$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd564c41-e023-395e-bdca-c86f40f460d6.roa File: bd564c41-e023-395e-bdca-c86f40f460d6.roa (raw, json) Hash identifier: RhlsL/R74EGFEoAl+jVihT5Ca9MydXONRRPEQaB8KNQ= Subject key identifier: B1:3C:08:3A:D4:DF:4B:E6:51:BA:4D:96:37:56:FD:7B:01:BA:C9:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A986DB5286E0F7DD07180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd564c41-e023-395e-bdca-c86f40f460d6.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 40.131.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:98:6d:b5:28:6e:0f:7d:d0:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=d1ff36e0-9539-4dfe-9d15-16eb0d8a53c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8b:87:5b:ab:4d:c0:14:80:60:af:5a:54:03: 6f:4d:f0:79:eb:9d:af:f4:e1:8d:62:6f:50:87:01: 00:c5:fd:e2:96:f9:1f:b4:f3:6a:f0:41:4e:3d:a1: ea:a1:fe:9f:79:4b:6d:3c:8b:e3:8d:26:ef:6a:be: b2:12:c2:4c:23:ea:59:8a:0a:44:84:64:4e:ef:66: 24:71:23:ab:a8:ac:37:2d:13:19:53:10:c8:4f:d0: 27:6d:b2:81:0c:fb:1f:9f:3e:f2:d6:96:c9:70:8e: 4e:fd:73:c9:44:e2:00:89:90:03:4b:8e:13:5d:d9: 99:e3:06:cf:34:34:77:71:7e:07:cd:46:d6:77:e3: 74:cb:f7:d4:35:ce:87:d7:a6:bd:26:ad:54:8b:a9: 0f:cf:40:44:4a:82:98:06:35:d1:40:a9:95:ea:65: 49:87:29:30:a3:fa:f8:16:34:51:5b:0d:04:9a:cb: b0:67:58:57:90:91:a0:4a:93:66:39:37:a7:63:43: 5a:52:de:0b:69:f1:3e:3c:45:c6:70:69:26:7c:76: 77:cf:1a:87:17:0c:3b:c5:43:3c:4b:47:d3:42:81: 45:98:8a:b4:3d:40:f6:80:1f:b7:b1:2e:5c:21:e3: 30:f1:f2:48:21:34:a7:c4:23:3c:4c:9f:1f:47:23: ba:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3C:08:3A:D4:DF:4B:E6:51:BA:4D:96:37:56:FD:7B:01:BA:C9:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd564c41-e023-395e-bdca-c86f40f460d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.131.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:94:a0:9e:d5:10:6b:7d:d5:43:03:d7:43:64:50:9c:e1:2f: 13:8f:4e:89:65:31:cf:f4:47:fa:c2:84:9d:4e:cd:09:a7:72: 0f:3b:d8:c3:e2:75:19:71:50:b6:d2:38:b1:2f:35:38:0c:c3: 00:2a:04:52:bd:d0:7a:bc:4e:f0:e6:98:f9:a0:c8:60:8f:7f: a7:ae:43:39:97:0f:cc:a4:a7:26:b1:c5:f9:b0:b4:13:4e:3d: bc:ad:2c:cf:19:d3:9f:fe:a9:20:c2:d3:ba:89:a9:d4:b3:9e: c7:77:02:25:2b:3f:02:36:1e:2a:18:41:66:7f:6a:85:31:84: ad:76:9b:ed:c2:2f:ca:d0:41:64:aa:2e:60:b0:21:e2:28:7f: 45:a3:c0:bb:e5:58:62:93:ea:90:f4:36:83:44:df:bb:47:80: 8a:1f:0d:aa:8d:56:7e:6b:82:52:96:01:0b:7f:b3:63:5c:52: 68:f0:8b:78:27:bc:cc:9d:5f:30:88:92:11:8a:76:c9:a1:e0: 74:87:c7:99:de:19:9a:c3:76:63:e7:49:a5:4b:ec:15:01:b4: d7:9e:90:4d:7a:0f:bb:ee:67:8a:92:17:72:9c:2d:71:e0:a7: a1:74:a9:94:f6:a1:d4:fb:d6:e2:2d:c1:22:32:24:30:30:f0: 92:70:8c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mphttShuD33QcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZDFmZjM2ZTAtOTUzOS00ZGZlLTlkMTUtMTZlYjBkOGE1M2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4uHW6tNwBSAYK9aVANvTfB5652v9OGNYm9Q hwEAxf3ilvkftPNq8EFOPaHqof6feUttPIvjjSbvar6yEsJMI+pZigpEhGRO72Yk cSOrqKw3LRMZUxDIT9AnbbKBDPsfnz7y1pbJcI5O/XPJROIAiZADS44TXdmZ4wbP NDR3cX4HzUbWd+N0y/fUNc6H16a9Jq1Ui6kPz0BESoKYBjXRQKmV6mVJhykwo/r4 FjRRWw0EmsuwZ1hXkJGgSpNmOTenY0NaUt4LafE+PEXGcGkmfHZ3zxqHFww7xUM8 S0fTQoFFmIq0PUD2gB+3sS5cIeMw8fJIITSnxCM8TJ8fRyO6IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE8CDrU30vmUbpNljdW/XsBusk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQ1NjRjNDEtZTAyMy0z OTVlLWJkY2EtYzg2ZjQwZjQ2MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKIOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuUoJ7VEGt91UMD10NkUJzhLxOPTollMc/0R/rChJ1OzQmncg872MPi dRlxULbSOLEvNTgMwwAqBFK90Hq8TvDmmPmgyGCPf6euQzmXD8ykpyaxxfmwtBNO PbytLM8Z05/+qSDC07qJqdSznsd3AiUrPwI2HioYQWZ/aoUxhK12m+3CL8rQQWSq LmCwIeIof0WjwLvlWGKT6pD0NoNE37tHgIofDaqNVn5rglKWAQt/s2NcUmjwi3gn vMydXzCIkhGKdsmh4HSHx5neGZrDdmPnSaVL7BUBtNeekE16D7vuZ4qSF3KcLXHg p6F0qZT2odT71uItwSIyJDAw8JJwjF0= -----END CERTIFICATE-----Generated at Fri Apr 17 12:47:50 2026 by rpki-client