$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b588a9d-9551-354d-b984-2a6745fa9392.roa File: 8b588a9d-9551-354d-b984-2a6745fa9392.roa (raw, json) Hash identifier: 7tTUPJhvthYqJgs2I9X8fLMLDc2pNJCHyWFf0j2bHjw= Subject key identifier: 92:70:05:71:A8:FE:3E:4F:B2:9D:3D:26:3D:EC:DD:84:F0:64:CD:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D842F1FC19AE83391BEF880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b588a9d-9551-354d-b984-2a6745fa9392.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 71.31.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:2f:1f:c1:9a:e8:33:91:be:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=1d23639d-7706-4cec-b9de-d440116d3f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:02:50:ea:ce:cd:e6:1e:93:41:f0:ca:b8: 1a:6b:50:e5:c5:18:48:ce:c4:d2:43:42:45:7a:a2: d1:40:a4:ca:f5:61:94:bd:88:68:d6:0c:0f:cb:ad: b4:90:1e:4c:6b:09:f8:aa:48:3a:40:2a:84:f0:70: 43:46:09:57:d7:57:72:18:5e:0d:23:3c:41:ab:ec: 9c:ce:89:a7:6b:c5:49:17:55:70:19:a2:0c:27:74: b8:43:24:09:87:25:cf:d3:a9:91:f1:09:91:bc:44: 6d:9d:d6:3c:01:f7:1f:78:4c:1e:59:a7:f7:60:04: 8b:58:bc:22:28:bf:a2:76:a4:86:41:de:7b:8e:16: 9a:20:82:70:3d:77:75:3a:e2:73:5b:50:2f:56:b6: d5:ec:38:41:77:1b:3b:be:49:64:25:a2:78:8f:33: 1b:e7:a8:78:ea:51:60:a7:6e:cb:c8:d1:f6:b0:fa: 67:5d:1d:02:e0:1a:0c:64:48:51:30:90:3f:a4:16: f7:be:b2:56:f3:85:33:cd:99:1d:ef:60:2b:8b:a7: 64:70:cb:87:bc:c8:c4:0c:23:55:0b:ad:b2:d5:5b: 04:9a:56:c1:7b:a3:06:82:fb:12:31:64:69:69:f4: 2a:f1:b2:16:77:e8:2c:42:8b:d5:d6:60:6e:18:2a: f3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:70:05:71:A8:FE:3E:4F:B2:9D:3D:26:3D:EC:DD:84:F0:64:CD:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b588a9d-9551-354d-b984-2a6745fa9392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9d:65:73:13:c7:c1:e9:38:71:db:d7:73:78:99:81:2a:49: 0d:8b:c2:10:60:41:77:fc:00:65:05:94:d9:4b:dc:5f:54:46: 9e:13:88:15:01:d2:86:9c:a1:d4:dd:a8:1f:23:61:7b:e9:25: cc:30:02:99:5a:98:a7:62:08:eb:8c:5a:0e:50:29:ee:55:0a: 1b:51:b9:b6:25:c1:67:1c:2b:e6:09:9e:1a:35:4a:e7:16:f5: 4a:f8:8d:c6:56:5c:02:d9:fd:dc:b0:5a:d7:ee:cb:71:0f:56: 4a:6c:1b:df:e2:35:05:6d:6a:1b:ec:a9:95:7c:2e:e5:5a:8e: 92:33:e0:20:d0:20:0e:01:a3:1a:ee:17:ea:69:37:bd:0c:5b: 43:10:e2:73:36:39:82:54:27:cb:a6:65:4d:d5:21:c2:6a:e4: bb:fd:d4:0c:2c:ef:bf:d1:47:81:09:bc:c7:22:0c:44:fb:49: d7:4b:b2:be:66:6b:54:5d:70:67:b2:22:99:bb:1b:be:cc:49: da:09:07:f7:18:35:ba:1a:61:61:98:ee:45:20:5a:e6:be:22: 61:f6:8a:d7:6e:de:e3:71:04:69:c3:33:f7:4c:20:e4:af:f0: 07:21:7f:d9:9c:21:aa:fe:c2:b9:8c:58:69:10:ad:3f:37:7d: 09:25:38:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhC8fwZroM5G++IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk MWQyMzYzOWQtNzcwNi00Y2VjLWI5ZGUtZDQ0MDExNmQzZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomUCUOrOzeYek0Hwyrgaa1DlxRhIzsTSQ0JF eqLRQKTK9WGUvYho1gwPy620kB5Mawn4qkg6QCqE8HBDRglX11dyGF4NIzxBq+yc zomna8VJF1VwGaIMJ3S4QyQJhyXP06mR8QmRvERtndY8AfcfeEweWaf3YASLWLwi KL+idqSGQd57jhaaIIJwPXd1OuJzW1AvVrbV7DhBdxs7vklkJaJ4jzMb56h46lFg p27LyNH2sPpnXR0C4BoMZEhRMJA/pBb3vrJW84UzzZkd72Ari6dkcMuHvMjEDCNV C62y1VsEmlbBe6MGgvsSMWRpafQq8bIWd+gsQovV1mBuGCrz9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJwBXGo/j5Psp09Jj3s3YTwZM3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGI1ODhhOWQtOTU1MS0z NTRkLWI5ODQtMmE2NzQ1ZmE5MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFudZXMTx8HpOHHb13N4mYEqSQ2LwhBgQXf8AGUFlNlL3F9URp4TiBUB 0oacodTdqB8jYXvpJcwwAplamKdiCOuMWg5QKe5VChtRubYlwWccK+YJnho1SucW 9Ur4jcZWXALZ/dywWtfuy3EPVkpsG9/iNQVtahvsqZV8LuVajpIz4CDQIA4Boxru F+ppN70MW0MQ4nM2OYJUJ8umZU3VIcJq5Lv91Aws77/RR4EJvMciDET7SddLsr5m a1RdcGeyIpm7G77MSdoJB/cYNboaYWGY7kUgWua+ImH2itdu3uNxBGnDM/dMIOSv 8Achf9mcIar+wrmMWGkQrT83fQklOIM= -----END CERTIFICATE-----Generated at Sat Jun 13 17:49:54 2026 by rpki-client