$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa File: 3bfe9669-f1d3-319b-899b-0dc919583329.roa (raw, json) Hash identifier: Uz1S6xX5JHcKw29L3GYYkhvIH9nmnZGigCSwF2T7Smg= Subject key identifier: A8:31:0C:F2:2F:C1:AB:D3:59:34:1F:7B:94:27:BE:2F:BE:85:BB:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F12FA0B8FCC367B17BCE2 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 40.142.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:12:fa:0b:8f:cc:36:7b:17:bc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=bfcfbd46-ad48-4825-83d1-3b921214e44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2f:61:c0:28:1c:4b:21:01:66:3c:f6:b7:56: a4:27:f3:04:b3:18:81:63:34:d0:3d:72:9f:d2:a6: 3f:ce:85:7e:a0:b8:22:ed:e7:fd:73:db:45:2a:94: ed:34:9c:6e:e4:e7:f2:c7:68:17:ac:b5:35:02:dd: b2:2f:9a:9f:36:c9:a7:3c:ff:87:49:ea:b6:08:88: 0d:b1:f8:f0:2a:a7:50:27:a1:cd:af:6b:f8:35:23: 03:af:22:24:07:95:74:1f:e1:1a:09:12:ef:4d:67: 73:c7:12:42:98:ea:80:e5:66:28:fa:cd:61:23:bc: 3a:6e:c7:dc:ef:e7:99:67:7c:75:2c:13:41:43:bc: b8:09:42:dc:c7:2f:1f:ba:c7:25:86:82:b0:e8:b2: 8f:bb:c8:6b:e2:b0:46:5f:cb:b3:d3:16:4e:2e:02: 89:77:2d:3d:6a:25:e7:be:96:24:77:5a:7a:86:9b: 85:21:c4:c1:9c:82:57:a7:75:75:9f:b7:e1:10:a0: 26:11:c1:f0:32:02:0e:52:4b:dc:87:f1:d2:d0:ed: 4f:97:bc:03:c9:c2:f0:04:39:fb:33:a7:d4:3b:75: 90:87:4f:67:bc:a9:54:6d:fd:b7:73:ec:d9:e1:c3: f0:b9:a0:6b:6f:44:d0:20:4f:59:12:96:b5:41:f9: 07:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:31:0C:F2:2F:C1:AB:D3:59:34:1F:7B:94:27:BE:2F:BE:85:BB:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe9669-f1d3-319b-899b-0dc919583329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:36:b9:87:19:2c:bb:75:6d:42:86:40:47:92:9c:50:24:1c: 7f:d3:5f:a8:4d:e9:2d:86:66:72:9a:27:ab:1a:3d:2b:17:06: 73:a4:34:c0:bf:07:31:74:1a:d0:9d:f4:e5:82:56:ad:12:01: 61:40:67:bb:dc:b3:e3:f3:c4:8a:cc:6c:99:4a:41:7b:d8:23: 22:93:57:3a:80:c4:58:c5:bf:3b:23:cf:c7:d2:bf:b6:8b:e2: 6f:56:e3:dd:d1:25:88:96:57:1f:95:e3:56:c2:11:45:a7:8e: 4b:d7:08:d5:f7:0a:1b:71:04:d8:0a:5d:41:b6:2f:3d:db:88: 0a:20:05:b5:4e:72:27:12:05:b9:9b:be:13:d9:46:be:ae:a0: 5b:0f:25:d2:19:45:20:6e:94:a3:25:5a:26:e0:d1:b6:ff:e8: ec:82:66:1b:46:f8:c9:63:6c:e7:62:9c:57:e2:7e:8f:e2:88: c4:6c:e5:64:7e:6b:5f:a1:17:65:1c:5f:02:81:78:6a:de:cb: d9:cb:b8:2c:98:e3:30:64:8d:87:30:b7:dc:1d:6e:8d:8d:b7: 83:88:3b:0b:c4:17:52:2b:a5:fa:24:be:37:1a:fe:59:9b:62: 46:0b:4c:39:ce:2f:46:fa:10:85:a5:a1:9f:70:ba:bb:61:72: 62:bc:ef:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTxL6C4/MNnsXvOIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YmZjZmJkNDYtYWQ0OC00ODI1LTgzZDEtM2I5MjEyMTRlNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy9hwCgcSyEBZjz2t1akJ/MEsxiBYzTQPXKf 0qY/zoV+oLgi7ef9c9tFKpTtNJxu5Ofyx2gXrLU1At2yL5qfNsmnPP+HSeq2CIgN sfjwKqdQJ6HNr2v4NSMDryIkB5V0H+EaCRLvTWdzxxJCmOqA5WYo+s1hI7w6bsfc 7+eZZ3x1LBNBQ7y4CULcxy8fusclhoKw6LKPu8hr4rBGX8uz0xZOLgKJdy09aiXn vpYkd1p6hpuFIcTBnIJXp3V1n7fhEKAmEcHwMgIOUkvch/HS0O1Pl7wDycLwBDn7 M6fUO3WQh09nvKlUbf23c+zZ4cPwuaBrb0TQIE9ZEpa1QfkHkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgxDPIvwavTWTQfe5Qnvi++hbseMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JmZTk2NjktZjFkMy0z MTliLTg5OWItMGRjOTE5NTgzMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA42uYcZLLt1bUKGQEeSnFAkHH/TX6hN6S2GZnKaJ6saPSsXBnOkNMC/ BzF0GtCd9OWCVq0SAWFAZ7vcs+PzxIrMbJlKQXvYIyKTVzqAxFjFvzsjz8fSv7aL 4m9W493RJYiWVx+V41bCEUWnjkvXCNX3ChtxBNgKXUG2Lz3biAogBbVOcicSBbmb vhPZRr6uoFsPJdIZRSBulKMlWibg0bb/6OyCZhtG+MljbOdinFfifo/iiMRs5WR+ a1+hF2UcXwKBeGrey9nLuCyY4zBkjYcwt9wdbo2Nt4OIOwvEF1Irpfokvjca/lmb YkYLTDnOL0b6EIWloZ9wurthcmK875g= -----END CERTIFICATE-----Generated at Sat Jun 13 06:08:51 2026 by rpki-client