$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9f849f9-e596-3f52-93a2-e526e4138027.roa File: b9f849f9-e596-3f52-93a2-e526e4138027.roa (raw, json) Hash identifier: j+xgtlt6fVK7LAn4mD3FcrdpJt3Yw9Vbad6CQU2VmlI= Subject key identifier: C5:00:36:42:D4:D2:02:70:E1:62:3A:FE:79:64:6B:5C:56:78:44:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAE81B3F7B805159F68245100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9f849f9-e596-3f52-93a2-e526e4138027.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 7029 IP address blocks: 71.31.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b3:f7:b8:05:15:9f:68:24:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=9d52afcd-7a57-49f6-ba2a-739490dc3c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:46:21:e1:d5:48:98:4e:62:dc:f1:12:e6: 15:34:b8:f3:e2:a3:f4:42:9b:47:88:95:a2:20:67: d4:e0:13:cf:be:f2:75:83:f1:1e:20:64:f5:e7:1c: 52:2c:e8:90:f7:e6:8c:67:d7:a7:00:bb:d6:7b:99: fd:12:de:9a:d5:38:26:de:32:e5:f8:8b:fb:af:28: 00:3a:6f:fc:bd:9e:9a:e6:37:48:f4:aa:11:60:43: f5:64:71:13:e7:64:a9:e1:8c:f4:1b:40:5d:c4:7c: 3f:cd:c7:68:72:a0:af:10:90:63:e4:22:b1:e1:80: ff:6c:e6:53:db:aa:fc:42:32:60:61:d3:d6:bc:7b: 66:17:8d:40:ba:b5:35:5f:27:42:5c:0d:e7:ef:4c: 3b:29:ca:02:77:ba:45:9f:f5:d7:53:5a:0e:ca:ae: 2b:f7:6e:27:71:57:b7:25:76:8d:08:41:ce:5d:5b: e8:14:b8:7c:75:61:93:4d:aa:f0:54:92:dd:cd:46: 76:99:2d:97:76:94:d0:f8:ec:a7:cf:86:d1:96:21: 1e:0d:22:56:30:61:02:ad:54:05:51:72:b5:52:e4: 04:4a:c5:82:b7:0f:01:55:ee:42:c2:6a:44:3d:e6: 9e:2e:ae:c2:ec:8d:62:a9:ed:10:3f:29:01:b9:f6: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:00:36:42:D4:D2:02:70:E1:62:3A:FE:79:64:6B:5C:56:78:44:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9f849f9-e596-3f52-93a2-e526e4138027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d1:5a:14:cf:61:76:b8:3a:ea:55:ea:24:cb:b8:b1:47:7d: 62:1a:72:25:5d:90:1b:35:67:4b:2a:d9:0f:e6:35:ed:be:9d: 52:80:be:8b:17:af:01:cf:8d:bb:af:24:c4:aa:e9:dd:09:73: f9:f2:14:cb:9a:32:dd:08:2f:09:f8:8c:94:31:59:13:6f:b1: 31:16:78:89:08:d1:9f:9d:81:e3:91:60:19:b2:1a:d1:f6:64: 88:22:44:2c:c7:3c:d5:18:0d:4f:a5:09:0b:db:c5:9b:42:69: 37:40:54:0c:6d:11:8a:71:6e:31:18:69:d6:9c:bc:13:33:e2: ab:f7:df:78:e3:48:d1:4f:cb:1d:f6:34:c2:6a:0b:50:e2:13: 5d:1c:88:7b:5d:2d:50:8b:fa:16:74:b1:66:43:38:8c:1c:b7: 35:e0:2c:b0:7e:4e:b1:74:2a:a5:ef:77:4c:c0:fe:42:db:17: 15:b8:9e:12:9d:c6:25:19:85:39:cb:e6:e9:6d:e9:4d:9a:70: 27:c0:a4:2e:18:e4:d9:80:c8:e7:6a:be:fc:76:08:c5:16:c1: a0:83:02:1d:15:6c:5e:09:cb:f6:18:c0:37:3e:67:47:db:ff: 89:85:1d:4e:ee:16:6f:70:aa:49:35:95:9c:7b:40:7b:bd:9e: 26:44:14:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbP3uAUVn2gkUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk OWQ1MmFmY2QtN2E1Ny00OWY2LWJhMmEtNzM5NDkwZGMzYzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFlGIeHVSJhOYtzxEuYVNLjz4qP0QptHiJWi IGfU4BPPvvJ1g/EeIGT15xxSLOiQ9+aMZ9enALvWe5n9Et6a1Tgm3jLl+Iv7rygA Om/8vZ6a5jdI9KoRYEP1ZHET52Sp4Yz0G0BdxHw/zcdocqCvEJBj5CKx4YD/bOZT 26r8QjJgYdPWvHtmF41AurU1XydCXA3n70w7KcoCd7pFn/XXU1oOyq4r924ncVe3 JXaNCEHOXVvoFLh8dWGTTarwVJLdzUZ2mS2XdpTQ+Oynz4bRliEeDSJWMGECrVQF UXK1UuQESsWCtw8BVe5CwmpEPeaeLq7C7I1iqe0QPykBufbSTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUANkLU0gJw4WI6/nlka1xWeERTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjlmODQ5ZjktZTU5Ni0z ZjUyLTkzYTItZTUyNmU0MTM4MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx+fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvRWhTPYXa4OupV6iTLuLFHfWIaciVdkBs1Z0sq2Q/mNe2+nVKAvosX rwHPjbuvJMSq6d0Jc/nyFMuaMt0ILwn4jJQxWRNvsTEWeIkI0Z+dgeORYBmyGtH2 ZIgiRCzHPNUYDU+lCQvbxZtCaTdAVAxtEYpxbjEYadacvBMz4qv333jjSNFPyx32 NMJqC1DiE10ciHtdLVCL+hZ0sWZDOIwctzXgLLB+TrF0KqXvd0zA/kLbFxW4nhKd xiUZhTnL5ult6U2acCfApC4Y5NmAyOdqvvx2CMUWwaCDAh0VbF4Jy/YYwDc+Z0fb /4mFHU7uFm9wqkk1lZx7QHu9niZEFMI= -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:50 2026 by rpki-client