$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f910939d-05e1-3207-b3ea-2c46106a7d0d.roa File: f910939d-05e1-3207-b3ea-2c46106a7d0d.roa (raw, json) Hash identifier: CJm0SfZybybqh6sseLmrWMmM0EPLzKBPZHMhOTgwi7Y= Subject key identifier: 8B:44:DF:53:39:3D:AA:B3:8C:98:CF:7E:C1:43:C2:22:AF:01:6A:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F0242301EF0450E6AD7211380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f910939d-05e1-3207-b3ea-2c46106a7d0d.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 40.137.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:30:1e:f0:45:0e:6a:d7:21:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=298bdb31-30f8-4eb0-9b61-a883bce7e0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:82:6f:71:69:cc:33:a5:82:ac:64:b3:a7: e8:b9:75:ac:a0:31:48:8a:14:c3:74:60:65:39:20: 89:e0:26:65:19:3b:70:05:ba:7b:ac:a2:ca:5a:0b: 10:f8:38:21:2f:0c:7d:d4:dd:ce:1e:05:4a:f0:61: 58:56:8a:46:3b:e8:17:dd:72:1b:da:db:ce:1e:89: 5e:c2:27:37:c8:f7:13:40:01:ad:30:35:12:62:f4: ee:96:da:d3:a1:cf:a3:a2:bc:d6:85:08:d1:f7:71: 6c:66:12:14:a6:a7:ca:3b:14:d7:07:3e:12:d8:47: 2e:59:a6:79:f2:5c:6d:2a:3d:05:49:2a:bc:0b:26: bd:3b:1b:92:65:f7:78:dc:1f:22:2a:d6:d5:60:72: a5:ca:d7:74:a2:4c:6f:54:65:88:00:9f:c7:71:f9: 8b:ba:3b:61:be:a3:62:3f:50:1c:75:dd:74:39:a9: 20:05:18:76:d7:be:ae:28:8c:f1:f9:74:ba:b0:9d: e7:e8:91:59:be:01:fa:ef:ef:cc:25:61:fc:ca:01: 21:35:30:6e:7f:75:c9:30:44:92:c5:7a:52:5a:e0: 52:14:02:64:25:43:0b:d8:5a:07:58:e5:5f:49:05: 88:23:f8:6b:57:a2:ed:36:f1:e9:c6:8a:62:d5:00: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:44:DF:53:39:3D:AA:B3:8C:98:CF:7E:C1:43:C2:22:AF:01:6A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f910939d-05e1-3207-b3ea-2c46106a7d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.137.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:90:76:16:0e:18:3b:23:c8:27:ad:81:8a:f4:fd:1d:ad:10: 55:87:8e:0c:e3:7b:e8:91:68:d5:fb:e0:c0:01:9d:87:25:da: 4e:a0:33:8d:bd:05:a6:35:c4:84:e7:3c:d4:85:8a:b6:d8:df: 36:de:d2:52:48:8b:1f:31:3b:7b:04:83:5f:98:1c:53:37:d5: 8d:7d:64:0c:84:3e:2a:f3:d6:90:bc:63:86:6a:6c:59:e7:b8: ab:a0:28:37:21:60:c2:15:2a:bd:55:68:1d:fa:7c:57:66:dd: 8f:c3:6c:ec:f5:5c:da:e7:55:1b:36:40:18:12:15:f3:2d:0b: 7a:be:77:88:27:b3:0a:9b:d2:84:0b:c6:67:cf:f7:09:bf:7d: 71:95:30:cc:dc:b6:ce:d9:f1:ce:a2:99:9b:a8:ac:ed:3b:4d: fd:db:54:f3:96:09:17:5e:5e:e9:57:70:d6:19:d1:64:27:6a: bf:1f:85:72:be:ce:3d:33:44:c0:62:53:2b:4b:d2:89:59:21: c8:37:ca:03:ee:67:aa:10:ba:31:60:2e:54:a3:ef:6f:32:e5: 9a:1a:90:e9:55:9d:01:ab:a3:e1:0d:48:f6:9d:e1:a0:04:1a: b7:e4:48:70:ee:81:bc:73:00:7f:bb:fa:2e:88:f0:74:87:d0: 13:f9:de:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjAe8EUOatchE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk Mjk4YmRiMzEtMzBmOC00ZWIwLTliNjEtYTg4M2JjZTdlMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE2Cb3FpzDOlgqxks6fouXWsoDFIihTDdGBl OSCJ4CZlGTtwBbp7rKLKWgsQ+DghLwx91N3OHgVK8GFYVopGO+gX3XIb2tvOHole wic3yPcTQAGtMDUSYvTultrToc+jorzWhQjR93FsZhIUpqfKOxTXBz4S2EcuWaZ5 8lxtKj0FSSq8Cya9OxuSZfd43B8iKtbVYHKlytd0okxvVGWIAJ/HcfmLujthvqNi P1Acdd10OakgBRh2176uKIzx+XS6sJ3n6JFZvgH67+/MJWH8ygEhNTBuf3XJMESS xXpSWuBSFAJkJUML2FoHWOVfSQWII/hrV6LtNvHpxopi1QCvlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItE31M5PaqzjJjPfsFDwiKvAWrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjkxMDkzOWQtMDVlMS0z MjA3LWIzZWEtMmM0NjEwNmE3ZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOQdhYOGDsjyCetgYr0/R2tEFWHjgzje+iRaNX74MABnYcl2k6gM429 BaY1xITnPNSFirbY3zbe0lJIix8xO3sEg1+YHFM31Y19ZAyEPirz1pC8Y4ZqbFnn uKugKDchYMIVKr1VaB36fFdm3Y/DbOz1XNrnVRs2QBgSFfMtC3q+d4gnswqb0oQL xmfP9wm/fXGVMMzcts7Z8c6imZuorO07Tf3bVPOWCRdeXulXcNYZ0WQnar8fhXK+ zj0zRMBiUytL0olZIcg3ygPuZ6oQujFgLlSj728y5ZoakOlVnQGro+ENSPad4aAE GrfkSHDugbxzAH+7+i6I8HSH0BP53js= -----END CERTIFICATE-----Generated at Fri Sep 25 05:23:33 2026 by rpki-client