$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9f849f9-e596-3f52-93a2-e526e4138027.roa File: b9f849f9-e596-3f52-93a2-e526e4138027.roa (raw, json) Hash identifier: gzaekTX56hzRnzKT+Ptdst0VZn8QQAPLMi3zTf51EpU= Subject key identifier: 4A:15:91:3E:C4:5F:2D:1E:D1:BE:24:7A:04:1D:0E:D4:79:D3:9D:AB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D63EB76262F9059F636D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9f849f9-e596-3f52-93a2-e526e4138027.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 71.31.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:63:eb:76:26:2f:90:59:f6:36:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=a970b808-8eaf-4656-9220-866bd8fb5cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a1:c7:b1:fe:b1:5f:48:d4:db:e1:1c:d2:3b: 5e:03:d5:9c:b7:53:1f:d6:b5:8e:70:86:3b:2e:62: 0a:db:03:6f:c6:75:2a:f1:68:f4:ac:bb:19:cf:6e: a2:9b:29:87:0d:ea:2f:68:14:98:7d:ce:aa:70:ff: 11:73:4d:73:bf:ba:0b:83:ff:ef:89:97:fd:2a:ad: dd:1f:a3:71:d9:c5:a1:42:05:9d:c4:25:fd:c8:76: c0:86:77:b1:fe:ef:ba:e2:a4:0d:a2:a3:c7:9c:48: 4b:36:36:c2:af:6c:ab:11:0a:1a:d9:61:0a:ff:6d: d1:9a:68:b0:e5:01:21:56:db:be:0b:9c:8a:e2:5d: 0b:11:39:43:e2:b5:ba:71:cf:af:d8:9d:cb:91:c9: c9:5e:b9:ad:32:7a:e9:39:23:49:fa:09:1f:d9:e2: 18:f0:e5:10:52:df:d4:bf:8c:e0:3b:4b:ee:d2:8f: 66:32:e0:21:21:f4:1b:76:77:5a:44:fd:18:9d:6b: 95:ba:e2:f2:ef:cd:15:a7:5d:55:d2:c8:af:ec:0a: 17:73:62:38:b4:13:9a:46:cf:98:13:53:62:2e:8b: 53:f4:47:3a:28:70:a4:02:44:6f:b4:89:41:c1:a1: 06:ca:27:f0:11:81:af:18:8b:4c:57:37:3b:b5:ff: db:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:15:91:3E:C4:5F:2D:1E:D1:BE:24:7A:04:1D:0E:D4:79:D3:9D:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9f849f9-e596-3f52-93a2-e526e4138027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:11:52:a4:19:f9:2d:08:e9:2d:61:c2:60:8f:0b:1d:63:82: 85:d6:eb:1a:85:02:fe:3c:b3:ef:d9:07:65:ab:e7:bb:3d:76: 1e:88:a5:ab:1e:6b:9a:b0:90:39:86:8b:3b:0b:53:65:b0:98: be:ea:3f:f2:c7:eb:75:a2:69:6f:fc:31:85:f4:9d:5f:5d:1d: b5:b5:00:d6:b4:2b:f5:30:70:b5:d0:cc:66:73:e7:01:35:ac: b9:18:e1:a5:5b:82:3f:03:ec:88:b5:7c:49:fc:08:e1:41:39: 55:a9:a9:93:7d:71:e0:eb:91:57:95:19:29:25:47:22:14:63: 1e:ff:36:ea:79:12:74:4f:43:c6:c7:bc:60:a1:20:a0:25:e0: c8:f7:3e:2f:49:0c:d5:2a:dd:b5:46:ae:c8:6b:b9:c6:c3:14: a0:02:e8:31:62:77:33:75:bf:2f:ad:59:76:e4:59:ed:91:97: 9c:15:e9:89:30:7b:6f:2b:a7:30:d5:9c:26:5c:6b:4a:25:8b: db:71:ba:70:c5:95:a8:e3:f5:4a:da:10:9b:71:f9:f3:10:39: fb:7d:15:da:2d:2e:1f:aa:3f:41:3b:0a:58:de:ad:22:18:52: e0:d2:f5:06:ff:29:4f:46:13:47:fb:26:2d:96:3c:74:1f:92: 8b:bd:9d:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWPrdiYvkFn2NtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YTk3MGI4MDgtOGVhZi00NjU2LTkyMjAtODY2YmQ4ZmI1Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaHHsf6xX0jU2+Ec0jteA9Wct1Mf1rWOcIY7 LmIK2wNvxnUq8Wj0rLsZz26imymHDeovaBSYfc6qcP8Rc01zv7oLg//viZf9Kq3d H6Nx2cWhQgWdxCX9yHbAhnex/u+64qQNoqPHnEhLNjbCr2yrEQoa2WEK/23Rmmiw 5QEhVtu+C5yK4l0LETlD4rW6cc+v2J3LkcnJXrmtMnrpOSNJ+gkf2eIY8OUQUt/U v4zgO0vu0o9mMuAhIfQbdndaRP0YnWuVuuLy780Vp11V0siv7AoXc2I4tBOaRs+Y E1NiLotT9Ec6KHCkAkRvtIlBwaEGyifwEYGvGItMVzc7tf/bNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoVkT7EXy0e0b4kegQdDtR5052rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjlmODQ5ZjktZTU5Ni0z ZjUyLTkzYTItZTUyNmU0MTM4MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx+fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYRUqQZ+S0I6S1hwmCPCx1jgoXW6xqFAv48s+/ZB2Wr57s9dh6Ipase a5qwkDmGizsLU2WwmL7qP/LH63WiaW/8MYX0nV9dHbW1ANa0K/UwcLXQzGZz5wE1 rLkY4aVbgj8D7Ii1fEn8COFBOVWpqZN9ceDrkVeVGSklRyIUYx7/Nup5EnRPQ8bH vGChIKAl4Mj3Pi9JDNUq3bVGrshrucbDFKAC6DFidzN1vy+tWXbkWe2Rl5wV6Ykw e28rpzDVnCZca0oli9txunDFlajj9UraEJtx+fMQOft9FdotLh+qP0E7CljerSIY UuDS9Qb/KU9GE0f7Ji2WPHQfkou9nRU= -----END CERTIFICATE-----Generated at Tue Oct 13 08:12:03 2026 by rpki-client