$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0866f524-d9d4-3406-8c4b-94f6c357db6e.roa File: 0866f524-d9d4-3406-8c4b-94f6c357db6e.roa (raw, json) Hash identifier: 4KCrfJWROxWcVkX/yrwp7evxRpoQpTMks2RvPMQCHn4= Subject key identifier: B7:A2:E3:66:57:0D:CE:DE:DE:27:41:02:DA:C4:1C:8E:29:C4:89:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F034E7FDDC7AC209895A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0866f524-d9d4-3406-8c4b-94f6c357db6e.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 393278 IP address blocks: 40.136.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:03:4e:7f:dd:c7:ac:20:98:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=31710bd9-5f71-40a6-8416-6a4d0bee6766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:fb:4f:e7:d8:77:58:1e:31:ca:b5:6a:3c: 08:e7:e9:40:5d:65:32:5d:d2:fb:3c:bf:9f:5d:b9: b2:00:b8:21:b7:1b:f0:68:50:17:ac:45:42:bc:93: 55:7c:9d:1f:8c:e2:97:e5:47:17:02:06:50:b3:0e: 95:0e:01:e1:b5:bd:fe:c9:b5:3d:8a:e8:47:da:de: fe:a6:46:eb:78:72:16:05:d1:0b:66:4a:db:cd:57: 78:82:28:57:38:75:fc:d9:53:5d:58:6e:05:24:62: e9:b4:e6:47:4d:68:a1:16:5d:0c:b5:5c:c0:48:0d: 90:bd:37:fd:69:37:b4:ac:99:b9:4a:33:32:ed:00: fd:98:6f:c6:26:37:51:fd:4c:87:06:36:49:04:f1: 1b:4a:bf:16:d5:52:2f:a1:4c:15:d6:31:45:91:61: cd:cc:49:7f:d6:a6:42:fb:5b:a7:a8:f5:05:80:f5: f9:98:87:c6:d0:f2:f7:99:04:57:8e:db:7c:c8:3a: f1:6f:d8:90:00:49:1c:1f:26:ae:bc:93:34:b5:a2: 4f:e5:f0:1b:42:bb:f6:83:41:97:27:51:c9:3c:07: 23:53:0d:2b:c6:ac:51:6d:09:04:a0:40:6e:00:e8: 09:e7:ae:df:0c:5f:27:f3:08:43:0b:1c:f6:f0:d1: 01:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A2:E3:66:57:0D:CE:DE:DE:27:41:02:DA:C4:1C:8E:29:C4:89:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0866f524-d9d4-3406-8c4b-94f6c357db6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:a4:ce:78:d2:fc:f5:3a:29:6d:d7:0d:e2:bb:aa:44:90:bc: 7f:5d:64:18:a1:83:e7:c4:f4:7a:79:81:a4:2b:72:4f:f9:63: 41:19:e4:e5:88:78:58:9b:29:c9:9b:ed:5d:ec:6e:5f:53:80: 53:5f:72:9c:d2:69:f0:33:76:93:88:b7:7f:b8:bc:31:b5:d8: 05:3a:9d:44:ac:1b:88:9d:53:c7:3a:90:4a:9f:26:9b:8f:b4: 24:c9:e5:31:c7:7e:dc:f1:f4:36:6a:5f:df:06:89:00:2a:98: 49:66:59:13:fb:ba:29:a5:4a:b5:7f:75:d4:24:d8:f3:dc:f4: 1e:7a:6b:46:63:b8:07:60:5f:61:c3:c2:6d:85:98:9a:c0:d1: b7:c7:d7:6b:b0:c6:fd:f5:fa:a1:5a:88:dd:6c:be:f0:c4:cc: e0:cf:6f:b6:ed:d3:21:2e:a5:1c:0e:ea:e5:2b:dc:a2:92:ea: 32:42:1b:af:9f:cd:56:00:5a:03:31:41:c2:e3:b3:b7:9d:7b: 34:e5:4a:20:9f:84:f1:b5:da:59:7f:80:0b:18:3d:41:13:ce: ea:de:8b:95:89:c9:59:f0:0c:f3:52:be:6c:a3:d2:6d:85:ce: 67:7c:be:41:d1:3f:2a:f2:a8:e0:6b:3f:f8:99:34:2e:38:cb: 87:0c:79:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwNOf93HrCCYlaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MzE3MTBiZDktNWY3MS00MGE2LTg0MTYtNmE0ZDBiZWU2NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMP7T+fYd1geMcq1ajwI5+lAXWUyXdL7PL+f XbmyALghtxvwaFAXrEVCvJNVfJ0fjOKX5UcXAgZQsw6VDgHhtb3+ybU9iuhH2t7+ pkbreHIWBdELZkrbzVd4gihXOHX82VNdWG4FJGLptOZHTWihFl0MtVzASA2QvTf9 aTe0rJm5SjMy7QD9mG/GJjdR/UyHBjZJBPEbSr8W1VIvoUwV1jFFkWHNzEl/1qZC +1unqPUFgPX5mIfG0PL3mQRXjtt8yDrxb9iQAEkcHyauvJM0taJP5fAbQrv2g0GX J1HJPAcjUw0rxqxRbQkEoEBuAOgJ567fDF8n8whDCxz28NEBrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLei42ZXDc7e3idBAtrEHI4pxInFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDg2NmY1MjQtZDlkNC0z NDA2LThjNGItOTRmNmMzNTdkYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWkznjS/PU6KW3XDeK7qkSQvH9dZBihg+fE9Hp5gaQrck/5Y0EZ5OWI eFibKcmb7V3sbl9TgFNfcpzSafAzdpOIt3+4vDG12AU6nUSsG4idU8c6kEqfJpuP tCTJ5THHftzx9DZqX98GiQAqmElmWRP7uimlSrV/ddQk2PPc9B56a0ZjuAdgX2HD wm2FmJrA0bfH12uwxv31+qFaiN1svvDEzODPb7bt0yEupRwO6uUr3KKS6jJCG6+f zVYAWgMxQcLjs7edezTlSiCfhPG12ll/gAsYPUETzurei5WJyVnwDPNSvmyj0m2F zmd8vkHRPyryqOBrP/iZNC44y4cMeaQ= -----END CERTIFICATE-----Generated at Sat Jun 13 18:51:40 2026 by rpki-client