$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/114e4b4f-99d7-36f6-bc12-c13c64e3b203.roa File: 114e4b4f-99d7-36f6-bc12-c13c64e3b203.roa (raw, json) Hash identifier: tNsJHx6hmOZxwsXS5p1lYfIzcR5hDVZeQquNczso/QY= Subject key identifier: 36:94:E6:50:CF:45:10:54:C0:50:DB:49:4F:13:1F:25:84:95:BC:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BCB94F24736730F0835DC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/114e4b4f-99d7-36f6-bc12-c13c64e3b203.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 71.31.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b9:4f:24:73:67:30:f0:83:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=e966cd08-45cd-4154-bef0-eb8d92882a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3a:de:7d:b0:61:b5:a6:f3:ea:95:45:9c:5a: 3b:52:8e:80:a4:2d:30:c0:2f:5b:f8:d9:56:5b:fc: f6:99:8b:39:ce:94:01:97:e6:81:ae:05:6c:89:f8: b9:36:b7:2d:ef:31:90:47:a2:ea:14:ae:61:b8:21: c6:d0:0b:01:27:52:69:ff:8a:65:aa:b3:f3:81:4a: 67:2f:cd:9d:95:2a:fd:f2:45:5a:7b:6a:85:11:56: 5b:76:fb:c2:1e:a9:97:2e:7c:24:68:2a:69:b7:59: e4:29:34:e4:5e:6c:17:b9:83:73:a1:89:2a:9c:36: 40:03:5f:73:8a:a3:8d:e1:28:00:e9:8a:e1:17:41: 0b:fa:e3:b9:78:a0:eb:dc:57:a2:dc:d1:e6:de:f0: bc:31:1d:27:11:c9:42:87:21:68:7d:be:99:b0:b3: 1b:d0:1b:b3:c6:8a:03:22:5d:d8:5e:f9:1d:ac:29: e3:3b:5c:49:00:87:55:96:68:7f:6a:d1:98:7b:ea: 0a:3f:8a:e6:a1:47:70:1a:bf:e9:ca:d0:be:65:3a: 58:51:86:10:df:e6:33:61:ef:0c:6f:e4:ea:80:b2: 68:25:10:77:e5:7e:72:77:82:c9:ea:27:c5:67:02: 0e:5d:a1:c5:94:24:00:90:83:84:10:35:a5:01:f1: fc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:94:E6:50:CF:45:10:54:C0:50:DB:49:4F:13:1F:25:84:95:BC:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/114e4b4f-99d7-36f6-bc12-c13c64e3b203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:7e:1b:6a:d0:87:07:86:e2:04:bb:a1:3f:f4:f2:88:ec:d2: f2:b4:70:f6:45:3d:43:cb:18:62:a8:c6:5c:e3:66:f8:8d:81: ab:a6:a3:e6:20:b5:f9:47:3e:9e:38:33:cb:34:e3:07:40:9c: 76:7c:2b:a4:19:74:9a:40:86:f9:b1:8c:45:ad:51:a3:c3:bf: e2:7c:50:87:cd:3a:1f:87:f2:4b:8d:d8:e7:5c:36:df:2c:69: e9:ff:eb:52:a5:8d:74:c4:b2:9e:45:11:d2:83:14:12:9b:5d: b7:06:e1:dc:1a:97:aa:a7:e8:b4:aa:ba:01:a4:c6:79:d8:d9: af:6f:8a:be:b1:ab:e7:f0:ac:08:7b:fe:fd:7e:2b:c1:38:03: f3:be:28:9c:00:30:8e:c6:eb:4b:39:17:08:90:85:37:c2:5b: e2:10:27:0d:2e:63:00:da:91:f6:89:9d:57:e6:52:4b:eb:9b: 78:89:76:ce:b2:a4:33:d1:ef:64:50:be:c9:44:af:71:d3:64: 86:82:3c:9a:32:fe:6e:63:6f:06:32:1d:87:3f:c5:b3:9b:7b: 28:fc:0d:2d:2a:83:ff:89:01:29:93:1b:d5:f3:72:d9:10:56: 35:2a:da:72:8f:54:d3:fe:61:16:30:80:f5:cb:fa:cf:63:2f: 30:d6:df:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLlPJHNnMPCDXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZTk2NmNkMDgtNDVjZC00MTU0LWJlZjAtZWI4ZDkyODgyYTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjrefbBhtabz6pVFnFo7Uo6ApC0wwC9b+NlW W/z2mYs5zpQBl+aBrgVsifi5Nrct7zGQR6LqFK5huCHG0AsBJ1Jp/4plqrPzgUpn L82dlSr98kVae2qFEVZbdvvCHqmXLnwkaCppt1nkKTTkXmwXuYNzoYkqnDZAA19z iqON4SgA6YrhF0EL+uO5eKDr3Fei3NHm3vC8MR0nEclChyFofb6ZsLMb0BuzxooD Il3YXvkdrCnjO1xJAIdVlmh/atGYe+oKP4rmoUdwGr/pytC+ZTpYUYYQ3+YzYe8M b+TqgLJoJRB35X5yd4LJ6ifFZwIOXaHFlCQAkIOEEDWlAfH8cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaU5lDPRRBUwFDbSU8THyWElbwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTE0ZTRiNGYtOTlkNy0z NmY2LWJjMTItYzEzYzY0ZTNiMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx9MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJB+G2rQhweG4gS7oT/08ojs0vK0cPZFPUPLGGKoxlzjZviNgaumo+Yg tflHPp44M8s04wdAnHZ8K6QZdJpAhvmxjEWtUaPDv+J8UIfNOh+H8kuN2OdcNt8s aen/61KljXTEsp5FEdKDFBKbXbcG4dwal6qn6LSqugGkxnnY2a9vir6xq+fwrAh7 /v1+K8E4A/O+KJwAMI7G60s5FwiQhTfCW+IQJw0uYwDakfaJnVfmUkvrm3iJds6y pDPR72RQvslEr3HTZIaCPJoy/m5jbwYyHYc/xbObeyj8DS0qg/+JASmTG9XzctkQ VjUq2nKPVNP+YRYwgPXL+s9jLzDW31g= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:29 2026 by rpki-client