$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa File: e825d20e-8e66-3271-be05-9ac1583f7e38.roa (raw, json) Hash identifier: 4PeO5Wqam0/fkC2M1MIcuPgMP8hcvndJn0h14jZ8+Ow= Subject key identifier: 95:39:1D:64:3D:E1:ED:E9:85:4F:43:4D:E4:D2:AB:60:E5:D6:66:37 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F62930C353DF76D38EAB11500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 71.31.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0c:35:3d:f7:6d:38:ea:b1:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=ef9fa2e3-b381-4260-b521-f76b28a7dae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:40:6c:6e:a4:22:bf:b9:29:2b:f2:81:52: 15:5b:f2:1f:8c:f2:7d:3a:76:1f:66:5a:57:c9:14: 43:65:d6:28:42:44:45:3a:05:04:70:3a:8e:8a:25: da:2d:a8:2c:77:4a:37:bd:e0:68:6c:c9:ee:66:92: c4:5f:0f:33:35:5a:75:bc:49:0e:3f:7d:7b:4d:53: e1:43:16:40:6c:40:b4:2b:16:ee:85:81:ce:27:c3: 1d:a3:3e:42:5c:2e:fd:72:e9:02:46:25:2f:73:30: 9b:c7:53:aa:24:f5:b5:21:47:f2:c8:ec:9e:43:3f: b6:bb:fa:21:71:24:26:6e:a1:1f:6b:44:de:18:29: e2:78:1e:ee:f4:e2:ec:cd:25:8b:4c:e5:d3:39:31: 92:88:f5:ba:56:bf:49:16:c6:a6:ac:5a:45:f6:ca: 21:40:0b:42:e6:93:1c:7b:f9:a3:e2:2d:e9:26:84: 11:c0:fc:54:9e:20:d8:66:c4:c4:ff:91:c8:5f:4f: 48:b5:9a:0b:82:fe:5a:e6:c3:2c:9e:44:fa:03:2e: b2:c1:79:47:aa:4b:bf:fb:f5:11:b9:28:9e:37:16: 36:34:4d:e6:eb:fe:52:44:6c:d2:b6:d4:9b:3f:aa: 00:b1:36:e4:08:06:f9:98:a7:c9:1f:28:b6:34:4f: 5e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:39:1D:64:3D:E1:ED:E9:85:4F:43:4D:E4:D2:AB:60:E5:D6:66:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d6:32:29:e1:e6:f4:24:da:9e:69:f9:e0:b6:3c:cb:a1:ca: 68:6e:7b:c1:7c:1f:64:21:d2:03:2e:26:a8:6d:42:eb:a4:cc: f8:dd:cf:93:66:8a:bf:b2:83:26:f7:c5:7d:40:02:6b:72:2a: 3e:85:f6:4f:9d:f7:05:a4:4d:85:59:07:db:5a:c8:af:59:9c: ed:25:10:d2:66:14:7f:f6:c5:43:e5:12:6b:b9:1f:90:34:a7: 59:5c:14:f5:97:d4:41:cb:ed:9c:17:66:ef:79:4f:5d:cd:31: c3:07:c8:85:1b:61:11:65:20:e7:43:2e:7d:b0:42:51:18:59: a2:2b:d8:7e:12:86:59:e9:4e:6d:38:d2:e5:63:f6:c9:81:e0: b0:64:2a:2a:ae:7d:cb:ee:07:e4:78:c1:2f:91:88:f5:7e:94: ef:c7:cd:dc:d2:b4:53:2f:2e:77:ab:52:99:8b:06:aa:0f:49: bb:9e:cf:b5:e3:12:5d:95:9f:39:a1:b6:14:86:79:a6:ad:f9: 31:e4:86:75:64:2e:c1:fa:e1:e4:ee:94:dc:1a:b9:05:24:6f: 8c:38:1d:bd:5f:f4:7a:85:89:92:43:4a:4c:b8:de:b0:c3:2e: 9a:a0:33:04:08:8d:10:4c:eb:db:09:2e:cf:26:da:d2:8c:15: e1:b7:da:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikww1PfdtOOqxFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWY5ZmEyZTMtYjM4MS00MjYwLWI1MjEtZjc2YjI4YTdkYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsNAbG6kIr+5KSvygVIVW/IfjPJ9OnYfZlpX yRRDZdYoQkRFOgUEcDqOiiXaLagsd0o3veBobMnuZpLEXw8zNVp1vEkOP317TVPh QxZAbEC0KxbuhYHOJ8Mdoz5CXC79cukCRiUvczCbx1OqJPW1IUfyyOyeQz+2u/oh cSQmbqEfa0TeGCnieB7u9OLszSWLTOXTOTGSiPW6Vr9JFsamrFpF9sohQAtC5pMc e/mj4i3pJoQRwPxUniDYZsTE/5HIX09ItZoLgv5a5sMsnkT6Ay6ywXlHqku/+/UR uSieNxY2NE3m6/5SRGzSttSbP6oAsTbkCAb5mKfJHyi2NE9eSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJU5HWQ94e3phU9DTeTSq2Dl1mY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgyNWQyMGUtOGU2Ni0z MjcxLWJlMDUtOWFjMTU4M2Y3ZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfWMinh5vQk2p5p+eC2PMuhymhue8F8H2Qh0gMuJqhtQuukzPjdz5Nm ir+ygyb3xX1AAmtyKj6F9k+d9wWkTYVZB9tayK9ZnO0lENJmFH/2xUPlEmu5H5A0 p1lcFPWX1EHL7ZwXZu95T13NMcMHyIUbYRFlIOdDLn2wQlEYWaIr2H4ShlnpTm04 0uVj9smB4LBkKiqufcvuB+R4wS+RiPV+lO/HzdzStFMvLnerUpmLBqoPSbuez7Xj El2VnzmhthSGeaat+THkhnVkLsH64eTulNwauQUkb4w4Hb1f9HqFiZJDSky43rDD LpqgMwQIjRBM69sJLs8m2tKMFeG32oE= -----END CERTIFICATE-----Generated at Tue Oct 13 06:22:40 2026 by rpki-client