$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b588a9d-9551-354d-b984-2a6745fa9392.roa File: 8b588a9d-9551-354d-b984-2a6745fa9392.roa (raw, json) Hash identifier: vGWEshFrAK33DIyL1jktgg29iytT8tx8A/SY1qg8Xu0= Subject key identifier: 3A:72:BF:42:7A:A9:3D:44:A5:62:F3:AD:0F:B4:6F:3C:87:ED:AB:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B7535B1726449C0F0500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b588a9d-9551-354d-b984-2a6745fa9392.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 71.31.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b7:53:5b:17:26:44:9c:0f:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=cba3b366-e7ac-4d16-a8d7-116612986699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:42:a0:65:8b:64:c7:c6:f7:c1:5d:d9:65:7c: df:3f:be:2f:18:89:75:98:90:11:10:d3:42:08:d9: 83:54:19:f4:57:db:00:42:fe:58:34:4d:29:32:77: f1:8d:c4:f9:a4:ad:e7:07:1d:57:f5:29:5f:59:6e: d9:c5:ee:1e:72:51:76:0e:29:58:3e:d5:59:f5:ba: fc:88:35:67:87:fd:08:10:b8:25:2a:b4:fd:3f:88: 4b:b7:df:89:60:c0:4c:70:da:4d:13:25:fe:a6:23: 50:29:f1:c1:f8:e2:2a:84:9b:dc:89:2a:c0:c6:11: c1:a7:0a:33:c7:9f:33:f9:e5:57:ec:8c:45:8d:c9: 2c:bf:4b:bc:7b:04:76:4c:c2:2d:64:ed:db:24:0a: 21:ae:7c:3e:cb:4f:a2:97:a9:b8:3b:d4:d2:62:cc: 9b:b6:87:75:3a:99:ab:7c:36:b8:a7:b1:a7:f9:bf: dd:23:05:57:74:a1:e9:84:14:d6:88:65:2c:a0:57: 1b:28:b6:61:8c:d6:19:b3:49:e4:0a:bc:cb:ce:6c: e6:f7:ba:88:e2:72:d1:a3:f6:0e:82:08:6f:ff:0a: b7:9c:d8:0b:2b:d9:ab:81:ec:f5:fa:55:86:31:55: 49:db:d6:34:9f:7d:20:d4:eb:1d:43:04:a7:b9:c6: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:72:BF:42:7A:A9:3D:44:A5:62:F3:AD:0F:B4:6F:3C:87:ED:AB:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b588a9d-9551-354d-b984-2a6745fa9392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:43:c4:be:6f:3b:73:5d:c9:72:5a:10:f6:e0:10:80:cc:37: e2:57:c9:0c:9c:a4:2e:8d:7b:71:84:e2:a6:02:cf:95:79:d9: 71:db:5b:1f:bf:68:91:11:a7:40:d4:bd:0a:d6:80:cb:60:51: 70:df:6e:a7:9c:7f:c1:22:8d:07:17:ca:91:1a:e9:ee:b3:ac: ba:72:16:e4:91:bb:e6:6a:3c:42:be:af:02:a9:29:1d:9d:ee: 37:8b:51:30:65:d5:29:8c:f2:0d:e4:3c:36:5b:ea:5d:b8:56: 66:b3:d4:e3:06:dd:ff:d3:65:6e:a3:20:50:a9:fb:8d:b0:18: fc:a7:74:6e:2f:61:fe:21:56:4d:95:74:03:4f:a4:f7:64:9a: 62:24:d5:6c:54:6f:31:a0:56:06:62:a9:c7:5a:05:9c:ae:d9: 9a:e1:66:07:1c:c3:31:4f:45:e8:32:72:c0:12:08:44:3b:6e: 5a:96:f9:79:36:4a:ab:38:a7:9e:0f:b0:89:37:fc:6d:6f:04: 36:bc:3c:e5:18:19:f6:14:bc:8c:dd:6f:cb:04:fa:f0:c1:5b: 8b:c1:8f:e0:e9:c2:59:0b:05:f4:11:26:6c:ab:fc:5b:00:7e: 8a:1d:f8:24:72:25:0e:2e:81:da:c4:64:f7:1d:29:16:76:2e: fb:a4:a1:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rdTWxcmRJwPBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk Y2JhM2IzNjYtZTdhYy00ZDE2LWE4ZDctMTE2NjEyOTg2Njk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEKgZYtkx8b3wV3ZZXzfP74vGIl1mJARENNC CNmDVBn0V9sAQv5YNE0pMnfxjcT5pK3nBx1X9SlfWW7Zxe4eclF2DilYPtVZ9br8 iDVnh/0IELglKrT9P4hLt9+JYMBMcNpNEyX+piNQKfHB+OIqhJvciSrAxhHBpwoz x58z+eVX7IxFjcksv0u8ewR2TMItZO3bJAohrnw+y0+il6m4O9TSYsybtod1Opmr fDa4p7Gn+b/dIwVXdKHphBTWiGUsoFcbKLZhjNYZs0nkCrzLzmzm97qI4nLRo/YO gghv/wq3nNgLK9mrgez1+lWGMVVJ29Y0n30g1OsdQwSnucZ/HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpyv0J6qT1EpWLzrQ+0bzyH7ashMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGI1ODhhOWQtOTU1MS0z NTRkLWI5ODQtMmE2NzQ1ZmE5MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBDxL5vO3NdyXJaEPbgEIDMN+JXyQycpC6Ne3GE4qYCz5V52XHbWx+/ aJERp0DUvQrWgMtgUXDfbqecf8EijQcXypEa6e6zrLpyFuSRu+ZqPEK+rwKpKR2d 7jeLUTBl1SmM8g3kPDZb6l24Vmaz1OMG3f/TZW6jIFCp+42wGPyndG4vYf4hVk2V dANPpPdkmmIk1WxUbzGgVgZiqcdaBZyu2ZrhZgccwzFPRegycsASCEQ7blqW+Xk2 Sqs4p54PsIk3/G1vBDa8POUYGfYUvIzdb8sE+vDBW4vBj+DpwlkLBfQRJmyr/FsA food+CRyJQ4ugdrEZPcdKRZ2Lvukofk= -----END CERTIFICATE-----Generated at Wed Oct 14 02:03:22 2026 by rpki-client