$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909fbd-fbcf-31b4-af49-4edaaf7553e5.roa File: 36909fbd-fbcf-31b4-af49-4edaaf7553e5.roa (raw, json) Hash identifier: 9n/XW5xE7S9HRF0bOWjGbbAjAVvtY99cmnvm93p0Pjg= Subject key identifier: A1:7C:BD:48:1B:26:1D:56:05:EF:F4:3C:F0:65:A2:9D:DC:BA:5D:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF44FEC16F4B809C62E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909fbd-fbcf-31b4-af49-4edaaf7553e5.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 1818 IP address blocks: 40.136.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f4:4f:ec:16:f4:b8:09:c6:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=91ad9d24-1f1d-423d-b74b-3c2ad63148cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4d:1a:7f:11:4b:40:ef:a8:25:ba:53:18:ad: f6:cc:54:37:e5:51:3d:53:c2:f4:75:ac:37:8a:be: 59:f2:d9:ac:4f:43:c7:a9:ba:7e:60:92:a8:4e:f5: e5:91:cb:a1:c0:36:ff:eb:31:d8:6a:9e:21:bb:fc: 91:a7:27:f9:10:40:5d:ca:44:78:28:3d:64:ab:b6: f4:13:d4:e5:d5:fa:f0:41:95:8b:27:60:43:18:15: e0:81:11:94:30:8c:4e:06:86:1e:9f:72:49:9e:51: 35:72:81:13:85:2d:97:d9:61:67:41:90:65:aa:13: 9d:ce:23:f7:65:98:46:1e:72:2f:26:d1:a6:be:46: 1e:df:72:de:76:17:a8:c1:02:46:ad:92:26:e4:de: a6:78:c2:91:43:f7:34:ec:7f:ec:56:11:58:6e:ec: 04:4d:ac:c0:79:6d:9d:7f:35:6a:a0:08:12:a6:3b: 30:55:ab:61:88:f2:a3:e9:d4:11:cf:6e:8f:43:82: 4f:01:9f:0f:dc:98:f8:1c:a0:3e:b9:a6:a0:a3:3c: 46:eb:59:8e:99:8e:47:15:dc:6b:bd:09:7e:c8:54: eb:25:ca:73:46:f6:dc:37:d6:35:db:52:2c:8f:a0: 42:d3:de:11:f0:2b:61:9f:4b:cd:02:0e:aa:b9:ab: d8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7C:BD:48:1B:26:1D:56:05:EF:F4:3C:F0:65:A2:9D:DC:BA:5D:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909fbd-fbcf-31b4-af49-4edaaf7553e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e7:aa:b5:e4:95:91:0f:48:ce:35:35:7b:69:00:1c:90:b1: 5f:2a:8d:89:1c:df:d4:d5:fc:6e:bf:3b:f6:56:31:66:26:2d: 70:04:de:06:ed:1f:ed:2d:a3:03:20:86:38:ea:50:fe:da:2e: e3:5e:f6:3b:e0:5a:aa:b7:95:73:82:55:6d:e7:e0:46:2a:41: d2:25:08:f1:b4:55:f5:5d:e1:e2:92:ce:d9:bb:51:54:ae:75: 30:34:8a:2f:a1:7a:04:0d:26:34:dc:7d:6d:dd:bd:24:e0:dd: 9b:39:e2:b1:d2:2d:2c:ad:0e:d4:5a:29:f1:9f:58:81:c0:42: 77:f3:c0:56:be:23:a7:c0:7b:98:77:a5:71:c0:6d:52:37:c3: a8:07:a9:a9:cb:13:21:67:1e:ab:2a:f6:ab:58:ba:75:a4:85: 26:5e:f3:1d:1c:75:ec:a9:99:1a:2f:3f:73:71:e5:83:db:4c: 24:b7:84:3f:79:ba:5a:a8:08:b5:dc:d0:34:d7:fd:b4:6f:e3: 50:bb:08:04:cd:2b:78:38:17:af:b8:d0:f7:a1:ce:ac:f2:fe: d9:db:5c:ff:a8:56:3d:68:56:6c:4f:ed:52:fa:03:47:9b:77: b0:0b:8a:49:74:43:01:50:21:e0:1d:50:96:ab:13:1e:a5:f8: 99:5b:d7:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvRP7Bb0uAnGLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk OTFhZDlkMjQtMWYxZC00MjNkLWI3NGItM2MyYWQ2MzE0OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU0afxFLQO+oJbpTGK32zFQ35VE9U8L0daw3 ir5Z8tmsT0PHqbp+YJKoTvXlkcuhwDb/6zHYap4hu/yRpyf5EEBdykR4KD1kq7b0 E9Tl1frwQZWLJ2BDGBXggRGUMIxOBoYen3JJnlE1coEThS2X2WFnQZBlqhOdziP3 ZZhGHnIvJtGmvkYe33LedheowQJGrZIm5N6meMKRQ/c07H/sVhFYbuwETazAeW2d fzVqoAgSpjswVathiPKj6dQRz26PQ4JPAZ8P3Jj4HKA+uaagozxG61mOmY5HFdxr vQl+yFTrJcpzRvbcN9Y121Isj6BC094R8Cthn0vNAg6quavYYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF8vUgbJh1WBe/0PPBlop3cul2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzY5MDlmYmQtZmJjZi0z MWI0LWFmNDktNGVkYWFmNzU1M2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKIggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7nqrXklZEPSM41NXtpAByQsV8qjYkc39TV/G6/O/ZWMWYmLXAE3gbt H+0towMghjjqUP7aLuNe9jvgWqq3lXOCVW3n4EYqQdIlCPG0VfVd4eKSztm7UVSu dTA0ii+hegQNJjTcfW3dvSTg3Zs54rHSLSytDtRaKfGfWIHAQnfzwFa+I6fAe5h3 pXHAbVI3w6gHqanLEyFnHqsq9qtYunWkhSZe8x0cdeypmRovP3Nx5YPbTCS3hD95 ulqoCLXc0DTX/bRv41C7CATNK3g4F6+40Pehzqzy/tnbXP+oVj1oVmxP7VL6A0eb d7ALikl0QwFQIeAdUJarEx6l+Jlb120= -----END CERTIFICATE-----Generated at Sat Jun 13 14:00:31 2026 by rpki-client