$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f910939d-05e1-3207-b3ea-2c46106a7d0d.roa File: f910939d-05e1-3207-b3ea-2c46106a7d0d.roa (raw, json) Hash identifier: uTKUaZPq1OLdi+LX8rjszMkvfinhYkms1VBlQewhi+4= Subject key identifier: D2:7B:42:78:2E:28:60:CF:07:48:9D:1B:FE:56:9A:97:D0:64:99:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A90A09C4892388A5FEE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f910939d-05e1-3207-b3ea-2c46106a7d0d.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 40.137.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:90:a0:9c:48:92:38:8a:5f:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=0f606123-d058-4582-adff-7ff06bb3448d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2a:e2:04:c9:64:2c:bb:1e:6a:71:7f:3e:fa: 6d:c7:3a:59:a7:1a:ed:8f:d5:2e:02:6c:c2:8d:6e: c0:92:11:2b:d2:23:97:63:2d:22:8c:37:25:98:74: b5:ac:fc:31:4a:c0:17:49:8b:8d:4e:54:7e:83:11: e2:43:8e:fd:c6:34:7b:03:d9:fa:cd:7c:b0:00:ca: d4:c3:cd:ef:fa:02:7a:a9:4a:5c:a7:08:14:88:16: 10:2f:19:5e:85:d0:b1:87:8e:cb:f7:9c:d2:fa:d0: 86:07:a4:91:06:fe:79:c4:7d:bb:b1:ce:0d:b5:2a: c6:7c:e9:07:d4:98:23:06:40:bd:09:cf:bd:7b:f8: c7:32:bd:33:11:72:b6:e3:42:b6:40:a7:65:43:6f: b2:59:e8:7e:a2:db:1d:26:dd:4e:4a:b2:3e:51:5e: dd:6d:5b:b9:26:74:85:c4:83:60:4a:ac:ba:7c:c5: de:39:75:a8:dd:fa:d5:2a:7a:2b:54:90:ce:48:bb: 64:76:a8:26:f0:e2:b4:d0:ea:54:23:42:5f:1c:ba: b5:9f:9a:31:5a:83:02:df:46:51:90:a5:19:e0:0e: 0d:e5:47:89:38:7c:cb:da:4a:6d:8d:bf:28:83:ae: d1:3b:78:ef:a3:f7:aa:0a:5a:94:bc:ad:06:73:01: 30:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7B:42:78:2E:28:60:CF:07:48:9D:1B:FE:56:9A:97:D0:64:99:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f910939d-05e1-3207-b3ea-2c46106a7d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.137.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:17:35:6a:12:5d:d3:98:1c:f3:fa:5f:e5:45:c6:84:1f:8b: d6:e1:43:aa:ee:aa:11:ad:fd:37:56:aa:4a:66:61:a8:1c:42: 1b:d5:1f:3c:cc:7e:bb:7b:85:a3:83:ff:95:20:23:fc:d0:c8: 16:03:54:ee:75:af:f6:a1:ae:a8:9c:a9:b4:2c:d4:94:d9:05: 7c:2b:c6:cb:e6:9b:95:5b:ef:fd:39:8a:28:6d:9b:9f:d5:49: bc:39:4a:ec:2a:98:1c:cc:68:60:bf:1d:27:42:df:68:a8:4c: 20:2a:d6:81:0c:a3:2b:cd:85:81:cf:f6:0e:0f:ed:6f:7e:3a: d4:02:26:48:90:e2:7a:e5:c6:59:ac:8a:a9:8e:2c:fc:49:66: 39:de:75:e9:a4:01:d0:1c:65:eb:fb:db:88:7d:ff:92:84:f4: cb:ae:ae:9b:68:5f:6a:29:3a:37:fd:fa:06:40:f2:36:a9:b8: 60:e6:28:8a:c0:7c:97:fa:f0:2e:a7:3b:8e:c1:41:3a:15:5d: 1a:43:cf:4e:79:24:2c:ea:ad:af:f9:fe:e9:82:94:21:f8:69: 96:ac:9c:82:83:59:9b:e2:e1:f0:29:81:95:25:94:5d:2b:ad: e4:31:d9:15:6b:08:db:bf:9f:2b:9b:76:a1:e2:7a:23:4b:16: 98:b2:10:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpCgnEiSOIpf7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MGY2MDYxMjMtZDA1OC00NTgyLWFkZmYtN2ZmMDZiYjM0NDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iriBMlkLLseanF/PvptxzpZpxrtj9UuAmzC jW7AkhEr0iOXYy0ijDclmHS1rPwxSsAXSYuNTlR+gxHiQ479xjR7A9n6zXywAMrU w83v+gJ6qUpcpwgUiBYQLxlehdCxh47L95zS+tCGB6SRBv55xH27sc4NtSrGfOkH 1JgjBkC9Cc+9e/jHMr0zEXK240K2QKdlQ2+yWeh+otsdJt1OSrI+UV7dbVu5JnSF xINgSqy6fMXeOXWo3frVKnorVJDOSLtkdqgm8OK00OpUI0JfHLq1n5oxWoMC30ZR kKUZ4A4N5UeJOHzL2kptjb8og67RO3jvo/eqClqUvK0GcwEwvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJ7QnguKGDPB0idG/5WmpfQZJl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjkxMDkzOWQtMDVlMS0z MjA3LWIzZWEtMmM0NjEwNmE3ZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIkBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMXNWoSXdOYHPP6X+VFxoQfi9bhQ6ruqhGt/TdWqkpmYagcQhvVHzzM frt7haOD/5UgI/zQyBYDVO51r/ahrqicqbQs1JTZBXwrxsvmm5Vb7/05iihtm5/V Sbw5SuwqmBzMaGC/HSdC32ioTCAq1oEMoyvNhYHP9g4P7W9+OtQCJkiQ4nrlxlms iqmOLPxJZjnedemkAdAcZev724h9/5KE9MuurptoX2opOjf9+gZA8japuGDmKIrA fJf68C6nO47BQToVXRpDz055JCzqra/5/umClCH4aZasnIKDWZvi4fApgZUllF0r reQx2RVrCNu/nyubdqHieiNLFpiyEKk= -----END CERTIFICATE-----Generated at Fri Apr 17 11:24:28 2026 by rpki-client