$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1361da5-87be-3ac3-a969-1c99e08edc8d.roa File: f1361da5-87be-3ac3-a969-1c99e08edc8d.roa (raw, json) Hash identifier: 2LSKg2JYGjScEtg/cIR2bxZH+TxFCRO1atgCCXW0J90= Subject key identifier: A8:A9:C0:ED:F4:7B:42:D1:9F:B6:0E:AE:8B:5E:3B:6D:EA:FB:AC:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D842C576817727F362D0D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1361da5-87be-3ac3-a969-1c99e08edc8d.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 71.31.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:2c:57:68:17:72:7f:36:2d:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=bc490ecc-caf3-4361-bac7-b2564977c896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:37:30:44:7b:50:45:17:a0:0a:54:4d:96:26: d5:8f:78:96:e2:a2:59:74:32:6b:57:1a:8c:eb:7c: 23:8b:9f:4f:8a:f0:4b:46:d4:96:6d:9d:96:2a:79: 1b:6b:39:51:5c:6c:ca:65:da:b0:9f:d6:9b:dc:9c: aa:53:59:ec:11:5e:93:c9:3a:dd:9b:16:fa:d5:70: 74:66:a7:e2:c8:56:f3:a9:d8:15:e9:65:6a:c8:49: ed:76:e6:75:49:3f:39:70:23:8b:23:06:68:dc:b4: 21:f9:b8:96:33:f3:4c:84:7c:ba:fb:8a:a8:ee:6e: 6e:0a:b5:4b:63:8a:35:62:73:da:e9:1e:15:2c:13: 03:f5:ca:52:70:46:94:d7:4b:6b:fd:98:c3:77:e2: 70:cd:2e:ec:77:e6:07:ed:76:dd:72:d4:d6:a7:90: 6b:23:22:a5:58:18:dd:84:37:97:04:93:44:fd:ed: cc:6c:b2:eb:b8:91:2f:5f:f5:72:0c:9f:0e:bc:a7: 84:7c:fb:aa:b6:27:1b:93:17:3f:cb:98:4c:4f:d8: dc:69:58:b5:fb:05:62:3f:2f:41:e2:c4:78:0b:1c: 51:e4:21:a9:e5:03:64:03:ea:43:bd:fc:70:e1:9d: f5:6a:24:7d:7c:c9:34:60:e5:c0:1c:f0:4e:80:5a: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A9:C0:ED:F4:7B:42:D1:9F:B6:0E:AE:8B:5E:3B:6D:EA:FB:AC:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1361da5-87be-3ac3-a969-1c99e08edc8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:61:71:e2:d1:15:06:87:30:46:46:5d:13:e3:9a:e9:bc:7c: dd:36:e5:8a:41:5a:70:f3:58:3f:1d:d9:84:2d:e3:a5:e4:d6: a7:36:62:5e:98:c1:73:8f:85:1e:ad:70:59:3f:d2:0c:e9:0b: bf:bd:2e:84:48:f2:a8:f1:8c:7c:13:fd:d3:4c:07:c3:a3:1f: 7d:a6:0f:f4:83:3c:91:0f:2d:e1:b3:72:c9:ac:70:b9:32:c3: cf:2b:8d:cd:cd:8b:38:cd:ad:bf:68:2a:08:59:f2:39:28:5a: f5:ea:0d:ea:f0:a8:74:b5:9e:a4:9f:c6:05:17:98:ab:ed:83: 80:a7:b6:f9:4f:69:b6:b4:3c:ce:f7:e7:57:38:13:ec:b4:9c: 62:0a:34:dc:a1:47:8e:73:ce:38:7a:a2:a5:d0:93:ef:5d:74: 5d:32:e5:e9:75:75:63:53:81:8b:3c:fb:21:79:e0:ee:7b:51: 76:d6:5a:82:c3:ef:1d:b3:9d:40:86:c1:0d:18:8c:b9:a0:79: d0:8e:a3:71:1b:4b:60:f7:fe:2e:60:0d:33:cf:74:15:38:24: 94:83:03:38:0d:f3:1a:7c:b8:94:e2:52:1d:8c:49:fc:37:b5: e9:0a:39:3e:8a:cb:cb:03:68:17:2f:62:2a:52:c8:a2:22:69: 61:71:ee:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCxXaBdyfzYtDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk YmM0OTBlY2MtY2FmMy00MzYxLWJhYzctYjI1NjQ5NzdjODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDcwRHtQRRegClRNlibVj3iW4qJZdDJrVxqM 63wji59PivBLRtSWbZ2WKnkbazlRXGzKZdqwn9ab3JyqU1nsEV6TyTrdmxb61XB0 ZqfiyFbzqdgV6WVqyEntduZ1ST85cCOLIwZo3LQh+biWM/NMhHy6+4qo7m5uCrVL Y4o1YnPa6R4VLBMD9cpScEaU10tr/ZjDd+JwzS7sd+YH7XbdctTWp5BrIyKlWBjd hDeXBJNE/e3MbLLruJEvX/VyDJ8OvKeEfPuqticbkxc/y5hMT9jcaVi1+wViPy9B 4sR4CxxR5CGp5QNkA+pDvfxw4Z31aiR9fMk0YOXAHPBOgFqHWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKipwO30e0LRn7YOroteO23q+6wyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjEzNjFkYTUtODdiZS0z YWMzLWE5NjktMWM5OWUwOGVkYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5hceLRFQaHMEZGXRPjmum8fN025YpBWnDzWD8d2YQt46Xk1qc2Yl6Y wXOPhR6tcFk/0gzpC7+9LoRI8qjxjHwT/dNMB8OjH32mD/SDPJEPLeGzcsmscLky w88rjc3NizjNrb9oKghZ8jkoWvXqDerwqHS1nqSfxgUXmKvtg4CntvlPaba0PM73 51c4E+y0nGIKNNyhR45zzjh6oqXQk+9ddF0y5el1dWNTgYs8+yF54O57UXbWWoLD 7x2znUCGwQ0YjLmgedCOo3EbS2D3/i5gDTPPdBU4JJSDAzgN8xp8uJTiUh2MSfw3 tekKOT6Ky8sDaBcvYipSyKIiaWFx7iQ= -----END CERTIFICATE-----Generated at Sat Jun 13 08:55:50 2026 by rpki-client