$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0808f751-9032-36f2-a1b1-b52cebd3efed.roa File: 0808f751-9032-36f2-a1b1-b52cebd3efed.roa (raw, json) Hash identifier: WNtIXFc2789MryrC5g/Qrsv/L2JO0ocYAlCVb9E579c= Subject key identifier: FC:00:4A:39:F3:7E:C4:7C:D8:C9:7E:4A:2D:BA:DF:39:0E:95:E4:3E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF4A0B0AED4D23E14C100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0808f751-9032-36f2-a1b1-b52cebd3efed.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 40.138.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f4:a0:b0:ae:d4:d2:3e:14:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=4ba62254-a4cf-4450-a8a0-e90d5fdb79ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:3b:82:0b:27:33:c3:20:46:38:18:14:a6: 4c:8e:7c:9c:04:d3:c8:96:e3:54:97:0f:ce:ee:7c: c6:38:d3:e9:d5:7e:08:9d:41:2a:ec:3c:d6:4d:18: 51:c5:23:9f:3d:9e:02:3f:20:aa:dd:1b:13:fc:5c: 32:8d:90:83:13:93:19:9a:06:1a:e3:2c:db:75:29: 3d:64:d5:76:f6:a7:32:df:04:fc:96:99:a5:64:74: 7b:90:0e:00:28:e2:e0:74:a3:88:9f:ef:fe:25:90: 3f:29:c4:ed:88:e0:c7:14:c8:c7:16:51:3e:72:3f: b8:79:cd:64:3b:d5:09:1f:8e:f0:9b:8e:07:6a:07: e3:7b:f9:4f:ee:08:a0:da:b4:17:45:57:04:72:5c: 81:ac:45:5d:5e:10:2a:32:af:bd:c7:2e:3e:32:ac: db:49:b5:6f:36:f1:e7:18:76:5b:e3:c8:99:03:ec: 5f:1e:8c:14:49:b0:a2:90:a7:58:a8:a1:3e:8e:81: 0c:4e:fe:90:28:41:73:ff:c7:a7:2f:51:35:d9:67: 36:52:6e:9e:c6:38:7c:38:32:a6:a5:17:0b:14:fb: 6f:23:af:3b:ae:66:69:cf:70:3a:b1:9c:c9:c6:8a: 7d:c7:78:1a:29:5c:b4:a1:be:4e:f8:0a:72:10:3d: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:00:4A:39:F3:7E:C4:7C:D8:C9:7E:4A:2D:BA:DF:39:0E:95:E4:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0808f751-9032-36f2-a1b1-b52cebd3efed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a5:38:19:e0:52:98:25:bf:6d:ac:08:3e:65:49:a5:ac:cf: 2d:df:29:3d:2f:24:5c:8b:eb:2e:67:33:f4:05:b8:95:bb:fa: e1:c7:ef:7b:0b:71:90:13:2d:77:0c:57:c2:7b:7d:09:9c:b0: 14:44:9b:ff:96:f6:90:59:1f:14:a3:b5:4a:92:21:16:8a:41: 6e:26:e8:23:6b:02:37:8b:0d:7d:69:4a:b7:aa:d0:d0:b2:cb: 52:94:f9:b3:68:1f:14:12:37:a6:0b:e6:42:0d:15:56:6d:13: 53:7c:17:77:a1:ba:17:05:1f:36:0a:0d:06:ec:d8:ea:a5:63: 14:53:23:ee:bc:e4:ac:39:2e:8d:08:4e:b1:de:2d:50:08:19: 84:4b:00:bc:28:38:fc:fa:81:32:ba:42:b2:77:73:fd:49:c8: 07:fd:2c:4d:be:6e:56:f2:85:8f:c7:08:57:98:e4:a8:67:f7: 0a:fa:60:5f:ba:9d:64:f6:0c:df:a2:07:63:98:78:32:43:72: f2:51:d0:5d:af:1c:b7:af:bd:ef:68:40:13:6b:9d:1f:ed:27: d4:73:3f:1e:e2:60:c0:66:a1:b4:72:11:5f:2f:d5:77:87:fb: e3:ee:b9:03:05:6c:86:39:1d:db:3f:8d:70:dc:5d:6f:bf:bf: 8a:8f:a1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvSgsK7U0j4UwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NGJhNjIyNTQtYTRjZi00NDUwLWE4YTAtZTkwZDVmZGI3OWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvk7ggsnM8MgRjgYFKZMjnycBNPIluNUlw/O 7nzGONPp1X4InUEq7DzWTRhRxSOfPZ4CPyCq3RsT/FwyjZCDE5MZmgYa4yzbdSk9 ZNV29qcy3wT8lpmlZHR7kA4AKOLgdKOIn+/+JZA/KcTtiODHFMjHFlE+cj+4ec1k O9UJH47wm44Hagfje/lP7gig2rQXRVcEclyBrEVdXhAqMq+9xy4+MqzbSbVvNvHn GHZb48iZA+xfHowUSbCikKdYqKE+joEMTv6QKEFz/8enL1E12Wc2Um6exjh8ODKm pRcLFPtvI687rmZpz3A6sZzJxop9x3gaKVy0ob5O+ApyED2BhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwASjnzfsR82Ml+Si263zkOleQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDgwOGY3NTEtOTAzMi0z NmYyLWExYjEtYjUyY2ViZDNlZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+lOBngUpglv22sCD5lSaWszy3fKT0vJFyL6y5nM/QFuJW7+uHH73sL cZATLXcMV8J7fQmcsBREm/+W9pBZHxSjtUqSIRaKQW4m6CNrAjeLDX1pSreq0NCy y1KU+bNoHxQSN6YL5kINFVZtE1N8F3ehuhcFHzYKDQbs2OqlYxRTI+685Kw5Lo0I TrHeLVAIGYRLALwoOPz6gTK6QrJ3c/1JyAf9LE2+blbyhY/HCFeY5Khn9wr6YF+6 nWT2DN+iB2OYeDJDcvJR0F2vHLevve9oQBNrnR/tJ9RzPx7iYMBmobRyEV8v1XeH ++PuuQMFbIY5Hds/jXDcXW+/v4qPoRs= -----END CERTIFICATE-----Generated at Sat Jun 13 08:57:25 2026 by rpki-client