$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca6eef30-f7aa-3f9c-ab60-73282d5d8556.roa File: ca6eef30-f7aa-3f9c-ab60-73282d5d8556.roa (raw, json) Hash identifier: lnmZIaTG82Y0+rovdMIYQajPwJ8YnYlpC/m4MztaeCw= Subject key identifier: BD:C8:F2:E8:E5:02:5E:B9:F6:C0:7A:25:F1:79:DF:0C:EF:09:7F:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E5FDF66D96BDC93A657171D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca6eef30-f7aa-3f9c-ab60-73282d5d8556.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 71.31.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:66:d9:6b:dc:93:a6:57:17:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=d33a44cd-5c67-43df-a5f5-65930e4fbcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:83:5f:63:6f:7e:b1:ec:ee:4f:09:52:8d:2b: 47:83:34:72:0b:78:c9:88:0d:09:64:60:be:18:1e: fa:e1:5c:8b:dd:18:03:f5:0c:cb:53:6e:c1:81:92: 65:b5:b3:33:68:58:3d:b5:0a:3b:67:a9:d8:80:40: ed:f5:47:87:ce:4e:f0:33:52:d6:4b:9f:82:89:1e: f2:ef:5a:08:d5:35:b7:56:91:23:5c:fb:e8:8d:64: 5d:b1:fb:56:a9:84:4e:45:45:88:1f:2f:5c:33:cb: 91:16:16:b5:ac:bf:05:f6:bf:54:4d:6c:b0:7e:da: f4:1d:4b:08:29:a6:1e:04:2a:7b:71:70:d2:a7:59: 74:ad:cf:96:7d:cb:e0:af:00:c8:25:19:16:a6:28: 64:d0:f0:29:5e:e7:6a:89:52:01:6f:e5:35:26:29: 7b:2b:0c:ea:36:9f:25:ef:23:6a:9c:bb:03:3c:23: 5a:3d:1b:18:2c:9e:d0:e8:d4:84:7c:ef:2f:e7:56: c7:1c:60:81:8e:f2:d3:4b:c3:db:ad:dc:04:7d:41: c7:9c:30:02:e5:ac:15:4b:75:4b:4e:a4:04:ac:aa: 65:03:bb:5c:60:f6:40:af:36:62:c2:b5:94:61:05: 9e:de:f2:38:83:db:65:50:d0:69:48:48:b8:4d:d8: 44:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C8:F2:E8:E5:02:5E:B9:F6:C0:7A:25:F1:79:DF:0C:EF:09:7F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca6eef30-f7aa-3f9c-ab60-73282d5d8556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:19:28:b9:63:75:77:74:8a:9e:e6:4d:5b:57:8d:64:33:0a: f5:a6:a3:54:7e:62:46:1d:e2:7f:b3:a9:84:05:2f:94:f5:18: d6:17:93:b6:b5:3b:49:18:37:ef:90:b9:dc:14:8b:b2:25:a7: 56:7c:02:42:c2:3c:de:fc:20:b4:19:dd:11:f1:40:32:8e:74: dc:bc:05:26:f0:74:ac:8f:fc:2b:48:4b:9f:45:ec:0c:d2:19: 9e:98:37:2b:26:c2:5c:bb:46:b5:bb:e1:ad:34:14:d0:97:ac: 49:a4:14:1a:f3:76:20:c2:25:8b:ed:7e:49:5b:e4:92:fc:ec: a7:3d:44:1b:d8:95:02:52:b8:47:ec:26:ac:8f:9c:0d:fd:9e: 63:a5:01:8b:e8:1e:86:b7:20:2a:c1:6e:f4:4e:45:64:8d:a2: cf:d0:47:52:6f:da:8e:c9:74:e1:37:93:e3:38:35:de:5a:b1: 2a:8e:5d:92:00:de:47:44:bc:8e:09:ac:b6:62:4e:a4:23:53: be:60:49:2f:12:0e:f6:a5:48:da:fa:bf:1f:da:00:7d:d9:42: 6c:e8:5e:08:11:f1:3a:cb:b7:7c:fa:6b:9b:fc:a0:4c:b5:a2: 16:01:a2:a1:89:61:90:88:11:6b:7e:ca:98:3d:85:73:4f:11: f3:db:4b:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32bZa9yTplcXHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk ZDMzYTQ0Y2QtNWM2Ny00M2RmLWE1ZjUtNjU5MzBlNGZiY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64NfY29+sezuTwlSjStHgzRyC3jJiA0JZGC+ GB764VyL3RgD9QzLU27BgZJltbMzaFg9tQo7Z6nYgEDt9UeHzk7wM1LWS5+CiR7y 71oI1TW3VpEjXPvojWRdsftWqYRORUWIHy9cM8uRFha1rL8F9r9UTWywftr0HUsI KaYeBCp7cXDSp1l0rc+WfcvgrwDIJRkWpihk0PApXudqiVIBb+U1Jil7KwzqNp8l 7yNqnLsDPCNaPRsYLJ7Q6NSEfO8v51bHHGCBjvLTS8PbrdwEfUHHnDAC5awVS3VL TqQErKplA7tcYPZArzZiwrWUYQWe3vI4g9tlUNBpSEi4TdhEkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3I8ujlAl659sB6JfF53wzvCX8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E2ZWVmMzAtZjdhYS0z ZjljLWFiNjAtNzMyODJkNWQ4NTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQZKLljdXd0ip7mTVtXjWQzCvWmo1R+YkYd4n+zqYQFL5T1GNYXk7a1 O0kYN++QudwUi7Ilp1Z8AkLCPN78ILQZ3RHxQDKOdNy8BSbwdKyP/CtIS59F7AzS GZ6YNysmwly7RrW74a00FNCXrEmkFBrzdiDCJYvtfklb5JL87Kc9RBvYlQJSuEfs JqyPnA39nmOlAYvoHoa3ICrBbvRORWSNos/QR1Jv2o7JdOE3k+M4Nd5asSqOXZIA 3kdEvI4JrLZiTqQjU75gSS8SDvalSNr6vx/aAH3ZQmzoXggR8TrLt3z6a5v8oEy1 ohYBoqGJYZCIEWt+ypg9hXNPEfPbS4Q= -----END CERTIFICATE-----Generated at Mon Jul 13 07:24:45 2026 by rpki-client