$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa File: ef4fe73d-8e5b-3799-944d-41b1981f6353.roa (raw, json) Hash identifier: x6EsxyMjxVJ4qeaTFbcrlrijNnCRMb93EeVTvsrDTT4= Subject key identifier: C8:DB:D9:06:BA:37:DF:EB:5B:1E:74:0C:EE:78:43:5A:D5:FF:83:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A799E543F1D43FEDBB200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 30373 IP address blocks: 40.128.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:79:9e:54:3f:1d:43:fe:db:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=7c37b337-e627-4b12-a3b0-0be59be68080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:6b:bf:6d:dc:ab:d9:32:7f:6c:9c:f4:94: c2:93:48:97:b8:d7:84:0d:8f:5d:32:98:55:57:69: e2:d2:1a:c5:08:be:95:5b:63:59:2d:db:cb:1e:a6: 92:ad:4d:f5:d1:51:3e:5b:10:e8:6d:e4:78:69:48: d3:c6:e5:b4:60:57:ff:0b:f1:ee:8a:b8:a6:c8:ee: 5a:41:c5:8b:88:c0:99:88:e1:60:e1:62:47:bc:cc: 5f:9d:b1:e6:3c:6d:84:95:e2:bf:64:2e:ce:0c:6a: 46:9f:b6:ec:48:67:06:31:24:fd:ec:5c:2f:27:5a: d1:a0:46:24:3c:b9:6d:e8:2d:fb:1f:19:d1:a5:a2: 8c:d4:46:f2:eb:dd:30:ef:0d:95:82:6f:f7:3e:13: 08:ea:0c:c5:b3:88:e0:10:05:27:f5:fa:bd:ca:60: cc:c2:c7:63:3d:65:c3:c7:c6:0d:77:b1:b7:5f:7f: dc:47:c7:c7:ba:a3:b0:db:b0:9e:59:a5:a6:79:bb: 67:ed:af:24:1b:9b:52:fb:7c:77:9d:90:68:81:e8: c5:bf:3a:26:e9:29:cc:3b:f5:e3:fa:1e:5b:bd:10: 89:ae:2a:53:72:77:67:69:8e:da:d3:ed:4f:52:6f: 52:21:7a:53:73:d4:9f:ca:0b:59:54:7e:34:eb:7b: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DB:D9:06:BA:37:DF:EB:5B:1E:74:0C:EE:78:43:5A:D5:FF:83:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ef4fe73d-8e5b-3799-944d-41b1981f6353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.128.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:91:de:19:4f:57:fb:b7:4c:79:48:86:3e:9b:4f:04:f2:3b: de:b1:8b:b3:01:6c:89:62:c0:c7:ae:a5:49:9a:05:37:d3:0b: 57:67:89:80:4a:f7:de:ff:ac:e8:06:a6:f8:73:bb:a1:d2:5b: b5:b7:36:04:b9:62:cc:8e:75:83:0e:c6:fd:0e:77:e1:ea:2c: 22:df:4b:ae:49:c7:b5:19:37:6d:35:15:6d:ce:3d:4c:56:fe: 1c:7f:78:fb:32:15:66:f2:74:a9:cd:01:03:87:a2:bc:c7:43: 8e:85:5d:e9:a9:91:ca:d8:6c:55:e0:4d:dd:26:05:8a:3c:19: fa:56:85:c5:77:86:ee:78:df:2d:98:83:36:33:65:cd:b2:a6: 8e:c8:7c:52:18:b2:f7:ad:a0:67:d5:b8:3e:ab:60:0d:02:8b: 43:d6:89:13:48:28:d3:df:07:1f:fb:01:fc:6b:3b:2a:49:09: 27:dc:68:3e:91:d1:99:a7:ff:71:7e:e5:fb:7b:dd:02:8f:39: 87:fe:4d:17:87:a2:a7:92:a6:f1:41:8f:cc:71:77:43:2d:b5: 47:c7:13:72:56:4d:96:cc:e6:6b:39:2f:20:22:eb:29:e5:3a: 52:9b:b9:e9:b8:cf:7c:a0:e4:4c:5d:b5:8c:c3:52:fa:90:36: 36:02:70:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnmeVD8dQ/7bsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk N2MzN2IzMzctZTYyNy00YjEyLWEzYjAtMGJlNTliZTY4MDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Nrv23cq9kyf2yc9JTCk0iXuNeEDY9dMphV V2ni0hrFCL6VW2NZLdvLHqaSrU310VE+WxDobeR4aUjTxuW0YFf/C/HuirimyO5a QcWLiMCZiOFg4WJHvMxfnbHmPG2EleK/ZC7ODGpGn7bsSGcGMST97FwvJ1rRoEYk PLlt6C37HxnRpaKM1Eby690w7w2Vgm/3PhMI6gzFs4jgEAUn9fq9ymDMwsdjPWXD x8YNd7G3X3/cR8fHuqOw27CeWaWmebtn7a8kG5tS+3x3nZBogejFvzom6SnMO/Xj +h5bvRCJripTcndnaY7a0+1PUm9SIXpTc9SfygtZVH4063t5oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjb2Qa6N9/rWx50DO54Q1rV/4MVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWY0ZmU3M2QtOGU1Yi0z Nzk5LTk0NGQtNDFiMTk4MWY2MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKID2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2R3hlPV/u3THlIhj6bTwTyO96xi7MBbIliwMeupUmaBTfTC1dniYBK 997/rOgGpvhzu6HSW7W3NgS5YsyOdYMOxv0Od+HqLCLfS65Jx7UZN201FW3OPUxW /hx/ePsyFWbydKnNAQOHorzHQ46FXempkcrYbFXgTd0mBYo8GfpWhcV3hu543y2Y gzYzZc2ypo7IfFIYsvetoGfVuD6rYA0Ci0PWiRNIKNPfBx/7AfxrOypJCSfcaD6R 0Zmn/3F+5ft73QKPOYf+TReHoqeSpvFBj8xxd0MttUfHE3JWTZbM5ms5LyAi6ynl OlKbuem4z3yg5ExdtYzDUvqQNjYCcFY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:15:50 2026 by rpki-client