$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa File: 01a8e5f6-00d1-310c-9826-54ee0eea151a.roa (raw, json) Hash identifier: Bznf5nOOW4R2+f6HQhXXkqF06Lnf/CuGM0P0o5i2eCo= Subject key identifier: 3B:79:86:DE:C7:5E:A6:E9:5D:D9:58:53:6B:22:C0:35:96:D6:84:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A9650250C58F3DCF43980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 40.136.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:96:50:25:0c:58:f3:dc:f4:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=347d1d22-c355-4c33-8e7f-2da2b052231b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ff:d2:46:09:91:d8:c4:7c:3d:9b:07:c8:4a: ae:c8:02:38:89:d7:95:c3:b1:00:fe:d7:1c:37:43: e4:79:79:da:0c:c3:8e:d5:7f:ae:52:8e:8e:41:30: e2:1a:24:29:b2:87:f7:90:1a:14:88:da:08:a9:6f: f2:2c:95:15:78:c5:4c:ff:dc:1f:29:f2:b5:eb:96: 21:50:6f:8a:13:65:3f:f0:f6:60:ce:e5:74:de:21: 89:e2:72:bc:e9:fa:42:ec:1b:4a:e0:f3:ad:a7:71: f2:64:fc:f7:5a:4e:93:cf:6b:2d:ac:10:f5:30:35: 3c:06:7a:f0:fa:27:61:64:b8:f5:ec:0e:a7:c3:8a: 70:16:73:17:db:ca:82:9d:e7:9b:73:44:68:1e:18: c5:24:ef:48:69:9d:fd:69:27:c7:4e:8c:35:58:3a: e9:d3:e0:37:9b:c9:59:db:82:83:fe:e0:22:83:f0: 00:c4:03:d5:b0:01:e4:79:1a:aa:e9:dd:8a:96:02: d1:9e:8f:db:44:72:9c:76:dc:8c:62:a0:43:a4:27: 13:c5:ab:c5:ac:5d:0d:a5:ad:7e:b6:55:4e:b6:2c: 61:ff:df:8a:e9:28:b2:b8:f9:88:ea:90:5e:53:48: a7:e7:60:65:42:49:41:73:c5:94:22:d9:5f:16:17: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:79:86:DE:C7:5E:A6:E9:5D:D9:58:53:6B:22:C0:35:96:D6:84:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:65:a1:d6:8b:66:c2:37:cf:00:e3:3c:d1:94:48:7e:0a:09: 8a:36:e3:f8:34:e3:d0:46:86:fa:93:88:cf:f3:45:ff:ae:8c: be:39:ac:49:b4:82:93:71:00:33:c4:1c:d9:2e:de:a6:ea:b1: 5a:17:c9:5a:12:e5:14:05:46:25:44:21:54:db:71:c2:5e:ed: de:fb:59:aa:4f:b7:10:4d:78:35:69:20:e9:70:8c:2b:50:bf: 40:62:0f:7b:6a:91:d3:56:6a:11:9f:ed:8a:35:da:d9:18:cf: 0b:d9:2a:f9:8a:36:e2:9c:b5:67:a4:90:70:62:1b:b2:bb:ae: 58:12:ce:a4:49:8b:35:97:ad:e2:9e:4f:3d:87:ea:c4:97:ad: 0d:1a:62:a9:72:31:06:47:5e:ec:9d:c0:d3:9e:70:72:8e:7a: 4d:7b:b3:ca:63:11:bd:d6:90:f2:e1:43:bb:70:78:c7:29:33: 19:40:f6:47:0a:60:e6:1c:40:0b:7c:38:3c:4e:d4:71:2e:be: f0:ef:cc:6f:36:5d:c6:50:27:a5:77:60:27:d7:ef:97:69:5c: 1f:10:45:a1:33:76:8c:1a:8a:09:b9:a9:da:92:73:40:cc:b5: c0:00:e5:4c:a6:17:32:d6:73:8a:7b:52:fd:cb:fc:97:0d:7f: c0:43:2a:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpZQJQxY89z0OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MzQ3ZDFkMjItYzM1NS00YzMzLThlN2YtMmRhMmIwNTIyMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv/SRgmR2MR8PZsHyEquyAI4ideVw7EA/tcc N0PkeXnaDMOO1X+uUo6OQTDiGiQpsof3kBoUiNoIqW/yLJUVeMVM/9wfKfK165Yh UG+KE2U/8PZgzuV03iGJ4nK86fpC7BtK4POtp3HyZPz3Wk6Tz2strBD1MDU8Bnrw +idhZLj17A6nw4pwFnMX28qCneebc0RoHhjFJO9IaZ39aSfHTow1WDrp0+A3m8lZ 24KD/uAig/AAxAPVsAHkeRqq6d2KlgLRno/bRHKcdtyMYqBDpCcTxavFrF0Npa1+ tlVOtixh/9+K6SiyuPmI6pBeU0in52BlQklBc8WUItlfFhesWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDt5ht7HXqbpXdlYU2siwDWW1oQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDFhOGU1ZjYtMDBkMS0z MTBjLTk4MjYtNTRlZTBlZWExNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEllodaLZsI3zwDjPNGUSH4KCYo24/g049BGhvqTiM/zRf+ujL45rEm0 gpNxADPEHNku3qbqsVoXyVoS5RQFRiVEIVTbccJe7d77WapPtxBNeDVpIOlwjCtQ v0BiD3tqkdNWahGf7Yo12tkYzwvZKvmKNuKctWekkHBiG7K7rlgSzqRJizWXreKe Tz2H6sSXrQ0aYqlyMQZHXuydwNOecHKOek17s8pjEb3WkPLhQ7tweMcpMxlA9kcK YOYcQAt8ODxO1HEuvvDvzG82XcZQJ6V3YCfX75dpXB8QRaEzdowaigm5qdqSc0DM tcAA5UymFzLWc4p7Uv3L/JcNf8BDKrM= -----END CERTIFICATE-----Generated at Sat Apr 18 01:37:11 2026 by rpki-client