$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54db5878-8f11-3433-9645-e751902f8993.roa File: 54db5878-8f11-3433-9645-e751902f8993.roa (raw, json) Hash identifier: GxwWUHKnHHL/PeZ4vtY4f5m6wa2L8892IXp82tWX9FY= Subject key identifier: 57:A1:BE:FC:5D:A0:84:62:12:22:0C:F1:55:12:5D:D7:47:F5:0B:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF4EC8DCC8E8A6557ECE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54db5878-8f11-3433-9645-e751902f8993.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 40.141.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f4:ec:8d:cc:8e:8a:65:57:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=bc201c46-9a32-4f1a-adfa-b32ce9e6e965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:71:c5:79:a8:69:81:cc:9f:e9:84:b3:e2:bd: 41:54:55:69:df:d8:6a:18:13:1d:eb:65:2a:41:c2: dd:02:21:3c:b5:64:d9:7d:d5:7d:9a:50:ce:a8:e1: 02:fd:24:bf:ce:77:da:46:e6:12:e8:b2:17:6d:42: 38:f0:1d:e4:87:65:d5:65:da:82:89:1a:f3:9c:12: 16:e0:f1:1c:cc:22:09:6b:28:c1:a7:f6:d0:36:01: 08:a1:f5:49:13:dc:ca:1a:65:b9:93:12:6f:81:3b: ee:91:c0:5b:40:09:9a:d7:d6:09:68:86:3a:dd:61: 83:19:ad:9d:56:71:8f:e7:69:4a:f4:91:36:31:f4: 50:34:83:c1:31:6f:d6:17:60:30:a5:a5:2f:ee:83: c1:e6:8a:45:19:25:f6:a5:17:b1:4d:62:d2:9f:f1: 08:cd:07:e9:ae:d0:1e:df:07:5f:35:9a:2a:fc:c6: d1:27:3f:15:d3:9d:9b:10:27:38:b3:f0:fd:13:27: 2b:9d:20:2e:b9:5e:1b:e1:f1:c9:3d:d6:e0:33:84: 3e:a9:69:e9:c6:b9:41:d9:45:e2:e0:1a:2c:f8:b4: 71:3b:6d:9d:45:73:dd:bb:ad:02:dc:ca:65:a7:83: d1:9f:ed:76:02:7b:0c:58:7b:dc:ea:78:62:62:98: f5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A1:BE:FC:5D:A0:84:62:12:22:0C:F1:55:12:5D:D7:47:F5:0B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54db5878-8f11-3433-9645-e751902f8993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.141.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a2:94:b3:1f:a7:e5:8b:28:17:b6:0f:a8:76:b7:bf:f3:81: c8:26:0f:c6:48:fd:a4:83:88:31:12:33:f7:4a:51:a8:61:60: 27:ca:3a:28:3a:73:0b:00:29:84:27:88:60:2d:dc:b5:67:ac: c4:60:09:53:88:57:ae:85:ae:8b:d2:c1:1a:83:b9:b9:36:b5: a9:87:d9:5b:26:53:11:cc:4a:f9:36:34:e0:3e:74:cc:68:51: 44:fd:dd:9e:fe:3a:67:16:97:0b:2e:9d:13:24:f1:35:cc:32: a6:eb:d6:58:a1:ba:73:e5:72:eb:03:c6:da:2c:94:86:2b:08: 63:dc:7a:e5:bc:95:8e:d0:7b:86:d4:36:d8:ce:d5:97:c9:a9: 78:5f:f6:b0:b3:66:c7:aa:81:94:43:ae:7f:a3:94:c7:5f:f9: 98:5b:b7:b0:64:72:06:58:19:c2:b5:88:7e:9a:a3:97:5a:ca: 43:d3:43:91:41:8c:5b:74:70:5b:c4:11:02:cf:3d:2b:22:52: e5:c5:f1:9e:16:28:1b:d9:c1:d4:c6:33:99:91:05:f1:b2:19: d7:80:4f:51:33:a2:e0:7a:fc:cb:ed:68:a5:da:4b:99:50:a6: 69:9a:1b:8f:c9:54:f7:fa:53:17:00:3f:6a:98:37:50:24:91: a2:92:6e:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvTsjcyOimVX7OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YmMyMDFjNDYtOWEzMi00ZjFhLWFkZmEtYjMyY2U5ZTZlOTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnHFeahpgcyf6YSz4r1BVFVp39hqGBMd62Uq QcLdAiE8tWTZfdV9mlDOqOEC/SS/znfaRuYS6LIXbUI48B3kh2XVZdqCiRrznBIW 4PEczCIJayjBp/bQNgEIofVJE9zKGmW5kxJvgTvukcBbQAma19YJaIY63WGDGa2d VnGP52lK9JE2MfRQNIPBMW/WF2AwpaUv7oPB5opFGSX2pRexTWLSn/EIzQfprtAe 3wdfNZoq/MbRJz8V052bECc4s/D9EycrnSAuuV4b4fHJPdbgM4Q+qWnpxrlB2UXi 4Bos+LRxO22dRXPdu60C3Mplp4PRn+12AnsMWHvc6nhiYpj1DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFehvvxdoIRiEiIM8VUSXddH9QuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTRkYjU4NzgtOGYxMS0z NDMzLTk2NDUtZTc1MTkwMmY4OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI12MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2ilLMfp+WLKBe2D6h2t7/zgcgmD8ZI/aSDiDESM/dKUahhYCfKOig6 cwsAKYQniGAt3LVnrMRgCVOIV66FrovSwRqDubk2tamH2VsmUxHMSvk2NOA+dMxo UUT93Z7+OmcWlwsunRMk8TXMMqbr1lihunPlcusDxtoslIYrCGPceuW8lY7Qe4bU NtjO1ZfJqXhf9rCzZseqgZRDrn+jlMdf+Zhbt7BkcgZYGcK1iH6ao5daykPTQ5FB jFt0cFvEEQLPPSsiUuXF8Z4WKBvZwdTGM5mRBfGyGdeAT1EzouB6/MvtaKXaS5lQ pmmaG4/JVPf6UxcAP2qYN1AkkaKSbs0= -----END CERTIFICATE-----Generated at Sat Jun 13 06:04:29 2026 by rpki-client