$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e7343e29-0043-3f09-af7b-bbcf5c6804aa.roa File: e7343e29-0043-3f09-af7b-bbcf5c6804aa.roa (raw, json) Hash identifier: pjjKTQX/7EMOwtGZifyTD02I8/S/2MnrlA1ikOVYHlI= Subject key identifier: 05:18:51:4F:64:76:56:CB:1A:2C:19:B7:B6:B2:C6:9C:7D:EC:71:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E1E44924AA7061F974BB29800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e7343e29-0043-3f09-af7b-bbcf5c6804aa.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 40.134.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:92:4a:a7:06:1f:97:4b:b2:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=bad00dec-8ef5-4d91-a70b-4cb38b1905fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7f:a0:57:99:51:42:ff:80:24:32:21:5d:ed: dd:14:cf:13:88:5c:4e:fc:ca:88:3c:33:b6:e2:48: b6:43:a1:db:42:08:32:73:9e:3a:7f:53:48:48:a4: 3a:5a:98:58:40:a4:37:b0:2d:0c:54:9d:e0:fa:c1: 29:8c:b4:8f:78:0d:2a:54:d9:47:41:2f:61:e0:b6: 09:77:a8:a9:09:9a:56:ae:a8:a3:d3:9a:5f:43:2c: f7:32:83:3a:68:18:6f:82:20:6d:a1:5a:f9:da:c3: 3c:71:69:bc:09:cf:97:d5:73:84:7e:76:cf:83:11: f4:45:0b:a6:76:57:3e:a1:eb:8c:2d:98:cd:ee:53: b0:1e:fd:18:ca:6c:71:32:eb:9c:cf:e5:92:0d:2c: fb:7c:23:f5:c4:36:4a:0c:20:e6:25:76:9b:91:3d: 41:b4:91:e4:88:e4:fb:11:0b:3a:49:f6:09:52:ef: 8e:49:32:69:53:20:e6:b8:27:ac:d4:0a:29:61:2f: 54:cd:a8:2e:82:64:10:7f:09:0e:ff:fb:bd:8c:00: c6:c2:39:66:bc:34:23:72:3c:b9:2d:d9:81:21:ca: d3:fd:52:9e:1b:02:3c:6a:8d:56:4e:da:a4:b3:1f: f8:78:ad:b0:40:a6:7a:df:7e:b2:ae:09:21:a7:01: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:18:51:4F:64:76:56:CB:1A:2C:19:B7:B6:B2:C6:9C:7D:EC:71:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e7343e29-0043-3f09-af7b-bbcf5c6804aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.134.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5d:7d:ed:2d:4b:64:62:24:de:f4:65:70:22:51:12:c5:6c: 75:0d:e4:e2:00:c6:77:d1:a9:29:91:f5:8f:35:67:ce:7f:f1: 79:fa:6c:1f:ce:2e:aa:ce:d2:2c:6b:1d:26:90:b1:9d:dc:ca: e9:9e:8c:1f:15:13:39:ed:0b:8d:72:5d:c7:76:1a:75:18:d4: 1f:a1:d1:e0:1f:b8:ba:16:a5:28:cc:a6:20:c2:d4:1d:70:a3: 1d:c8:91:5f:40:94:af:18:b1:68:c9:9b:da:96:e2:75:91:81: 0b:89:d6:ec:4c:88:61:47:c1:2a:58:ed:8f:3f:04:9d:c3:ab: 85:fc:20:fe:29:fe:c0:5c:16:f8:c7:28:d3:da:61:32:60:5e: 29:a5:6d:a1:f9:89:5c:08:2f:c5:a5:ef:9d:e5:77:28:0c:01: 08:77:84:14:e8:71:df:05:29:85:1d:c8:cd:19:04:86:c0:3d: 72:c4:7a:f4:55:3b:2a:3e:13:fc:11:eb:d7:de:78:9b:d6:53: 2a:e1:5f:90:68:25:ad:48:74:13:f1:f7:9e:53:c0:43:86:73: 0f:77:81:40:a3:df:39:7b:42:8d:71:14:b0:9e:09:10:27:b0: 5c:95:2d:04:3b:84:9b:a6:bd:e2:f2:5e:fe:5e:00:f4:6f:a8: b0:f0:14:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJJKpwYfl0uymAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk YmFkMDBkZWMtOGVmNS00ZDkxLWE3MGItNGNiMzhiMTkwNWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH+gV5lRQv+AJDIhXe3dFM8TiFxO/MqIPDO2 4ki2Q6HbQggyc546f1NISKQ6WphYQKQ3sC0MVJ3g+sEpjLSPeA0qVNlHQS9h4LYJ d6ipCZpWrqij05pfQyz3MoM6aBhvgiBtoVr52sM8cWm8Cc+X1XOEfnbPgxH0RQum dlc+oeuMLZjN7lOwHv0YymxxMuucz+WSDSz7fCP1xDZKDCDmJXabkT1BtJHkiOT7 EQs6SfYJUu+OSTJpUyDmuCes1AopYS9UzagugmQQfwkO//u9jADGwjlmvDQjcjy5 LdmBIcrT/VKeGwI8ao1WTtqksx/4eK2wQKZ6336yrgkhpwErrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUYUU9kdlbLGiwZt7ayxpx97HGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTczNDNlMjktMDA0My0z ZjA5LWFmN2ItYmJjZjVjNjgwNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIaRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFldfe0tS2RiJN70ZXAiURLFbHUN5OIAxnfRqSmR9Y81Z85/8Xn6bB/O LqrO0ixrHSaQsZ3cyumejB8VEzntC41yXcd2GnUY1B+h0eAfuLoWpSjMpiDC1B1w ox3IkV9AlK8YsWjJm9qW4nWRgQuJ1uxMiGFHwSpY7Y8/BJ3Dq4X8IP4p/sBcFvjH KNPaYTJgXimlbaH5iVwIL8Wl753ldygMAQh3hBTocd8FKYUdyM0ZBIbAPXLEevRV Oyo+E/wR69feeJvWUyrhX5BoJa1IdBPx955TwEOGcw93gUCj3zl7Qo1xFLCeCRAn sFyVLQQ7hJumveLyXv5eAPRvqLDwFAM= -----END CERTIFICATE-----Generated at Sat Jun 13 06:01:15 2026 by rpki-client