$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa File: 64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa (raw, json) Hash identifier: ZYysSEPpabc3vkBe8E0hAEXwpNlNoz8rHLSP4+NX5SY= Subject key identifier: DF:25:1E:45:50:68:E6:4C:76:3C:A1:27:0F:11:F5:51:39:DB:22:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F0242302AD9AD14BD0719C430 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 40.137.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:30:2a:d9:ad:14:bd:07:19:c4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=39f3ec5b-b0ec-46c1-b496-9b8df77f6f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:77:af:5b:09:52:24:a3:ac:10:57:4d:b8: 72:f5:d9:01:74:a9:45:82:ef:42:48:07:30:f8:b6: 23:96:f7:47:3c:28:d2:af:1a:fa:34:e8:cc:37:ec: 3f:07:dd:52:7e:43:1d:ec:14:34:3a:69:5d:54:10: 7d:4f:0c:81:c3:1d:1c:d6:07:43:5c:d2:77:fa:ca: 8d:a6:87:64:a8:98:33:e6:5b:b7:81:0a:18:87:a7: 5e:e8:71:e5:3a:09:7b:51:7d:d1:3c:80:6b:c0:1f: e6:8b:ab:9d:07:cc:9d:91:ad:f4:ab:5f:6b:64:80: 4d:7e:2c:d1:fb:b1:b0:73:6d:38:4f:a0:54:ef:ee: f4:9f:d2:76:45:bf:14:c7:cf:fe:93:6b:35:9b:09: 8a:44:a8:e4:67:bb:06:08:46:79:97:59:45:63:99: 49:89:fe:8c:17:ee:a0:e2:13:d2:0c:01:d9:e6:ba: 5b:c5:8e:29:f6:1f:a1:cc:61:32:96:db:ac:00:dd: 9c:0b:b5:53:4a:07:41:71:81:29:83:2f:7a:16:3a: fa:a8:b2:18:ed:70:eb:23:d6:e3:09:76:72:9e:21: 80:e4:b1:26:8a:22:93:e7:a0:31:d8:4b:6c:01:7e: 4e:0d:1f:0f:b2:07:0c:5b:b4:09:55:a8:e4:9e:5a: 73:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:25:1E:45:50:68:E6:4C:76:3C:A1:27:0F:11:F5:51:39:DB:22:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.137.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:31:f7:6d:34:46:7b:8f:c0:52:05:d9:5f:4e:17:be:a4:e3: 53:e6:ad:98:80:f0:9d:49:9d:0e:74:c7:af:76:53:f7:3d:ac: aa:60:80:b8:8f:32:83:64:76:9a:89:29:72:79:bd:5d:e3:ec: bd:24:b1:55:48:a6:fa:98:9b:b5:93:23:66:da:c7:e8:0f:f1: 8f:3b:3e:6d:ab:c3:e9:8c:a3:3e:32:56:01:b5:81:d4:92:bc: d9:3c:1e:3b:80:d3:a1:45:63:eb:bf:1a:1d:ac:af:ae:d0:79: 86:8c:c5:04:20:44:65:43:35:6c:39:f5:bc:ab:29:78:63:9a: 4d:b5:29:8c:23:4f:97:ef:02:f4:1b:e5:ba:ef:f4:7a:53:7e: 6a:da:f0:e9:f4:d9:37:9e:cc:d3:e5:15:f4:bf:de:93:b2:22: ff:4e:da:d7:fa:e6:32:f3:5b:74:34:6f:8e:4b:92:fb:23:d2: 44:c9:22:f4:ae:5a:16:ba:1f:65:68:e1:4f:b9:04:5d:53:79: 80:27:48:e7:b8:36:0e:62:b3:93:bb:2e:59:ae:bd:9f:98:aa: 01:34:2b:3b:90:25:65:0f:3b:b1:ce:ab:f1:dc:32:1f:ff:bc: f6:dc:a8:0c:7c:b8:28:2b:33:3c:c5:28:39:1a:ae:58:78:a7: 8f:5a:53:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjAq2a0UvQcZxDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MzlmM2VjNWItYjBlYy00NmMxLWI0OTYtOWI4ZGY3N2Y2ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3x3r1sJUiSjrBBXTbhy9dkBdKlFgu9CSAcw +LYjlvdHPCjSrxr6NOjMN+w/B91SfkMd7BQ0OmldVBB9TwyBwx0c1gdDXNJ3+sqN podkqJgz5lu3gQoYh6de6HHlOgl7UX3RPIBrwB/mi6udB8ydka30q19rZIBNfizR +7Gwc204T6BU7+70n9J2Rb8Ux8/+k2s1mwmKRKjkZ7sGCEZ5l1lFY5lJif6MF+6g 4hPSDAHZ5rpbxY4p9h+hzGEyltusAN2cC7VTSgdBcYEpgy96Fjr6qLIY7XDrI9bj CXZyniGA5LEmiiKT56Ax2EtsAX5ODR8PsgcMW7QJVajknlpzgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8lHkVQaOZMdjyhJw8R9VE52yJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRkOTllZWYtYzBjNC0z YmRiLWJiMDUtNDNlNzMxOWE1ZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKIkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABox9200RnuPwFIF2V9OF76k41PmrZiA8J1JnQ50x692U/c9rKpggLiP MoNkdpqJKXJ5vV3j7L0ksVVIpvqYm7WTI2bax+gP8Y87Pm2rw+mMoz4yVgG1gdSS vNk8HjuA06FFY+u/Gh2sr67QeYaMxQQgRGVDNWw59byrKXhjmk21KYwjT5fvAvQb 5brv9HpTfmra8On02TeezNPlFfS/3pOyIv9O2tf65jLzW3Q0b45Lkvsj0kTJIvSu Wha6H2Vo4U+5BF1TeYAnSOe4Ng5is5O7LlmuvZ+YqgE0KzuQJWUPO7HOq/HcMh// vPbcqAx8uCgrMzzFKDkarlh4p49aU3s= -----END CERTIFICATE-----Generated at Sun Sep 20 19:48:49 2026 by rpki-client