$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa File: 64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa (raw, json) Hash identifier: RaIVCKQo+jVBdyadT6kgtosoDipTCbg6Fkk01nSgh1s= Subject key identifier: 13:25:25:A0:F0:A9:5A:4C:08:A6:99:A1:AF:55:B0:84:38:C2:A0:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A90ABF88984BD8DAB9140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 40.137.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:90:ab:f8:89:84:bd:8d:ab:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=1a89d2b9-fa01-4d26-9c9d-096d0bbd4931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:e4:f7:9b:29:25:70:38:dc:f1:04:7b:64: b5:da:b7:14:70:02:e7:3f:5c:33:d3:16:06:0d:a7: 42:c2:41:ba:b2:42:a5:d2:d9:8d:0e:70:67:4c:f3: f1:44:b0:9d:c3:e5:c9:2e:02:c5:73:9a:a1:be:93: b1:d6:86:30:84:f1:88:59:e4:b5:7e:86:f9:ef:c9: 54:98:2c:fd:36:ac:bc:aa:f4:8e:d8:08:72:e5:ae: 3f:8e:98:12:22:e3:9f:7f:a5:5f:23:93:36:1e:88: 60:09:4b:d9:ff:71:e0:82:a8:3f:41:ac:fa:df:99: 59:b7:6c:74:87:c7:31:82:40:d8:08:42:1a:11:2a: 23:de:73:05:ef:ac:98:61:bf:4e:e9:62:e8:06:48: 27:73:9b:2d:13:6e:90:b6:2d:af:5a:98:d4:0d:0a: eb:89:b5:33:18:0b:31:85:da:2b:66:32:06:0c:6d: 81:ec:31:47:ba:d9:13:83:8e:d3:fa:85:ef:ca:04: fd:f7:35:06:5a:14:d0:fa:26:72:79:54:41:ed:0a: 1e:34:28:bf:f8:b7:7a:20:f8:11:ad:66:5f:e1:a5: bb:8e:1d:d5:85:81:86:d7:d2:de:cd:32:44:ae:b2: 24:95:23:8b:13:a3:bd:d1:4a:50:2e:09:a1:68:7c: b8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:25:25:A0:F0:A9:5A:4C:08:A6:99:A1:AF:55:B0:84:38:C2:A0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.137.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b6:94:9d:f9:e8:98:b9:a1:90:f0:78:cc:4b:02:63:a6:a5: 6d:6c:4c:68:9c:4e:c8:1d:de:7d:93:12:a3:70:65:3c:cf:48: 3a:d1:d5:e4:10:3a:80:0a:b3:c5:34:77:b1:cf:94:4b:9c:82: 37:75:eb:70:c8:7a:e4:63:bd:6e:8f:e6:1b:11:15:1b:b0:ff: b8:d5:89:8c:94:f1:6d:c3:30:c9:c6:12:75:63:84:75:b9:70: f6:7f:ed:5c:df:29:d5:e8:10:47:ca:d7:a2:59:cf:05:f5:b2: bf:3f:d0:ef:ce:4c:1f:5f:25:97:9a:54:1a:55:41:3b:59:b3: 8c:fc:c2:75:45:2d:4a:f8:6d:d9:1f:78:62:58:4a:d1:f1:51: 04:a0:d0:1c:c2:30:a0:fc:43:a5:52:fe:6e:78:d6:63:cb:28: 74:cb:e3:00:76:39:b8:5d:51:e3:68:be:f3:88:e0:ea:22:ca: 77:6b:6a:f5:48:32:62:c0:86:7f:66:8d:2f:fc:8d:78:be:52: 30:ae:30:db:46:2a:36:23:d6:cb:5e:e1:8b:c5:7f:ca:33:d6: 03:68:c7:a1:2a:c3:ac:c6:2b:94:5c:bc:d3:30:33:c8:f9:2d: 06:f8:e1:7a:77:bb:6b:cb:2c:07:91:bd:10:8c:4b:26:32:e3: 55:bd:5d:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpCr+ImEvY2rkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MWE4OWQyYjktZmEwMS00ZDI2LTljOWQtMDk2ZDBiYmQ0OTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDPk95spJXA43PEEe2S12rcUcALnP1wz0xYG DadCwkG6skKl0tmNDnBnTPPxRLCdw+XJLgLFc5qhvpOx1oYwhPGIWeS1fob578lU mCz9Nqy8qvSO2Ahy5a4/jpgSIuOff6VfI5M2HohgCUvZ/3Hggqg/Qaz635lZt2x0 h8cxgkDYCEIaESoj3nMF76yYYb9O6WLoBkgnc5stE26Qti2vWpjUDQrribUzGAsx hdorZjIGDG2B7DFHutkTg47T+oXvygT99zUGWhTQ+iZyeVRB7QoeNCi/+Ld6IPgR rWZf4aW7jh3VhYGG19LezTJErrIklSOLE6O90UpQLgmhaHy4CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMlJaDwqVpMCKaZoa9VsIQ4wqBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRkOTllZWYtYzBjNC0z YmRiLWJiMDUtNDNlNzMxOWE1ZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKIkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS2lJ356Ji5oZDweMxLAmOmpW1sTGicTsgd3n2TEqNwZTzPSDrR1eQQ OoAKs8U0d7HPlEucgjd163DIeuRjvW6P5hsRFRuw/7jViYyU8W3DMMnGEnVjhHW5 cPZ/7VzfKdXoEEfK16JZzwX1sr8/0O/OTB9fJZeaVBpVQTtZs4z8wnVFLUr4bdkf eGJYStHxUQSg0BzCMKD8Q6VS/m541mPLKHTL4wB2ObhdUeNovvOI4OoiyndravVI MmLAhn9mjS/8jXi+UjCuMNtGKjYj1ste4YvFf8oz1gNox6Eqw6zGK5RcvNMwM8j5 LQb44Xp3u2vLLAeRvRCMSyYy41W9XSU= -----END CERTIFICATE-----Generated at Fri Apr 17 10:14:41 2026 by rpki-client