$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e024d2ea-04f5-3b1d-9447-8d29d2f1f671.roa File: e024d2ea-04f5-3b1d-9447-8d29d2f1f671.roa (raw, json) Hash identifier: D4f4QqqCltXVpyd8yF+1CtDWEHSUcUellvj938YzKZ0= Subject key identifier: 78:5D:D7:76:D0:7E:05:A4:52:6C:E8:45:87:BD:E7:7F:04:A7:31:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A775FB102631D7840A740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e024d2ea-04f5-3b1d-9447-8d29d2f1f671.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 21609 IP address blocks: 40.141.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:77:5f:b1:02:63:1d:78:40:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=677d420b-a501-4e47-b280-56b13b8c8c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:02:4d:a3:bf:55:fb:f4:b9:f9:ee:3a:47: f4:5e:4a:1b:c4:94:5b:d9:00:76:ba:c2:3e:73:47: 2b:36:71:bc:8a:69:94:43:ac:49:52:69:39:38:4a: 93:f2:6a:39:f6:1e:c3:35:ad:a2:1c:d1:83:30:19: 51:dd:7e:bf:be:a0:0b:b1:90:a9:f7:95:2f:8b:c9: 32:39:41:0a:a3:e5:45:7d:8e:ed:70:69:23:50:08: 43:b8:9c:73:68:0e:c0:cc:42:7c:aa:ff:4c:e9:15: 83:84:97:b2:0e:22:9d:db:10:32:45:ff:81:4f:a0: 63:1a:b2:14:0c:7d:5b:21:70:92:10:f8:b1:09:ba: f8:a4:63:54:c6:66:44:34:b6:99:42:cc:52:64:71: 31:35:80:6c:19:f3:ff:5b:63:aa:e8:7e:85:6b:65: 8f:df:61:14:53:a9:9b:5f:26:95:7b:b5:43:d2:42: 04:27:5f:7b:b9:b7:3c:46:29:9f:2c:52:b6:46:ac: c6:c2:34:26:26:93:2c:04:db:fc:f5:d2:83:c1:30: b2:ee:44:5b:5f:11:95:10:cd:89:50:13:b2:2c:05: 6d:bc:88:00:7b:c1:6b:b7:77:bc:0c:db:ad:52:2c: b2:7a:29:2a:ea:c7:8c:34:0b:2c:4b:46:ba:fc:4d: d1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5D:D7:76:D0:7E:05:A4:52:6C:E8:45:87:BD:E7:7F:04:A7:31:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e024d2ea-04f5-3b1d-9447-8d29d2f1f671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.141.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:42:73:10:5c:19:a3:62:c9:9b:83:49:78:17:73:d7:ae:6e: dd:47:d3:7e:26:3b:b4:ae:6d:b3:25:bc:f6:3f:c4:77:2d:15: 3e:fa:98:87:af:b4:7c:fc:7c:68:de:b5:14:36:ef:eb:27:fd: 79:53:4f:a0:0f:58:66:ff:5b:61:4f:8e:4f:64:8f:2f:36:3c: 85:57:c7:5a:8a:9f:54:ff:45:15:15:d9:15:86:0e:6a:8e:7b: 3c:9b:94:9b:9d:0b:4c:f8:02:79:b4:87:d8:5e:41:21:bb:46: 69:64:96:8f:1f:f1:2a:37:98:18:43:b7:a4:4f:89:39:e5:38: 26:cf:c2:2b:66:c9:b6:f9:02:68:c6:12:16:8a:4e:a8:ce:b4: 44:3b:80:de:5f:c2:de:e7:9b:f8:d1:59:1c:4e:a0:ff:09:04: 31:3a:51:77:dc:d6:30:ae:fc:79:23:c6:05:d0:ce:26:72:2d: 85:86:98:46:f2:5b:dd:23:a9:dc:ff:ce:7e:36:00:33:5d:25: 28:bf:1a:20:a9:ab:d7:8e:25:ba:10:9f:3c:be:7a:6a:b0:d8: 55:ba:98:d0:8c:ce:a1:f0:1d:2e:28:9f:c8:e7:b6:2d:72:8f: f1:9f:cf:ee:90:a3:4c:74:3f:b0:03:ed:ed:6a:3c:45:b7:ce: e0:53:33:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCndfsQJjHXhAp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Njc3ZDQyMGItYTUwMS00ZTQ3LWIyODAtNTZiMTNiOGM4YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozcCTaO/Vfv0ufnuOkf0XkobxJRb2QB2usI+ c0crNnG8immUQ6xJUmk5OEqT8mo59h7DNa2iHNGDMBlR3X6/vqALsZCp95Uvi8ky OUEKo+VFfY7tcGkjUAhDuJxzaA7AzEJ8qv9M6RWDhJeyDiKd2xAyRf+BT6BjGrIU DH1bIXCSEPixCbr4pGNUxmZENLaZQsxSZHExNYBsGfP/W2Oq6H6Fa2WP32EUU6mb XyaVe7VD0kIEJ197ubc8RimfLFK2RqzGwjQmJpMsBNv89dKDwTCy7kRbXxGVEM2J UBOyLAVtvIgAe8Frt3e8DNutUiyyeikq6seMNAssS0a6/E3RMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhd13bQfgWkUmzoRYe9538EpzHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTAyNGQyZWEtMDRmNS0z YjFkLTk0NDctOGQyOWQyZjFmNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI06MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxCcxBcGaNiyZuDSXgXc9eubt1H034mO7SubbMlvPY/xHctFT76mIev tHz8fGjetRQ27+sn/XlTT6APWGb/W2FPjk9kjy82PIVXx1qKn1T/RRUV2RWGDmqO ezyblJudC0z4Anm0h9heQSG7Rmlklo8f8So3mBhDt6RPiTnlOCbPwitmybb5AmjG EhaKTqjOtEQ7gN5fwt7nm/jRWRxOoP8JBDE6UXfc1jCu/HkjxgXQziZyLYWGmEby W90jqdz/zn42ADNdJSi/GiCpq9eOJboQnzy+emqw2FW6mNCMzqHwHS4on8jnti1y j/Gfz+6Qo0x0P7AD7e1qPEW3zuBTM60= -----END CERTIFICATE-----Generated at Thu Mar 26 16:40:11 2026 by rpki-client