$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa File: f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa (raw, json) Hash identifier: LxZ0Lnd5naZNbT15+Co/ODIhlHWv3nYsuxljbucV5p4= Subject key identifier: 55:E6:31:C7:27:2D:A3:A4:97:B0:96:59:7B:F8:02:BC:7C:64:E0:06 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D4D179E01CAEAA45EA800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 71.31.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4d:17:9e:01:ca:ea:a4:5e:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=05cc1897-291f-4d41-966a-12392a6f6d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:4e:ef:2b:c3:7e:b7:08:a2:78:1d:65:78: db:b7:39:29:f1:18:40:8f:b0:95:81:84:26:d3:5f: ed:7f:78:01:95:54:24:3f:2c:5c:7f:2a:c2:18:09: f0:22:f8:30:30:c5:0f:06:68:cf:32:ec:5d:a6:d7: 0f:2a:bd:23:5a:0b:3c:34:4c:83:f0:2f:fb:a9:47: a6:90:0e:d1:16:a4:bc:e2:7a:7b:e8:92:dd:65:5c: a6:1a:b9:78:b7:89:2b:c4:c8:5c:c7:5a:49:89:3e: 0f:b1:a5:18:d0:e8:69:b4:2e:99:be:45:d0:2d:44: c4:f8:ed:f6:d9:69:e6:e4:2c:f7:8e:63:f6:b1:32: 93:91:8d:6e:c0:d5:82:ec:0d:b4:ed:7b:63:38:a9: 34:50:55:b7:9a:2b:81:d7:01:67:65:ea:e0:bd:ee: 6f:5c:27:e5:f2:44:c4:86:0b:07:b0:3b:d0:92:c6: ea:65:c6:2d:6e:6c:09:64:7c:4c:14:3e:4d:f9:39: 11:c3:04:a4:ad:d1:58:71:c7:19:2b:56:22:4d:54: cd:b9:5d:28:00:2c:e0:0d:69:d6:f1:c3:f8:5b:9f: a4:34:a4:0f:9e:5e:aa:2c:5d:f0:01:05:61:4c:80: b0:0b:1c:33:7e:ee:d1:c3:9d:eb:a7:88:89:62:53: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E6:31:C7:27:2D:A3:A4:97:B0:96:59:7B:F8:02:BC:7C:64:E0:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e6:ff:a0:35:b8:0a:9d:c0:0d:79:a0:76:da:3e:3b:2a:10: 16:92:1a:ab:f6:be:7a:a7:b9:d7:53:3b:93:4f:78:38:06:3b: f0:45:d3:ef:92:2b:85:78:42:d9:f1:c4:02:e2:8f:6b:06:33: 60:d7:0f:98:87:78:c6:45:33:8f:bb:d7:fc:f7:66:c9:0b:e4: 07:c8:58:f1:36:19:1e:e9:b1:5c:1f:da:62:d0:63:39:c7:e6: 18:4f:b8:1d:8f:1e:8b:97:c5:85:0b:aa:96:55:27:08:61:41: 6a:5b:3b:ba:fc:c8:1f:76:40:23:e2:a8:05:b2:cc:92:fc:d7: 50:92:18:b3:c7:16:aa:8e:be:3b:c7:e1:0a:2f:53:34:34:fd: 34:32:59:e7:d9:2b:08:4a:03:cc:d2:ad:5c:20:ea:4c:77:f9: ca:2a:c0:a4:44:0c:27:fd:bd:0f:89:1b:85:97:d2:df:22:45: 2e:b1:70:d9:cf:16:2e:9f:3b:b7:0d:1b:20:11:e8:e9:27:f2: 13:0b:5f:29:2c:cc:0b:0a:d8:b0:9a:6f:a9:dc:03:da:05:09: f3:ca:dc:f6:8c:68:91:70:49:ad:b7:0a:e2:3b:ad:ee:d1:a2: 82:c4:c6:bf:5d:52:bf:dd:d6:e0:fe:12:23:90:9a:16:a7:b0: 8e:cf:57:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbU0XngHK6qReqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MDVjYzE4OTctMjkxZi00ZDQxLTk2NmEtMTIzOTJhNmY2ZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/NO7yvDfrcIongdZXjbtzkp8RhAj7CVgYQm 01/tf3gBlVQkPyxcfyrCGAnwIvgwMMUPBmjPMuxdptcPKr0jWgs8NEyD8C/7qUem kA7RFqS84np76JLdZVymGrl4t4krxMhcx1pJiT4PsaUY0OhptC6ZvkXQLUTE+O32 2Wnm5Cz3jmP2sTKTkY1uwNWC7A207XtjOKk0UFW3miuB1wFnZergve5vXCfl8kTE hgsHsDvQksbqZcYtbmwJZHxMFD5N+TkRwwSkrdFYcccZK1YiTVTNuV0oACzgDWnW 8cP4W5+kNKQPnl6qLF3wAQVhTICwCxwzfu7Rw53rp4iJYlODCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXmMccnLaOkl7CWWXv4Arx8ZOAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjQzYmUzYTktNzFjNi0z NGFkLWIwZDMtZWRkMzljZWUzMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrm/6A1uAqdwA15oHbaPjsqEBaSGqv2vnqnuddTO5NPeDgGO/BF0++S K4V4QtnxxALij2sGM2DXD5iHeMZFM4+71/z3ZskL5AfIWPE2GR7psVwf2mLQYznH 5hhPuB2PHouXxYULqpZVJwhhQWpbO7r8yB92QCPiqAWyzJL811CSGLPHFqqOvjvH 4QovUzQ0/TQyWefZKwhKA8zSrVwg6kx3+coqwKREDCf9vQ+JG4WX0t8iRS6xcNnP Fi6fO7cNGyAR6Okn8hMLXykszAsK2LCab6ncA9oFCfPK3PaMaJFwSa23CuI7re7R ooLExr9dUr/d1uD+EiOQmhansI7PV/Q= -----END CERTIFICATE-----Generated at Tue Oct 13 16:03:11 2026 by rpki-client