$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75928b4-5f67-3862-b915-b7ac40de473d.roa File: d75928b4-5f67-3862-b915-b7ac40de473d.roa (raw, json) Hash identifier: ke89o1W+bnU0vdfBvuyt3Zz/xr8txbSllmLvFIAqYvQ= Subject key identifier: 2D:A0:32:65:7E:B3:97:71:3A:79:B7:08:AA:80:32:09:0C:C6:6C:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DD8F071B37AB77204C8AD8420 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75928b4-5f67-3862-b915-b7ac40de473d.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 7029 IP address blocks: 71.31.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:71:b3:7a:b7:72:04:c8:ad:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=96801da1-d17c-4d65-8a4a-a646f3053d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:f7:bc:5a:c6:df:6d:f4:6b:a7:94:d9:f5: d8:42:41:da:ed:66:c2:d9:c5:dc:75:c3:c7:fc:43: 42:46:33:ec:d7:ce:ea:c0:8d:3c:95:71:c0:da:6c: c6:23:09:78:68:46:f7:1e:65:60:79:3c:2b:3a:02: 12:ab:a9:82:51:7f:e3:d2:6d:90:18:84:57:a7:69: ba:a6:f1:7d:80:3c:d7:a9:87:d0:e5:3c:a4:af:d1: 78:50:2f:52:30:bb:2c:04:99:8f:23:50:da:f8:fb: 0f:4a:87:42:cd:16:a4:db:bf:50:2e:4e:c5:1e:b8: 34:d7:0c:a3:6a:fb:d4:64:9c:c6:67:85:00:c7:5f: 63:bb:ff:99:b1:b0:65:e9:d7:8a:92:40:fb:e5:e3: b9:0d:72:ce:6c:97:da:27:e8:c1:e6:9f:41:6a:85: f6:74:72:c7:37:1c:85:83:a0:66:81:9a:b2:ec:7f: d0:8f:5b:41:6c:ff:c0:52:34:ff:04:c4:5a:73:d2: 2b:01:70:dd:13:c7:df:cd:55:5d:06:00:82:5f:d4: ac:28:47:63:c0:4c:e3:c3:8a:2f:8a:71:9e:16:97: 34:68:fd:96:18:1a:d3:cd:0e:26:f6:07:0d:e9:6b: 0a:8f:16:11:88:99:03:b4:23:35:9d:24:06:0e:23: 4f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A0:32:65:7E:B3:97:71:3A:79:B7:08:AA:80:32:09:0C:C6:6C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75928b4-5f67-3862-b915-b7ac40de473d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:23:36:f4:61:f7:a3:7d:0e:42:93:c0:20:75:1e:79:01:97: aa:a4:97:67:02:14:bc:1b:9f:ed:e7:ea:98:21:64:94:6f:3e: 0a:89:99:99:92:e5:50:bb:14:90:14:3f:b9:40:e3:f9:e5:36: 5a:12:e8:22:c7:d1:e2:f4:49:ee:f3:a0:9e:65:36:e0:ad:89: 31:40:1a:f1:48:16:eb:81:6d:c8:64:14:8a:29:e1:ed:76:09: 93:2c:32:93:49:d7:d9:83:b7:3b:b0:d7:01:12:b2:85:28:07: 1d:87:05:5c:af:3d:4c:12:08:ed:ca:c6:25:8d:f0:a6:25:88: 6f:12:fa:68:8a:2b:ce:d1:91:9e:dc:ba:d4:fd:f5:ea:62:6c: 88:84:d3:5d:68:04:6e:bf:c0:88:2c:17:4d:d0:a3:61:83:03: 9d:ce:12:f9:fc:ec:85:8a:bc:e8:fd:bd:89:11:05:64:1c:34: 32:1e:5d:71:53:5b:61:38:59:67:03:f9:e8:99:08:47:dc:25: 5c:88:d2:f5:f4:99:34:04:7b:9c:6d:e9:6d:25:ed:65:68:98: 0a:3f:ee:e8:34:04:38:cb:eb:28:72:df:4a:39:b2:47:39:4e: f6:3b:04:55:ec:48:29:87:3e:c0:99:16:54:ef:4a:2e:49:28: f0:08:1c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8HGzerdyBMithCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk OTY4MDFkYTEtZDE3Yy00ZDY1LThhNGEtYTY0NmYzMDUzZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEr3vFrG3230a6eU2fXYQkHa7WbC2cXcdcPH /ENCRjPs187qwI08lXHA2mzGIwl4aEb3HmVgeTwrOgISq6mCUX/j0m2QGIRXp2m6 pvF9gDzXqYfQ5Tykr9F4UC9SMLssBJmPI1Da+PsPSodCzRak279QLk7FHrg01wyj avvUZJzGZ4UAx19ju/+ZsbBl6deKkkD75eO5DXLObJfaJ+jB5p9BaoX2dHLHNxyF g6BmgZqy7H/Qj1tBbP/AUjT/BMRac9IrAXDdE8ffzVVdBgCCX9SsKEdjwEzjw4ov inGeFpc0aP2WGBrTzQ4m9gcN6WsKjxYRiJkDtCM1nSQGDiNPdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2gMmV+s5dxOnm3CKqAMgkMxmyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDc1OTI4YjQtNWY2Ny0z ODYyLWI5MTUtYjdhYzQwZGU0NzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAjNvRh96N9DkKTwCB1HnkBl6qkl2cCFLwbn+3n6pghZJRvPgqJmZmS 5VC7FJAUP7lA4/nlNloS6CLH0eL0Se7zoJ5lNuCtiTFAGvFIFuuBbchkFIop4e12 CZMsMpNJ19mDtzuw1wESsoUoBx2HBVyvPUwSCO3KxiWN8KYliG8S+miKK87RkZ7c utT99epibIiE011oBG6/wIgsF03Qo2GDA53OEvn87IWKvOj9vYkRBWQcNDIeXXFT W2E4WWcD+eiZCEfcJVyI0vX0mTQEe5xt6W0l7WVomAo/7ug0BDjL6yhy30o5skc5 TvY7BFXsSCmHPsCZFlTvSi5JKPAIHJQ= -----END CERTIFICATE-----Generated at Thu May 28 17:12:24 2026 by rpki-client