$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/118eaf2e-733e-34b1-a27c-5888e86eadd2.roa File: 118eaf2e-733e-34b1-a27c-5888e86eadd2.roa (raw, json) Hash identifier: QF2aZRr+T8lg6AKXksxjaiNNHchzErTRQpXc0lTyb7c= Subject key identifier: D2:22:A7:26:34:37:4B:F6:94:2F:E3:12:56:4B:84:83:04:09:C9:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D688C82E29F7EA26AB740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/118eaf2e-733e-34b1-a27c-5888e86eadd2.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 71.31.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:68:8c:82:e2:9f:7e:a2:6a:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=2e2e322a-d0af-480f-a863-223a193dea96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a9:22:b3:96:97:66:f2:52:03:7c:a3:ea:2b: 48:19:38:80:d4:9e:9b:0c:5c:f5:4e:3d:5e:73:ae: 0c:37:8a:30:4b:05:c7:64:21:5f:a7:64:f0:fd:9d: ff:99:4e:98:6d:6b:68:f3:b3:f1:89:ba:a8:12:5f: 7d:00:46:69:3f:71:d1:33:bc:07:8c:a9:83:7e:39: e9:b1:2e:d2:79:52:19:e6:61:59:60:81:2a:eb:35: 07:5a:af:b1:12:99:62:2a:f6:4f:36:b8:17:91:69: 20:30:82:f4:2e:5c:92:f6:ae:be:b4:14:74:f6:65: 32:ea:2e:7f:b4:78:8d:84:99:ec:69:b1:6e:df:d3: 66:53:18:18:d8:3a:3a:6c:dd:35:e0:85:d5:2b:fc: c4:c0:db:27:5b:2d:05:4b:15:31:cf:2d:18:fc:3d: 2f:3f:64:a4:f2:85:3c:74:ff:79:2a:6a:70:dd:e6: 22:0f:0a:95:f6:05:d3:2a:14:d6:7d:5a:fe:8a:f4: 21:29:7a:dd:93:71:94:3d:b1:4a:74:37:1b:1c:ab: fd:77:38:15:d8:a7:39:30:e7:5e:f0:e2:64:fb:72: fa:9b:d7:47:8d:98:33:b4:fa:1c:9e:d7:8e:0d:73: c0:40:2a:b8:33:52:93:ff:33:e2:7b:a0:eb:f8:a4: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:22:A7:26:34:37:4B:F6:94:2F:E3:12:56:4B:84:83:04:09:C9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/118eaf2e-733e-34b1-a27c-5888e86eadd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7f:93:33:5c:c3:c5:1b:a8:91:96:e9:f7:12:8f:c0:20:d9: 3f:d5:7d:f7:ed:c2:c0:ec:52:de:e1:8e:56:01:79:b8:8e:65: 88:df:86:b9:da:50:68:f6:c7:e3:11:78:ec:3b:8d:75:50:8e: 06:f7:72:70:99:da:de:c7:11:23:73:09:c3:34:7d:78:10:59: 45:5d:12:1e:ba:16:4c:3f:70:88:eb:9e:3a:ce:42:4e:e3:74: 52:d8:47:db:ea:51:f9:20:5a:6f:38:1c:d6:bc:fe:a4:2a:dc: a0:9f:bb:1d:9a:11:84:e3:4e:95:02:71:44:6e:04:ab:94:69: 7b:6f:ff:8b:90:9e:ba:7b:be:fc:8b:38:40:1b:dd:36:d2:40: 22:8f:f8:96:91:5e:e6:12:9e:c9:f3:d6:83:70:68:21:7c:d1: 7c:38:d0:be:b5:a1:b5:a2:11:b3:b9:b8:e0:94:88:a0:f4:30: ed:3d:90:03:34:0d:a3:0b:24:f0:9f:5b:6c:a8:18:ae:b0:7c: d5:e9:e3:7e:15:90:99:75:dd:68:d9:d0:70:8a:66:81:4b:3d: e6:18:2a:30:c7:1a:87:28:71:6c:cf:5f:c3:5c:fb:90:3a:ea: b0:09:3a:73:32:f8:01:5b:2d:f6:00:52:c5:fa:20:f7:91:0b: 1a:27:a9:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWiMguKffqJqt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MmUyZTMyMmEtZDBhZi00ODBmLWE4NjMtMjIzYTE5M2RlYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqkis5aXZvJSA3yj6itIGTiA1J6bDFz1Tj1e c64MN4owSwXHZCFfp2Tw/Z3/mU6YbWto87PxibqoEl99AEZpP3HRM7wHjKmDfjnp sS7SeVIZ5mFZYIEq6zUHWq+xEpliKvZPNrgXkWkgMIL0LlyS9q6+tBR09mUy6i5/ tHiNhJnsabFu39NmUxgY2Do6bN014IXVK/zEwNsnWy0FSxUxzy0Y/D0vP2Sk8oU8 dP95Kmpw3eYiDwqV9gXTKhTWfVr+ivQhKXrdk3GUPbFKdDcbHKv9dzgV2Kc5MOde 8OJk+3L6m9dHjZgztPocnteODXPAQCq4M1KT/zPie6Dr+KSNnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIipyY0N0v2lC/jElZLhIMECcmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTE4ZWFmMmUtNzMzZS0z NGIxLWEyN2MtNTg4OGU4NmVhZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx+eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN/kzNcw8UbqJGW6fcSj8Ag2T/VffftwsDsUt7hjlYBebiOZYjfhrna UGj2x+MReOw7jXVQjgb3cnCZ2t7HESNzCcM0fXgQWUVdEh66Fkw/cIjrnjrOQk7j dFLYR9vqUfkgWm84HNa8/qQq3KCfux2aEYTjTpUCcURuBKuUaXtv/4uQnrp7vvyL OEAb3TbSQCKP+JaRXuYSnsnz1oNwaCF80Xw40L61obWiEbO5uOCUiKD0MO09kAM0 DaMLJPCfW2yoGK6wfNXp434VkJl13WjZ0HCKZoFLPeYYKjDHGococWzPX8Nc+5A6 6rAJOnMy+AFbLfYAUsX6IPeRCxonqd0= -----END CERTIFICATE-----Generated at Mon Sep 28 21:22:50 2026 by rpki-client