$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa File: 4c7661b5-4727-3944-9cf3-442581b9861b.roa (raw, json) Hash identifier: IjAf1NN66Lk6UeQ05QMIMLMEFGGxFoF+IEGE02l+JXE= Subject key identifier: 09:66:B2:48:2C:4A:2D:7A:54:88:11:FE:20:C0:40:50:CE:71:8D:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF47E8921C356E0578100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 40.138.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f4:7e:89:21:c3:56:e0:57:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=668e0014-57c8-40c9-a89b-44e2c79e414a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:9e:0d:1b:56:f3:a8:9d:27:50:3f:4f:44: 79:fc:88:0a:8f:76:1f:f9:59:26:67:08:39:86:d7: 1c:6a:e3:08:41:d2:ab:31:e2:a4:5f:8b:f1:23:82: f1:82:3f:ce:4e:77:58:a1:f2:7a:57:37:5d:b0:0e: 76:2b:63:35:72:26:7a:13:85:82:15:65:fe:b5:f6: 7d:8c:70:5a:a2:0a:3b:99:c8:f9:cb:f2:7b:6b:86: c1:fa:c5:06:60:6f:bf:dd:50:17:d6:17:22:36:cb: 9d:4c:48:98:ce:68:d5:9b:c5:ad:1b:7a:08:a4:7a: 0a:2c:86:59:1e:e3:5e:2c:34:1c:43:4c:7b:a1:4a: 15:69:e7:a2:61:f4:98:59:5e:57:e6:26:de:b2:18: 19:81:3c:b4:2f:9a:0d:97:77:d3:83:c9:b7:84:ae: 88:94:a8:cc:f7:0c:6a:6c:01:8a:94:38:4b:1f:35: e5:96:40:c9:5a:9d:38:ea:0c:8b:d2:72:37:4c:2a: 41:a0:5e:1e:bb:51:d2:c8:48:5e:15:b5:c4:a7:98: 5f:91:69:77:ee:83:11:4d:6b:ba:07:47:04:18:2e: e7:55:76:af:35:3d:c3:37:df:4e:ff:50:9b:8b:cd: 59:4f:69:60:e1:54:c1:76:27:ef:dd:52:4a:68:4a: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:66:B2:48:2C:4A:2D:7A:54:88:11:FE:20:C0:40:50:CE:71:8D:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c7661b5-4727-3944-9cf3-442581b9861b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.138.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:1b:65:cc:d1:a8:dd:18:a0:8b:f1:77:a9:41:b5:63:58:7f: d5:bd:98:0a:1d:13:6f:c4:cb:23:26:4e:bf:d7:9c:7d:4c:62: ac:75:63:ae:34:32:b0:81:97:a3:fa:75:16:e1:2a:f2:78:8e: 51:1a:b0:9f:86:42:4b:f8:fe:8d:1d:cb:ae:60:76:5d:a3:f2: 2b:a7:0b:13:64:68:86:70:0b:8a:90:65:cf:2f:9d:1e:ed:bf: 65:8b:9d:49:21:a8:04:9b:47:d6:ec:78:51:78:39:4e:83:bc: c3:9e:ee:0b:44:b3:37:9a:0b:77:fe:98:ab:95:30:1a:21:33: db:29:67:6d:51:8f:d4:60:95:2b:76:f3:30:f6:cb:1e:cc:5a: ce:4c:40:08:53:7e:aa:92:f9:2c:8f:0c:9e:23:3f:64:05:1a: 79:f8:32:04:5e:42:16:44:f4:4d:55:27:f3:99:1e:90:d5:3a: 24:ba:b8:61:e0:d9:5d:83:6b:bb:39:6b:6d:8e:16:85:9a:6f: f1:74:ce:0c:9f:12:34:87:29:fa:6a:6e:db:33:82:f7:9f:74: 88:0a:76:6a:25:b4:ec:74:a6:09:88:1c:50:6f:83:ce:2a:49: 29:d1:58:2a:18:74:2a:0b:4a:32:3e:f6:b4:05:06:88:40:ec: 45:77:a4:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvR+iSHDVuBXgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NjY4ZTAwMTQtNTdjOC00MGM5LWE4OWItNDRlMmM3OWU0MTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTueDRtW86idJ1A/T0R5/IgKj3Yf+VkmZwg5 htccauMIQdKrMeKkX4vxI4Lxgj/OTndYofJ6VzddsA52K2M1ciZ6E4WCFWX+tfZ9 jHBaogo7mcj5y/J7a4bB+sUGYG+/3VAX1hciNsudTEiYzmjVm8WtG3oIpHoKLIZZ HuNeLDQcQ0x7oUoVaeeiYfSYWV5X5ibeshgZgTy0L5oNl3fTg8m3hK6IlKjM9wxq bAGKlDhLHzXllkDJWp046gyL0nI3TCpBoF4eu1HSyEheFbXEp5hfkWl37oMRTWu6 B0cEGC7nVXavNT3DN99O/1Cbi81ZT2lg4VTBdifv3VJKaEqKuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlmskgsSi16VIgR/iDAQFDOcY2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM3NjYxYjUtNDcyNy0z OTQ0LTljZjMtNDQyNTgxYjk4NjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHKIoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwbZczRqN0YoIvxd6lBtWNYf9W9mAodE2/EyyMmTr/XnH1MYqx1Y640 MrCBl6P6dRbhKvJ4jlEasJ+GQkv4/o0dy65gdl2j8iunCxNkaIZwC4qQZc8vnR7t v2WLnUkhqASbR9bseFF4OU6DvMOe7gtEszeaC3f+mKuVMBohM9spZ21Rj9RglSt2 8zD2yx7MWs5MQAhTfqqS+SyPDJ4jP2QFGnn4MgReQhZE9E1VJ/OZHpDVOiS6uGHg 2V2Da7s5a22OFoWab/F0zgyfEjSHKfpqbtszgvefdIgKdmoltOx0pgmIHFBvg84q SSnRWCoYdCoLSjI+9rQFBohA7EV3pAo= -----END CERTIFICATE-----Generated at Sat Jun 13 06:08:04 2026 by rpki-client