$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9546816c-7b43-371f-8ba4-9b740de36224.roa File: 9546816c-7b43-371f-8ba4-9b740de36224.roa (raw, json) Hash identifier: w0PgbjL0+xdf1K4tyk/UOTdqXu1l04H6ewMCqQzUyUk= Subject key identifier: 88:A1:C2:33:B5:49:47:A4:2D:C8:57:82:E7:8E:35:5F:B7:4B:E0:74 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024232134BB418E0649B8EC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9546816c-7b43-371f-8ba4-9b740de36224.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.31.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:32:13:4b:b4:18:e0:64:9b:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=2672c981-b282-4579-aa14-4034e8e303c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:eb:e3:47:46:22:d1:e8:af:c1:a4:b7:0b: ba:a5:43:2b:d9:e7:9e:ed:e4:bb:03:7f:7a:07:81: ad:25:02:39:18:b1:8b:f4:0d:aa:a4:e1:25:57:e2: ea:81:ad:a3:8d:32:83:42:62:b6:b8:eb:c9:5f:68: d5:8a:58:43:b5:12:82:96:b4:ac:51:78:9c:a3:84: cb:9b:56:17:fb:70:53:7c:41:2a:77:17:b2:e3:a8: aa:13:2f:77:24:00:c5:ee:c2:02:32:98:41:d1:e0: 8d:d1:7a:8b:2d:6c:21:fd:a8:73:ea:6d:55:47:4c: 30:85:50:97:ec:38:a1:e9:6c:43:45:d8:6a:37:1e: a7:25:24:76:db:0a:ee:52:1b:0f:31:11:ad:8e:ad: f8:da:67:89:59:54:06:7f:2a:27:32:6b:9d:5a:8f: 68:32:a5:dc:f7:6b:1e:36:37:0b:3d:e5:51:9c:e3: a4:57:1f:cb:d5:be:66:c3:6f:3f:7b:c5:9e:c0:6e: 4e:8f:ee:7d:17:a0:45:c0:f8:b3:8b:9b:c2:95:8f: 18:35:5c:21:2e:68:3d:17:93:35:f3:be:08:da:a6: 12:0a:f6:cd:d6:98:50:62:21:ee:4f:ee:35:d1:2c: b4:f7:a6:30:56:4d:13:e3:5a:0d:13:73:95:31:d0: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A1:C2:33:B5:49:47:A4:2D:C8:57:82:E7:8E:35:5F:B7:4B:E0:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9546816c-7b43-371f-8ba4-9b740de36224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b3:1b:4b:14:44:28:83:d0:6b:23:8f:1f:06:9c:f6:18:7b: c9:60:5b:4d:5e:07:9b:0d:90:ae:5d:53:ae:c1:07:9f:ba:2f: 20:a1:c2:c4:a7:fe:77:74:57:ef:e9:4e:13:9a:af:18:d8:fc: ac:30:01:f7:f6:46:15:d7:13:25:0d:c9:5b:10:6f:c6:cf:d9: af:50:c1:ae:a6:e0:df:1d:5c:39:ff:16:77:ea:9b:0e:e0:bd: c7:d0:1d:bd:36:09:bb:91:55:72:5e:18:bc:64:2d:fc:4e:ed: 80:64:fe:89:5b:a5:b1:ab:de:15:48:17:92:0f:23:90:a5:97: c9:67:8d:d0:d6:9e:f4:ef:e1:dc:2c:a2:b2:d7:d0:31:aa:c5: ac:ed:39:df:10:99:d1:4b:0d:d9:85:a7:f4:93:d9:9c:f5:e3: 58:f4:34:bf:e5:50:c4:c6:21:b4:40:b9:6a:ef:a1:78:5e:fb: 9c:5a:67:e3:01:0f:3d:00:19:5c:94:e9:09:aa:5f:b7:8f:18: a1:4a:4c:fb:a3:9c:bc:aa:c6:7b:71:7c:cb:1e:0f:16:dc:c7: 98:62:d6:04:6f:41:b3:0c:2e:78:17:4f:b4:eb:35:fa:31:3a: db:01:89:79:b5:cb:2c:56:f5:76:15:78:5c:74:f2:67:60:13: a6:65:4e:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjITS7QY4GSbjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MjY3MmM5ODEtYjI4Mi00NTc5LWFhMTQtNDAzNGU4ZTMwM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBTr40dGItHor8Gktwu6pUMr2eee7eS7A396 B4GtJQI5GLGL9A2qpOElV+Lqga2jjTKDQmK2uOvJX2jVilhDtRKClrSsUXico4TL m1YX+3BTfEEqdxey46iqEy93JADF7sICMphB0eCN0XqLLWwh/ahz6m1VR0wwhVCX 7Dih6WxDRdhqNx6nJSR22wruUhsPMRGtjq342meJWVQGfyonMmudWo9oMqXc92se NjcLPeVRnOOkVx/L1b5mw28/e8WewG5Oj+59F6BFwPizi5vClY8YNVwhLmg9F5M1 874I2qYSCvbN1phQYiHuT+410Sy096YwVk0T41oNE3OVMdCtuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIihwjO1SUekLchXgueONV+3S+B0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTU0NjgxNmMtN2I0My0z NzFmLThiYTQtOWI3NDBkZTM2MjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCzG0sURCiD0Gsjjx8GnPYYe8lgW01eB5sNkK5dU67BB5+6LyChwsSn /nd0V+/pThOarxjY/KwwAff2RhXXEyUNyVsQb8bP2a9Qwa6m4N8dXDn/Fnfqmw7g vcfQHb02CbuRVXJeGLxkLfxO7YBk/olbpbGr3hVIF5IPI5Cll8lnjdDWnvTv4dws orLX0DGqxaztOd8QmdFLDdmFp/ST2Zz141j0NL/lUMTGIbRAuWrvoXhe+5xaZ+MB Dz0AGVyU6QmqX7ePGKFKTPujnLyqxntxfMseDxbcx5hi1gRvQbMMLngXT7TrNfox OtsBiXm1yyxW9XYVeFx08mdgE6ZlTpk= -----END CERTIFICATE-----Generated at Sun Sep 20 17:55:08 2026 by rpki-client