$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb910681-39cb-3f43-91c9-5433e674e2a4.roa File: fb910681-39cb-3f43-91c9-5433e674e2a4.roa (raw, json) Hash identifier: mMjHzaWoD6gVQQNzJenJQg+zLxiAAcU7fcBstaztq0o= Subject key identifier: 63:F2:19:62:2C:D7:09:8B:8C:93:BC:46:81:19:F7:D2:70:8D:FB:6A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D74701AC3625AABA8BB4F4740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb910681-39cb-3f43-91c9-5433e674e2a4.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 71.31.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:1a:c3:62:5a:ab:a8:bb:4f:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=9ba7af82-81c7-457f-81b5-5aaf33dd599a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:4a:73:10:b9:b5:73:35:da:1a:86:37:8b: a4:4c:b9:e6:23:0a:87:9a:be:7b:29:b4:78:4b:94: 99:77:18:1e:a1:36:2a:5c:02:0d:42:c1:67:4d:08: b6:d3:8f:8e:dd:56:02:45:c7:0c:23:f1:62:5d:20: d0:bb:9d:74:cc:47:c7:56:9e:24:10:0a:4d:c1:2b: 22:a9:01:fa:91:56:31:0f:46:1a:7b:21:83:6a:6e: 57:5c:7f:7d:a5:b0:ae:39:f2:b9:75:95:87:da:01: 9c:37:79:cd:f6:89:3c:5f:3f:f9:9a:04:21:01:23: 24:bd:a4:4c:f5:cd:33:73:40:61:a5:6c:4f:53:45: 42:b8:d5:2f:7c:6a:3e:0b:96:50:3d:ff:60:9a:f6: 9f:db:f1:77:99:65:65:e7:70:2d:b2:a7:9c:4c:aa: a0:2d:28:fd:dc:ba:4a:08:73:d2:3e:14:3b:33:b8: 64:19:4d:23:b0:06:41:62:85:1b:f1:fe:89:85:0e: 07:64:3a:54:de:01:3d:7b:da:d9:12:46:89:2d:64: b3:95:1e:20:e2:b3:b3:76:4a:81:2f:b7:79:57:09: 0b:bd:19:02:12:19:19:e5:bf:e7:09:bc:78:5e:9c: 04:35:31:55:ff:de:35:6d:3a:c4:95:2e:7e:41:0b: 62:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F2:19:62:2C:D7:09:8B:8C:93:BC:46:81:19:F7:D2:70:8D:FB:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb910681-39cb-3f43-91c9-5433e674e2a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:92:67:2c:1b:9c:88:4b:85:a6:b0:9d:d7:93:82:60:41:b7: 11:e8:2a:ee:fd:17:b5:e3:45:90:57:15:3f:ca:ca:08:57:1b: ba:15:de:7e:68:c5:c0:3f:60:f8:35:dd:8e:db:d2:fd:27:b1: 5e:46:06:bd:9d:a2:35:12:11:3b:8b:ee:8b:ec:27:e5:5f:9b: 83:9a:5e:ae:ea:2d:d2:ba:82:e4:3e:8d:30:d7:ce:da:1c:3b: 34:83:30:15:4d:57:70:67:2d:2f:c3:52:39:37:f0:06:7f:64: 40:41:a5:46:c5:d2:58:ff:f0:fc:1e:8a:e2:21:91:52:81:73: 25:fe:a8:98:a4:35:cc:f2:7f:52:b2:e9:2d:e7:22:13:58:b2: 01:d9:9c:7a:4b:60:80:42:b5:d5:20:2a:94:e2:d2:89:e4:e6: e6:be:b1:43:06:70:af:90:2e:f6:df:0b:17:3f:24:9c:1c:c3: b6:a9:1d:02:fc:51:d1:3a:05:e7:9b:9d:50:03:7c:93:dc:dc: d4:b5:13:20:46:a7:5a:9e:9b:72:9d:9a:8e:77:46:d4:2c:44: 63:60:22:a5:2c:d4:8e:75:50:9e:c2:5d:f7:e8:c2:87:79:3e: fe:df:e8:78:e3:44:2c:d4:94:9f:c1:52:08:48:fd:22:3f:fc: 49:2e:5a:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10cBrDYlqrqLtPR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk OWJhN2FmODItODFjNy00NTdmLTgxYjUtNWFhZjMzZGQ1OTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRhKcxC5tXM12hqGN4ukTLnmIwqHmr57KbR4 S5SZdxgeoTYqXAINQsFnTQi204+O3VYCRccMI/FiXSDQu510zEfHVp4kEApNwSsi qQH6kVYxD0YaeyGDam5XXH99pbCuOfK5dZWH2gGcN3nN9ok8Xz/5mgQhASMkvaRM 9c0zc0BhpWxPU0VCuNUvfGo+C5ZQPf9gmvaf2/F3mWVl53AtsqecTKqgLSj93LpK CHPSPhQ7M7hkGU0jsAZBYoUb8f6JhQ4HZDpU3gE9e9rZEkaJLWSzlR4g4rOzdkqB L7d5VwkLvRkCEhkZ5b/nCbx4XpwENTFV/941bTrElS5+QQtihwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPyGWIs1wmLjJO8RoEZ99JwjftqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmI5MTA2ODEtMzljYi0z ZjQzLTkxYzktNTQzM2U2NzRlMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx8xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKSZywbnIhLhaawndeTgmBBtxHoKu79F7XjRZBXFT/KyghXG7oV3n5o xcA/YPg13Y7b0v0nsV5GBr2dojUSETuL7ovsJ+Vfm4OaXq7qLdK6guQ+jTDXztoc OzSDMBVNV3BnLS/DUjk38AZ/ZEBBpUbF0lj/8PweiuIhkVKBcyX+qJikNczyf1Ky 6S3nIhNYsgHZnHpLYIBCtdUgKpTi0onk5ua+sUMGcK+QLvbfCxc/JJwcw7apHQL8 UdE6BeebnVADfJPc3NS1EyBGp1qem3Kdmo53RtQsRGNgIqUs1I51UJ7CXffowod5 Pv7f6HjjRCzUlJ/BUghI/SI//EkuWrk= -----END CERTIFICATE-----Generated at Mon Apr 13 11:39:45 2026 by rpki-client