$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa File: e825d20e-8e66-3271-be05-9ac1583f7e38.roa (raw, json) Hash identifier: QjgLimj5g3cH1YierVPmLXSm+natWStaifX6hS2dHPI= Subject key identifier: 8A:0E:E7:9E:ED:71:E0:46:66:AE:BB:30:7F:BE:CF:6D:32:D1:9A:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E1E44929459D8CBF277751F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 71.31.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:92:94:59:d8:cb:f2:77:75:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=bbfe3146-8aa4-455d-a4eb-9c3d6012c6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:21:07:7a:27:8c:d4:5f:a4:8b:51:22:05:b9: cc:5b:1f:ee:df:72:16:b3:f2:8f:7a:16:4e:8b:08: 5e:c9:d8:cf:df:55:80:7f:f1:11:d2:78:b7:a9:a4: 90:87:a2:11:a0:bc:10:7a:17:da:ac:e1:1b:10:ae: b7:0a:8f:27:d8:b6:0a:c5:6e:f2:46:b7:46:a3:c6: 2c:b5:cf:4c:3b:95:6f:03:b7:cc:43:f5:ac:3c:58: 3c:a4:da:0d:0f:44:6f:f7:a1:45:78:b8:b8:65:81: c7:b1:ed:e1:34:e0:d5:26:5c:1d:78:3e:8b:42:95: 88:cb:d3:3b:ca:ad:a7:c8:51:88:41:d4:17:44:57: 6b:a9:be:d3:a9:a7:3a:1e:89:f0:8e:7d:70:0d:51: 2d:dd:d6:1e:2d:82:05:9f:44:f4:22:ce:aa:cd:ce: 9c:8c:e4:69:67:74:4b:89:ff:73:22:e9:4c:dc:d7: 02:49:b9:05:9f:b0:7d:be:2d:d0:1a:29:a8:62:16: 6d:b8:71:58:53:82:c4:65:05:6b:9b:03:0b:d6:35: 73:82:f4:7a:7c:d7:2f:a9:29:eb:94:8f:60:2a:5c: c0:5d:96:1d:d5:c6:a5:95:7d:48:1b:a0:42:a0:c4: 61:cf:52:70:44:b4:ec:04:96:06:a8:ec:ca:3f:f2: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0E:E7:9E:ED:71:E0:46:66:AE:BB:30:7F:BE:CF:6D:32:D1:9A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:44:43:e8:af:f6:48:8d:b9:19:53:b5:5f:ad:16:79:c0:e5: 8a:8f:cc:52:8c:95:70:94:dc:79:74:10:5f:f7:95:a9:c2:15: d2:fa:b4:ec:41:6a:47:04:fe:03:4f:ab:a0:4a:02:91:e0:eb: dc:80:53:59:bf:68:55:ab:95:fb:f1:37:c0:c2:2d:7e:c6:fa: 10:44:9c:1f:8b:ac:61:7a:a3:7c:41:bc:d3:4e:a9:50:04:e7: ed:07:a0:2d:df:e0:3e:6a:08:b7:fc:a7:8c:98:d9:47:53:94: 0b:c7:9c:3c:d9:37:0f:ce:f2:dd:15:ba:68:b6:61:4b:4a:09: eb:aa:ea:f8:47:cc:ed:53:a3:c8:06:23:15:b6:ee:d3:01:b2: a7:ec:5a:5a:05:5d:d4:0c:e5:cb:4e:19:60:38:e3:6b:40:f0: 6f:35:2b:2b:8c:1c:72:8e:6a:f2:38:07:14:e9:9d:75:1b:5a: 83:00:27:36:c0:1e:7f:26:e3:69:78:d3:99:66:6b:3f:5d:a1: 1b:8c:f5:e8:e4:23:d0:e6:e7:bc:9d:fb:18:22:84:e1:01:6a: 6e:bb:09:f4:f9:f5:31:27:f6:cf:33:d6:b7:36:9a:a7:6f:d0: 7b:0f:ab:1e:a1:88:6f:6a:5d:b1:e8:f4:54:9d:0f:92:26:20: 51:fe:46:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJKUWdjL8nd1H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk YmJmZTMxNDYtOGFhNC00NTVkLWE0ZWItOWMzZDYwMTJjNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiEHeieM1F+ki1EiBbnMWx/u33IWs/KPehZO iwheydjP31WAf/ER0ni3qaSQh6IRoLwQehfarOEbEK63Co8n2LYKxW7yRrdGo8Ys tc9MO5VvA7fMQ/WsPFg8pNoND0Rv96FFeLi4ZYHHse3hNODVJlwdeD6LQpWIy9M7 yq2nyFGIQdQXRFdrqb7Tqac6Honwjn1wDVEt3dYeLYIFn0T0Is6qzc6cjORpZ3RL if9zIulM3NcCSbkFn7B9vi3QGimoYhZtuHFYU4LEZQVrmwML1jVzgvR6fNcvqSnr lI9gKlzAXZYd1callX1IG6BCoMRhz1JwRLTsBJYGqOzKP/LEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoO557tceBGZq67MH++z20y0ZpPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgyNWQyMGUtOGU2Ni0z MjcxLWJlMDUtOWFjMTU4M2Y3ZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGREQ+iv9kiNuRlTtV+tFnnA5YqPzFKMlXCU3Hl0EF/3lanCFdL6tOxB akcE/gNPq6BKApHg69yAU1m/aFWrlfvxN8DCLX7G+hBEnB+LrGF6o3xBvNNOqVAE 5+0HoC3f4D5qCLf8p4yY2UdTlAvHnDzZNw/O8t0Vumi2YUtKCeuq6vhHzO1To8gG IxW27tMBsqfsWloFXdQM5ctOGWA442tA8G81KyuMHHKOavI4BxTpnXUbWoMAJzbA Hn8m42l405lmaz9doRuM9ejkI9Dm57yd+xgihOEBam67CfT59TEn9s8z1rc2mqdv 0HsPqx6hiG9qXbHo9FSdD5ImIFH+RpI= -----END CERTIFICATE-----Generated at Sat Jun 13 07:26:45 2026 by rpki-client