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZjNDZlNzUtMjUyNC0z NzRhLWJjY2ItMjM5MWY5NTgyNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKI4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/KNocLycvQAizrDL1Q1bno7BekeKHLrc4WShCb4LmcsMj/c6n7BK+A 6UyXjjzXJtpV1Js9MVwB7f/5ymTa8x1/4s+BMNt2XYwZmJF9bJ9WWByK06jBabKW uxhsMR2P0Qi4H4rR99woZZChHnHW81KlKm2Yp+qcEuuoeu6q4DGP3OQ2iysqILfc Fh02EHSj87s+TBL5ITsoUqsA9nEhzFGpqI0iUvZBnGyVQ3WWgWWGq5YhwNiCC9vc HXeBKE/48uqb6c+ZZgxgziB57Wn/BbKNATe70XRIS8aqOxLVSaOTg+X0DUuACApL Gs5ghRS7zzDfgb74UbzAI22xzOC3L00= -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:55 2026 by rpki-client