$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68ec2170-5bd7-351d-86e9-f6f95a135eb3.roa File: 68ec2170-5bd7-351d-86e9-f6f95a135eb3.roa (raw, json) Hash identifier: C94d7n9oS+EyRdQeU60ssP7gb2jXAMCktu2VTFXxqeo= Subject key identifier: B6:08:04:B2:AB:C6:7A:21:A7:DA:92:47:06:D0:10:59:DA:C0:2C:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D674FF3EC95C90428F000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68ec2170-5bd7-351d-86e9-f6f95a135eb3.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 71.31.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:67:4f:f3:ec:95:c9:04:28:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=da5c4e60-5fcc-45dd-aab7-20c5fc382973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:83:6e:50:b6:39:43:92:f0:d1:d2:e9:75:3f: 1e:4b:c7:d0:81:85:3f:c6:d9:61:23:4b:af:85:41: 92:2d:57:47:50:88:f3:57:27:39:49:f4:07:c8:f5: 41:8f:15:48:e7:e7:a2:13:2d:4d:57:85:9f:da:aa: c7:ae:50:bb:22:d6:a8:a0:8e:ed:c6:64:47:36:2b: 05:31:99:4f:34:8a:3a:89:99:5a:a1:9f:c4:02:30: c5:75:16:39:05:5b:3a:b7:a3:bc:9b:b9:8f:fa:9c: 63:3a:2e:be:47:98:6f:34:f6:d6:ec:b4:3d:b7:55: ff:92:a2:99:70:30:db:22:32:7c:aa:23:ae:31:6d: 7c:2b:16:15:b7:29:11:c1:bc:6d:f7:75:f4:3b:a5: 6a:e2:5e:32:3d:dc:99:18:20:6e:e9:3e:c9:4d:3b: 19:55:ae:55:4b:03:b7:b7:b6:b1:6b:d8:4e:3d:99: af:ea:b7:04:5e:2a:1e:0b:29:b6:c0:2d:85:58:12: ff:de:bc:eb:5d:ab:a2:e1:c2:55:2c:2a:01:91:d1: 1e:54:1b:61:e3:5e:b9:cc:80:53:cf:eb:be:0b:85: 26:9c:82:0b:ce:39:e3:d5:78:9a:6d:77:61:dc:c6: e6:6b:02:9d:dd:f0:0b:e7:df:f2:94:5c:33:fe:ef: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:08:04:B2:AB:C6:7A:21:A7:DA:92:47:06:D0:10:59:DA:C0:2C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68ec2170-5bd7-351d-86e9-f6f95a135eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:27:e1:d5:ff:fe:3f:05:da:ba:cd:d0:49:16:9d:f2:04:05: 55:76:03:13:fe:0a:92:22:71:cb:f0:8c:44:fd:46:5e:f7:bb: 37:ed:43:da:29:67:c4:7c:17:39:ed:14:00:31:18:31:c7:f5: c9:f5:73:b1:8c:fc:2c:0d:ca:d5:97:4f:7f:be:47:f1:db:6b: 29:8f:35:2b:3f:08:ac:39:1e:2f:18:7a:d6:30:d6:0c:b9:8e: 4e:4a:49:4b:a1:31:68:0a:1f:73:06:50:cb:8b:50:97:83:10: 18:cd:0f:65:17:fc:f8:2a:44:f3:0e:1f:36:5d:ec:6f:f9:95: ff:a5:12:a1:50:3f:1b:b6:af:20:c3:cb:7d:29:df:f4:35:9f: de:a5:11:af:bb:88:e3:d3:67:ff:66:42:2d:76:3f:5c:61:fd: ac:c2:b8:c9:e0:98:19:79:ad:2e:33:6c:14:58:f6:11:8f:5f: 9f:1d:1e:1a:b0:a7:65:a7:6d:45:31:40:48:e1:93:ea:f5:d5: 10:34:18:d7:d5:6e:02:66:23:a4:d1:3d:19:53:e3:22:ba:77: 7c:10:fc:3c:8e:7a:59:40:46:07:f5:79:d7:ab:9e:d4:5c:43: 61:b1:f6:35:f4:f7:1b:f5:1a:50:e0:66:59:7e:44:30:f4:2b: 86:b2:a1:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWdP8+yVyQQo8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZGE1YzRlNjAtNWZjYy00NWRkLWFhYjctMjBjNWZjMzgyOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloNuULY5Q5Lw0dLpdT8eS8fQgYU/xtlhI0uv hUGSLVdHUIjzVyc5SfQHyPVBjxVI5+eiEy1NV4Wf2qrHrlC7ItaooI7txmRHNisF MZlPNIo6iZlaoZ/EAjDFdRY5BVs6t6O8m7mP+pxjOi6+R5hvNPbW7LQ9t1X/kqKZ cDDbIjJ8qiOuMW18KxYVtykRwbxt93X0O6Vq4l4yPdyZGCBu6T7JTTsZVa5VSwO3 t7axa9hOPZmv6rcEXioeCym2wC2FWBL/3rzrXaui4cJVLCoBkdEeVBth4165zIBT z+u+C4UmnIILzjnj1XiabXdh3MbmawKd3fAL59/ylFwz/u8o4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYIBLKrxnohp9qSRwbQEFnawCxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjhlYzIxNzAtNWJkNy0z NTFkLTg2ZTktZjZmOTVhMTM1ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcn4dX//j8F2rrN0EkWnfIEBVV2AxP+CpIiccvwjET9Rl73uzftQ9op Z8R8FzntFAAxGDHH9cn1c7GM/CwNytWXT3++R/HbaymPNSs/CKw5Hi8YetYw1gy5 jk5KSUuhMWgKH3MGUMuLUJeDEBjND2UX/PgqRPMOHzZd7G/5lf+lEqFQPxu2ryDD y30p3/Q1n96lEa+7iOPTZ/9mQi12P1xh/azCuMngmBl5rS4zbBRY9hGPX58dHhqw p2WnbUUxQEjhk+r11RA0GNfVbgJmI6TRPRlT4yK6d3wQ/DyOellARgf1ederntRc Q2Gx9jX09xv1GlDgZll+RDD0K4ayoVg= -----END CERTIFICATE-----Generated at Tue Oct 13 17:43:20 2026 by rpki-client