$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bffed36-f32f-3b71-8966-29804d04ee97.roa File: 8bffed36-f32f-3b71-8966-29804d04ee97.roa (raw, json) Hash identifier: lwyhKNVfZJVNjhgP+kNMFOf3W44wGhHRyZYppfZY3/c= Subject key identifier: F4:8B:7D:B7:A0:52:68:2B:D0:70:BC:1F:53:14:9D:FF:CE:CF:A9:56 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A98C2CB3EB0BC58A48C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bffed36-f32f-3b71-8966-29804d04ee97.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 40.131.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:98:c2:cb:3e:b0:bc:58:a4:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=aa3f3b70-0b33-4011-be87-f69f6ef26cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4c:53:97:d8:97:c0:51:d1:18:5e:9b:28:ca: e0:0b:d9:69:bd:f9:df:80:0f:7f:e5:79:91:95:a1: 56:16:f2:15:e2:ce:9e:b6:9c:63:b5:d3:77:6f:30: c8:ff:8d:25:26:82:f1:82:98:1c:36:a9:3f:37:03: 56:45:a0:d1:33:60:50:50:0b:ea:ff:83:a4:e1:c9: cb:71:41:fa:fd:e1:b1:b5:cf:e8:5a:8a:1b:6a:88: 41:28:5e:27:72:06:a9:2b:31:f9:cf:a7:fd:5f:f2: 86:73:38:03:7e:2f:ec:fe:26:ec:64:8a:cc:23:d0: 3c:18:55:ee:dc:b0:f3:0b:97:25:14:4d:af:c8:9d: 70:19:7d:6c:f7:65:ce:20:7e:20:80:5c:64:80:09: 6c:e1:0b:00:0a:09:1d:16:4c:6b:11:d3:cc:18:31: 42:62:ac:4c:1b:59:ab:28:13:a4:78:01:da:2c:56: c3:37:f4:83:37:69:eb:e8:94:48:7f:58:14:a8:46: a2:41:20:3d:a7:71:23:99:82:ec:9c:c6:88:dc:eb: 91:9b:01:77:75:5b:96:55:d0:59:73:6b:fc:98:41: 85:14:6c:b0:a0:6d:aa:44:85:6b:9f:5a:1c:ff:e0: 78:de:1b:c9:83:01:17:f8:cf:8c:fe:32:ce:02:b9: 1e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8B:7D:B7:A0:52:68:2B:D0:70:BC:1F:53:14:9D:FF:CE:CF:A9:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bffed36-f32f-3b71-8966-29804d04ee97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.131.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:33:57:98:1c:e2:54:d1:79:e5:14:f5:31:4d:ea:df:f6:6c: e2:f8:09:a4:fa:c3:6c:83:ad:20:bb:6a:2c:0b:cb:ca:ed:40: 8a:51:cb:36:99:5f:fd:e9:a2:b8:39:27:bc:cc:34:66:84:2d: 8b:e4:63:4a:5d:4a:03:f2:3c:88:f5:a1:2b:7f:25:f1:06:27: 84:86:61:c1:52:cf:4c:00:e5:9b:5d:3d:df:84:93:69:83:2a: f5:35:00:0d:37:57:e3:6a:a3:0f:9a:63:db:8b:8c:b8:05:a9: 5d:00:5c:49:4b:d9:bd:44:ae:71:b9:89:5d:d6:fc:b0:03:59: 66:ac:04:21:76:ec:b7:c7:37:0c:ae:4b:0d:d1:97:9a:34:de: 45:94:61:ab:ec:e2:a9:a7:db:a3:5f:aa:75:ba:56:97:27:2c: 3f:cb:0a:26:21:be:8f:8a:15:1a:68:c8:df:54:8c:4d:83:e0: 96:88:2a:1c:f6:fe:07:9a:96:77:67:97:fd:a3:09:c7:ec:6c: 5f:d9:a3:12:db:ed:f1:e1:d2:38:3a:06:fe:4b:eb:ff:e3:24: 9d:5d:8b:d6:64:fd:3e:b5:f2:2c:f0:7b:38:cc:e3:79:97:8c: 08:48:bc:85:50:c1:ea:a6:d7:f9:80:88:f8:25:4d:1d:c6:6b: 10:40:dc:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpjCyz6wvFikjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YWEzZjNiNzAtMGIzMy00MDExLWJlODctZjY5ZjZlZjI2Y2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUxTl9iXwFHRGF6bKMrgC9lpvfnfgA9/5XmR laFWFvIV4s6etpxjtdN3bzDI/40lJoLxgpgcNqk/NwNWRaDRM2BQUAvq/4Ok4cnL cUH6/eGxtc/oWoobaohBKF4ncgapKzH5z6f9X/KGczgDfi/s/ibsZIrMI9A8GFXu 3LDzC5clFE2vyJ1wGX1s92XOIH4ggFxkgAls4QsACgkdFkxrEdPMGDFCYqxMG1mr KBOkeAHaLFbDN/SDN2nr6JRIf1gUqEaiQSA9p3EjmYLsnMaI3OuRmwF3dVuWVdBZ c2v8mEGFFGywoG2qRIVrn1oc/+B43hvJgwEX+M+M/jLOArkeVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSLfbegUmgr0HC8H1MUnf/Oz6lWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGJmZmVkMzYtZjMyZi0z YjcxLTg5NjYtMjk4MDRkMDRlZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIzV5gc4lTReeUU9TFN6t/2bOL4CaT6w2yDrSC7aiwLy8rtQIpRyzaZ X/3porg5J7zMNGaELYvkY0pdSgPyPIj1oSt/JfEGJ4SGYcFSz0wA5ZtdPd+Ek2mD KvU1AA03V+Nqow+aY9uLjLgFqV0AXElL2b1ErnG5iV3W/LADWWasBCF27LfHNwyu Sw3Rl5o03kWUYavs4qmn26NfqnW6VpcnLD/LCiYhvo+KFRpoyN9UjE2D4JaIKhz2 /gealndnl/2jCcfsbF/ZoxLb7fHh0jg6Bv5L6//jJJ1di9Zk/T618izwezjM43mX jAhIvIVQweqm1/mAiPglTR3GaxBA3Fg= -----END CERTIFICATE-----Generated at Fri Apr 17 18:30:18 2026 by rpki-client