$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9dceb2f-ad54-37d4-84bd-1ae263451441.roa File: a9dceb2f-ad54-37d4-84bd-1ae263451441.roa (raw, json) Hash identifier: mrDb2lnErvqWsamiwcBkKWIZfU/AOxy0osr6WwkEZiY= Subject key identifier: F8:FC:4A:BF:13:31:FE:A6:DE:A9:54:87:3F:B8:4C:4A:6A:44:D5:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FA79A2582F0C3A430080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9dceb2f-ad54-37d4-84bd-1ae263451441.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 71.31.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:fa:79:a2:58:2f:0c:3a:43:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=54fd2747-633c-4303-9b3d-bed9f2e87f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4a:cf:61:26:1d:c8:1d:99:da:d8:dd:ea:f1: c0:d0:1b:87:1f:b8:b6:61:62:5d:a3:b8:86:3d:8e: d6:f6:aa:f4:28:c8:fd:42:21:7f:62:bb:28:91:39: 40:d0:eb:92:d0:fe:0d:98:e6:eb:17:d7:45:82:36: d4:1f:be:0a:15:b5:df:0d:41:3d:5d:42:be:a0:26: b8:f2:88:57:8f:f5:f5:6c:61:22:18:bc:67:fa:e3: 8f:2c:3b:23:6e:6a:d0:6e:b4:5b:4f:ca:11:9c:0d: 93:c3:8b:5e:ef:73:59:f0:f8:1e:b9:d8:a3:f0:4f: c4:69:59:66:66:8a:2d:7d:04:83:e0:bf:1b:2e:76: c9:69:e9:2f:63:6d:45:c2:34:4c:9a:bf:bf:a9:48: 96:d7:f2:f5:2a:1e:4d:b2:cd:93:62:df:d9:99:3a: 5c:59:cb:be:51:c0:c1:09:f7:83:b8:64:03:91:4c: 1d:d2:e0:ae:41:f5:65:45:ed:a1:47:8e:ae:5a:e0: 65:d0:9a:24:59:d6:65:a0:e1:60:0e:47:76:e6:50: fb:d1:63:31:fd:71:bc:e9:38:bb:20:bc:e8:40:38: 6f:81:d1:17:9b:9d:51:e6:35:fa:22:e8:bb:15:df: ae:3d:8e:a4:5c:d4:66:e4:ee:83:dc:c4:d0:b2:8a: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FC:4A:BF:13:31:FE:A6:DE:A9:54:87:3F:B8:4C:4A:6A:44:D5:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9dceb2f-ad54-37d4-84bd-1ae263451441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a8:81:51:bb:aa:90:79:06:9b:fb:1c:94:64:51:49:31:86: b8:f7:d0:75:33:5b:17:f2:e7:dc:9c:f3:c3:95:45:f7:55:93: 84:b2:ff:2a:80:29:d9:10:ad:f8:99:14:15:08:f0:1d:3a:5f: 6e:0e:61:d0:06:85:6a:d4:0c:33:56:7e:27:fe:71:04:9f:ae: bc:9c:0b:6f:69:6b:17:e8:62:2a:04:af:4f:91:ee:13:cf:92: 83:2e:32:6d:d9:84:3b:0d:a1:33:31:14:86:c6:aa:7d:66:ec: 24:35:92:54:41:2c:a5:87:d4:cc:3f:67:7f:5a:0b:cb:cf:cf: c1:29:86:d7:46:09:9b:54:1f:20:3f:38:e9:a8:65:f7:82:91: 7d:cb:ee:07:52:52:97:5d:6b:55:e8:a4:4e:b9:fd:5b:51:18: e9:16:d5:a5:6a:e9:84:7d:42:87:da:5a:0f:af:47:45:94:20: de:7a:bd:47:ef:d3:fa:0e:45:56:bb:97:9c:c2:65:e4:d2:5c: e5:cf:cb:1d:45:0e:23:30:8b:48:33:d2:ed:bf:ee:1f:fd:54: 4e:98:94:25:93:50:ff:43:94:47:77:1f:c9:80:a9:c4:96:c5: 33:0f:e4:db:ef:ad:53:6a:66:63:3b:9e:03:ae:b0:86:69:18: 9d:11:4b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vp5olgvDDpDAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk NTRmZDI3NDctNjMzYy00MzAzLTliM2QtYmVkOWYyZTg3ZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUrPYSYdyB2Z2tjd6vHA0BuHH7i2YWJdo7iG PY7W9qr0KMj9QiF/YrsokTlA0OuS0P4NmObrF9dFgjbUH74KFbXfDUE9XUK+oCa4 8ohXj/X1bGEiGLxn+uOPLDsjbmrQbrRbT8oRnA2Tw4te73NZ8Pgeudij8E/EaVlm ZootfQSD4L8bLnbJaekvY21FwjRMmr+/qUiW1/L1Kh5Nss2TYt/ZmTpcWcu+UcDB CfeDuGQDkUwd0uCuQfVlRe2hR46uWuBl0JokWdZloOFgDkd25lD70WMx/XG86Ti7 ILzoQDhvgdEXm51R5jX6Iui7Fd+uPY6kXNRm5O6D3MTQsorHSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj8Sr8TMf6m3qlUhz+4TEpqRNWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTlkY2ViMmYtYWQ1NC0z N2Q0LTg0YmQtMWFlMjYzNDUxNDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKogVG7qpB5Bpv7HJRkUUkxhrj30HUzWxfy59yc88OVRfdVk4Sy/yqA KdkQrfiZFBUI8B06X24OYdAGhWrUDDNWfif+cQSfrrycC29paxfoYioEr0+R7hPP koMuMm3ZhDsNoTMxFIbGqn1m7CQ1klRBLKWH1Mw/Z39aC8vPz8EphtdGCZtUHyA/ OOmoZfeCkX3L7gdSUpdda1XopE65/VtRGOkW1aVq6YR9QofaWg+vR0WUIN56vUfv 0/oORVa7l5zCZeTSXOXPyx1FDiMwi0gz0u2/7h/9VE6YlCWTUP9DlEd3H8mAqcSW xTMP5NvvrVNqZmM7ngOusIZpGJ0RS34= -----END CERTIFICATE-----Generated at Thu Aug 27 13:19:02 2026 by rpki-client