$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6b1a821f-97a1-3f1e-8e6b-6cd45ee960f8.roa File: 6b1a821f-97a1-3f1e-8e6b-6cd45ee960f8.roa (raw, json) Hash identifier: h3U8MKfRjHpnedwkWG5YScPwbrW0/cVG0JM8mnQcW7I= Subject key identifier: 79:3C:2D:4A:54:82:9A:7E:60:C3:80:74:09:47:57:2B:C9:1E:4E:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F426A083A41D00679FE41C500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6b1a821f-97a1-3f1e-8e6b-6cd45ee960f8.roa Signing time: Tue 22 Sep 2026 12:32:27 +0000 ROA not before: Tue 22 Sep 2026 12:32:27 +0000 ROA not after: Mon 21 Dec 2026 13:32:27 +0000 asID: 7029 IP address blocks: 40.142.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:6a:08:3a:41:d0:06:79:fe:41:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 22 12:32:27 2026 GMT Not After : Dec 21 13:32:27 2026 GMT Subject: CN=ee886145-6046-40bf-97af-5237be9efc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:98:50:a1:c3:d2:86:96:ee:ef:4f:e7:c9:8e: 40:99:27:68:85:3f:a2:db:d5:eb:ae:f2:92:b5:39: 27:5a:ac:7c:a7:42:e2:37:40:6a:7f:65:fd:ad:4f: b3:2a:b0:ee:9e:b6:2b:0e:46:dc:6b:aa:8d:af:cf: 02:89:c9:dc:e0:ff:cc:22:4d:36:47:bc:c1:37:8a: 40:c2:dc:07:70:d3:d5:11:c8:48:16:0b:9c:5b:78: d2:e6:fb:21:fa:43:1b:ae:94:0f:ca:f7:1d:b1:2e: 93:2c:96:87:f1:d5:76:5f:aa:a7:3f:0d:66:26:47: eb:43:c3:b1:f7:3d:16:4f:ff:b0:db:51:c6:43:2f: 1d:6e:27:d9:29:92:36:3f:2c:05:b1:80:52:30:91: 5f:3e:a0:5a:c1:f7:24:15:87:5d:e1:cd:c4:2b:ea: 77:81:3f:4c:7a:1e:99:46:f6:6e:d4:f8:c7:bf:34: a2:b7:64:04:c9:a7:f0:b5:68:ea:a6:03:d8:0e:6a: 81:a2:f5:d7:eb:54:a1:9e:9e:91:a6:2a:9a:ef:d8: bc:fd:7a:78:cc:dd:ab:a0:5e:2d:2f:a5:f8:86:13: 40:e1:03:f1:04:20:8b:5a:d8:38:26:17:ab:6f:76: 15:65:b9:f4:5f:2c:0f:2e:ba:ed:4d:b1:56:6d:c9: 10:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3C:2D:4A:54:82:9A:7E:60:C3:80:74:09:47:57:2B:C9:1E:4E:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6b1a821f-97a1-3f1e-8e6b-6cd45ee960f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d5:42:82:ed:27:69:78:c2:84:35:67:1d:16:7e:da:0a:52: e2:09:bd:73:4f:15:82:fa:7b:dc:ca:4c:9c:32:46:59:1f:f0: 3a:ce:ae:da:8f:0d:90:94:66:02:a6:bf:3f:bc:8b:9e:cf:b6: e2:27:e3:b6:4f:83:8c:8f:1e:5a:5b:00:19:95:79:12:84:bc: e2:46:0e:12:59:1f:d5:bf:f7:ed:9d:7c:e9:5b:e9:b8:14:38: 2a:a2:80:69:b3:e8:fe:81:23:67:66:64:92:4d:12:0c:e3:7e: fe:19:ae:d3:99:50:f3:7b:54:32:60:bb:65:1e:37:0f:b3:7d: f2:50:f7:3b:14:7f:6d:5a:e0:bd:a3:87:26:85:d0:bb:ac:1b: 92:29:ba:13:bd:33:89:e8:f0:94:fd:de:63:9f:2d:a9:83:04: 28:08:f6:96:60:23:eb:f2:28:8c:ec:8a:28:7c:04:41:da:76: 81:5c:42:55:cc:8f:91:15:c4:84:3d:ab:b1:9a:83:45:bf:c9: c4:fa:b9:6e:b1:bd:a4:30:06:ab:fc:da:fe:c3:51:c2:12:f0: be:9b:66:97:ac:3f:34:92:bf:69:c1:d4:3f:81:3d:06:21:f7: 2b:09:25:ae:ad:1f:08:aa:f4:fa:32:83:ec:5a:5a:0a:88:e1: 5c:f0:5f:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cagg6QdAGef5BxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyMjEyMzIyN1oXDTI2MTIyMTEzMzIyN1owLzEtMCsGA1UEAxMk ZWU4ODYxNDUtNjA0Ni00MGJmLTk3YWYtNTIzN2JlOWVmYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5hQocPShpbu70/nyY5AmSdohT+i29XrrvKS tTknWqx8p0LiN0Bqf2X9rU+zKrDunrYrDkbca6qNr88Cicnc4P/MIk02R7zBN4pA wtwHcNPVEchIFgucW3jS5vsh+kMbrpQPyvcdsS6TLJaH8dV2X6qnPw1mJkfrQ8Ox 9z0WT/+w21HGQy8dbifZKZI2PywFsYBSMJFfPqBawfckFYdd4c3EK+p3gT9Meh6Z RvZu1PjHvzSit2QEyafwtWjqpgPYDmqBovXX61Shnp6Rpiqa79i8/Xp4zN2roF4t L6X4hhNA4QPxBCCLWtg4Jherb3YVZbn0XywPLrrtTbFWbckQXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHk8LUpUgpp+YMOAdAlHVyvJHk4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmIxYTgyMWYtOTdhMS0z ZjFlLThlNmItNmNkNDVlZTk2MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKI6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLVQoLtJ2l4woQ1Zx0WftoKUuIJvXNPFYL6e9zKTJwyRlkf8DrOrtqP DZCUZgKmvz+8i57PtuIn47ZPg4yPHlpbABmVeRKEvOJGDhJZH9W/9+2dfOlb6bgU OCqigGmz6P6BI2dmZJJNEgzjfv4ZrtOZUPN7VDJgu2UeNw+zffJQ9zsUf21a4L2j hyaF0LusG5IpuhO9M4no8JT93mOfLamDBCgI9pZgI+vyKIzsiih8BEHadoFcQlXM j5EVxIQ9q7Gag0W/ycT6uW6xvaQwBqv82v7DUcIS8L6bZpesPzSSv2nB1D+BPQYh 9ysJJa6tHwiq9Poyg+xaWgqI4VzwXxM= -----END CERTIFICATE-----Generated at Tue Sep 22 18:40:18 2026 by rpki-client