$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8197e1eb-06b5-329d-84ff-7798bc2eed67.roa File: 8197e1eb-06b5-329d-84ff-7798bc2eed67.roa (raw, json) Hash identifier: YzjlzAAsjW6LQlXZ6Oucp4Plml1kttEjJgaWZuljvU0= Subject key identifier: 42:07:40:42:0D:DB:81:D0:28:BE:04:5C:19:44:A5:04:6E:7A:FD:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EFF899830F6001E0E7900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8197e1eb-06b5-329d-84ff-7798bc2eed67.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 14439 IP address blocks: 40.135.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:ff:89:98:30:f6:00:1e:0e:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=9342227d-b023-46f9-a9ee-9de2f7f1e263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:2a:00:ae:81:aa:5e:2b:3b:07:3f:5c:72: 6b:65:8b:25:0c:c6:91:51:a4:b8:c2:fe:2e:94:b5: f0:7d:a6:92:6b:9a:c8:ae:98:58:d4:4d:d9:66:c6: 10:18:70:5b:35:35:9e:b4:a5:1c:51:72:dd:ea:5d: b0:f2:34:56:79:7e:16:7d:5b:77:c5:bc:d1:e9:a9: 1a:47:f6:d2:62:e5:eb:c9:75:71:9f:19:d5:ca:4b: 88:dd:3c:a3:f4:4e:60:3d:f5:a5:9b:d2:36:a5:34: e6:52:59:63:77:98:c2:21:19:65:66:4a:e1:ca:70: 77:df:a4:75:89:6f:b4:35:3b:91:57:c7:95:4f:5a: 8e:12:23:10:ce:56:aa:f1:78:83:e4:65:e4:c6:f0: 17:44:d3:d1:e5:f0:7b:6d:b5:1c:88:8c:d8:17:bb: 49:a2:1d:cf:93:a8:89:f4:36:c0:88:94:0c:b5:31: 36:03:c3:d7:f2:ac:0f:0d:57:e4:70:c7:e8:37:a3: 4b:d9:43:ca:f6:47:57:37:20:78:d3:89:b5:31:7f: c2:15:64:5e:c5:4f:7c:3a:77:80:c8:02:73:85:00: e8:f1:4d:8e:1c:da:f8:52:35:64:6d:b9:d9:24:53: 56:8d:f1:ae:cd:63:7f:dc:81:f9:f9:9b:62:a3:fa: ad:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:07:40:42:0D:DB:81:D0:28:BE:04:5C:19:44:A5:04:6E:7A:FD:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8197e1eb-06b5-329d-84ff-7798bc2eed67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.135.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:78:44:1f:fb:fd:9a:42:72:01:23:25:4c:2d:ca:47:03:ef: ed:9a:cf:77:a8:82:2c:67:fe:03:16:6e:07:e7:e1:ff:19:ad: 6d:d7:05:1a:8a:48:70:e6:b3:8a:b5:02:9d:59:96:d1:0d:3f: 17:85:1e:b1:75:db:0d:42:0e:45:46:24:0b:c0:02:09:ea:91: de:26:9a:4f:81:51:ed:15:41:96:15:c6:60:ea:44:44:f7:0f: ca:0a:97:27:5f:7b:5c:89:a7:e7:80:e5:8a:9c:5f:a3:8c:f6: 27:29:e3:38:6f:62:0f:e9:0c:47:55:92:15:db:7a:46:cd:71: a9:b0:9e:b7:da:44:38:ae:f7:db:74:de:03:5f:6e:bf:24:c2: 6d:e0:a1:20:ac:80:f0:09:62:a9:64:d4:a2:43:a9:fc:98:98: d1:93:c7:16:17:a5:2d:40:c8:7c:8a:fd:cd:64:a0:1a:5c:db: 8d:e4:15:fa:cd:9c:c0:16:3c:d1:17:c4:5e:52:de:0e:f3:84: 1b:5c:6c:78:e6:cc:c5:3d:7d:7c:1e:60:ae:3e:77:95:9c:d1: e0:d8:29:22:27:c3:7d:e8:64:8d:20:f0:22:d8:ed:66:24:8b: c3:ac:fb:db:19:be:e6:e7:dc:6a:0b:90:23:1e:dd:5a:7c:66: d3:d0:10:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTv+JmDD2AB4OeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk OTM0MjIyN2QtYjAyMy00NmY5LWE5ZWUtOWRlMmY3ZjFlMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZwqAK6Bql4rOwc/XHJrZYslDMaRUaS4wv4u lLXwfaaSa5rIrphY1E3ZZsYQGHBbNTWetKUcUXLd6l2w8jRWeX4WfVt3xbzR6aka R/bSYuXryXVxnxnVykuI3Tyj9E5gPfWlm9I2pTTmUlljd5jCIRllZkrhynB336R1 iW+0NTuRV8eVT1qOEiMQzlaq8XiD5GXkxvAXRNPR5fB7bbUciIzYF7tJoh3Pk6iJ 9DbAiJQMtTE2A8PX8qwPDVfkcMfoN6NL2UPK9kdXNyB404m1MX/CFWRexU98OneA yAJzhQDo8U2OHNr4UjVkbbnZJFNWjfGuzWN/3IH5+Ztio/qtwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIHQEIN24HQKL4EXBlEpQRuev2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODE5N2UxZWItMDZiNS0z MjlkLTg0ZmYtNzc5OGJjMmVlZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIcSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ4RB/7/ZpCcgEjJUwtykcD7+2az3eogixn/gMWbgfn4f8ZrW3XBRqK SHDms4q1Ap1ZltENPxeFHrF12w1CDkVGJAvAAgnqkd4mmk+BUe0VQZYVxmDqRET3 D8oKlydfe1yJp+eA5YqcX6OM9icp4zhvYg/pDEdVkhXbekbNcamwnrfaRDiu99t0 3gNfbr8kwm3goSCsgPAJYqlk1KJDqfyYmNGTxxYXpS1AyHyK/c1koBpc243kFfrN nMAWPNEXxF5S3g7zhBtcbHjmzMU9fXweYK4+d5Wc0eDYKSInw33oZI0g8CLY7WYk i8Os+9sZvubn3GoLkCMe3Vp8ZtPQEFY= -----END CERTIFICATE-----Generated at Sat Jun 13 18:37:41 2026 by rpki-client