$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b610b8c-d285-30e3-ba63-68767cde3faa.roa File: 2b610b8c-d285-30e3-ba63-68767cde3faa.roa (raw, json) Hash identifier: OJ60sYL377Q2Sa1fC+a2upl2OkEkObs+LGfc6GcMylI= Subject key identifier: A4:F1:76:20:75:A6:13:2F:85:64:11:A7:7C:7E:05:BB:7C:FB:95:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA793228BA7FFE29DAA160700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b610b8c-d285-30e3-ba63-68767cde3faa.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 71.31.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:22:8b:a7:ff:e2:9d:aa:16:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0ba69dfa-1bf9-491b-8b2f-a2139754386c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:a3:ea:6a:ff:c3:ef:e7:8e:37:1a:c0:5e: cf:bc:3c:36:a0:e6:3b:73:40:35:1a:95:5e:73:d3: ca:70:9c:f2:11:23:88:01:d5:80:15:aa:51:27:62: 83:70:f2:b4:30:8a:c8:bf:d5:7c:e1:0f:07:21:e1: 45:43:a4:fb:f0:ca:cf:70:2e:f2:ba:5a:9b:e5:90: ed:f8:33:00:b2:c1:58:e8:a1:fc:50:75:c6:1d:77: ce:05:c8:c9:5a:05:b2:34:0c:1a:55:85:68:0b:f7: 4d:f8:ff:cc:86:a5:0f:4e:9f:f0:e5:d0:46:74:c4: dc:be:8d:e3:4c:6e:d0:43:67:eb:4b:ac:88:ed:8b: fb:e0:3f:a3:7c:7d:ba:99:e9:d6:ac:bd:a1:68:d8: 7d:cc:f6:fd:5e:99:58:93:3f:16:d2:8a:9b:9b:6f: 30:87:38:80:e8:da:77:11:46:d4:b0:48:fb:2f:5f: fb:70:ea:75:49:2b:43:f6:cd:ad:1b:bc:15:40:fe: 86:6f:43:a9:ee:3f:49:88:e3:91:fd:8d:3c:03:ea: 52:2f:b7:bb:f0:55:4a:19:d2:aa:89:01:0b:21:91: 9f:fe:68:b2:8f:bb:f4:ee:42:24:ee:f7:10:22:42: 33:18:61:e9:7f:a7:8e:f4:3a:0b:15:54:a5:88:27: ef:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F1:76:20:75:A6:13:2F:85:64:11:A7:7C:7E:05:BB:7C:FB:95:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b610b8c-d285-30e3-ba63-68767cde3faa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e4:1b:8c:1c:d8:76:1a:dc:62:ae:a9:4e:ba:60:b6:77:ff: bf:31:d4:b3:03:cd:0a:45:a9:94:44:ce:3e:f4:57:d2:6c:11: d3:04:ba:6e:42:76:20:cf:ea:4d:c7:47:e5:f5:19:7f:8f:1d: cb:75:8c:f3:0b:95:75:8b:37:24:26:e7:95:93:1b:c7:1f:85: d4:24:eb:5e:48:47:e6:67:e6:e2:65:de:48:6b:a2:dd:6b:ff: 7f:1c:e5:63:48:d9:0d:9a:91:8d:22:0f:32:07:d4:3d:96:66: ba:3b:19:60:55:2b:54:af:4d:53:83:fa:e5:8d:a4:c3:10:9d: 1b:e2:a9:63:b5:a7:65:1f:10:d3:03:da:a5:21:a8:f3:ec:80: 6a:ed:f9:a4:17:a1:f4:9e:48:27:5b:4c:61:9a:84:c1:1e:7c: cf:54:16:84:1b:de:4a:48:60:63:41:3b:6b:f8:bd:5a:29:34: 07:9b:df:b3:10:a4:55:d4:85:7b:20:fb:3f:c4:d8:8f:9e:80: e9:a4:f1:1e:45:4e:d1:e6:b2:df:95:70:f7:be:c4:a1:67:e4: 18:8f:d8:7c:be:b7:ca:3a:67:33:33:55:ec:83:2b:8b:f0:e3: c8:ff:69:6c:f6:ec:40:7c:3a:b6:4a:32:6b:5a:a2:4e:17:7c: ef:dd:25:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkyKLp//inaoWBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGJhNjlkZmEtMWJmOS00OTFiLThiMmYtYTIxMzk3NTQzODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuKj6mr/w+/njjcawF7PvDw2oOY7c0A1GpVe c9PKcJzyESOIAdWAFapRJ2KDcPK0MIrIv9V84Q8HIeFFQ6T78MrPcC7yulqb5ZDt +DMAssFY6KH8UHXGHXfOBcjJWgWyNAwaVYVoC/dN+P/MhqUPTp/w5dBGdMTcvo3j TG7QQ2frS6yI7Yv74D+jfH26menWrL2haNh9zPb9XplYkz8W0oqbm28whziA6Np3 EUbUsEj7L1/7cOp1SStD9s2tG7wVQP6Gb0Op7j9JiOOR/Y08A+pSL7e78FVKGdKq iQELIZGf/miyj7v07kIk7vcQIkIzGGHpf6eO9DoLFVSliCfvvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTxdiB1phMvhWQRp3x+Bbt8+5VnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmI2MTBiOGMtZDI4NS0z MGUzLWJhNjMtNjg3NjdjZGUzZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx/9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADkG4wc2HYa3GKuqU66YLZ3/78x1LMDzQpFqZREzj70V9JsEdMEum5C diDP6k3HR+X1GX+PHct1jPMLlXWLNyQm55WTG8cfhdQk615IR+Zn5uJl3khrot1r /38c5WNI2Q2akY0iDzIH1D2WZro7GWBVK1SvTVOD+uWNpMMQnRviqWO1p2UfENMD 2qUhqPPsgGrt+aQXofSeSCdbTGGahMEefM9UFoQb3kpIYGNBO2v4vVopNAeb37MQ pFXUhXsg+z/E2I+egOmk8R5FTtHmst+VcPe+xKFn5BiP2Hy+t8o6ZzMzVeyDK4vw 48j/aWz27EB8OrZKMmtaok4XfO/dJaA= -----END CERTIFICATE-----Generated at Thu Aug 27 17:01:55 2026 by rpki-client