$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa File: f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa (raw, json) Hash identifier: Xj3+3ZQss2zqm7IhF4id4JxzVocE3izzW6hqT/tjPjU= Subject key identifier: A6:FA:92:9F:6E:DD:66:39:47:9C:06:4F:19:B2:0F:F4:AE:E1:54:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0C1ED4A6E113AA77874EAA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 7029 IP address blocks: 71.31.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:d4:a6:e1:13:aa:77:87:4e:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=92471def-1bd4-4b62-b3d8-4d30f1bea819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:e5:95:a6:16:94:ba:83:71:4b:c5:cd:4d: 0e:98:09:48:8f:a7:c1:36:10:ec:31:8b:b8:ae:69: ea:50:66:37:d4:68:50:13:f5:7a:f4:98:c2:90:87: d3:8a:75:6c:8e:73:a9:80:5d:bf:23:6f:78:41:3f: d6:a6:a9:ad:9a:57:95:82:d9:c6:fc:74:32:33:9b: 5c:82:39:74:99:3c:d0:c1:2b:e4:7c:a6:8b:7b:b9: 99:39:ac:5b:55:c5:9b:86:b1:58:4b:5e:1c:61:1b: 0c:1c:93:73:fa:58:22:b7:98:34:28:88:a8:e4:92: e3:35:3f:1b:10:99:22:ac:16:08:f6:3d:08:0f:0c: 3e:d4:25:31:1a:1f:4e:f0:e3:2d:b5:a0:b0:a0:14: 91:9f:cc:d4:6b:4f:8c:97:33:e8:45:90:2c:8e:e1: a9:36:32:c0:c0:68:a1:d3:22:b6:11:46:7e:e3:35: 77:d9:99:6c:d0:2a:7e:e5:db:46:c2:db:6b:db:3a: de:df:4a:16:e6:33:e4:ab:31:aa:66:a0:ad:70:00: 02:02:7a:32:67:56:a9:b7:ea:d4:17:57:fc:74:72: ab:45:1e:ca:41:04:55:5b:ab:03:09:53:af:51:e3: 49:32:b8:ce:3d:84:ec:18:71:93:19:94:39:8d:0d: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FA:92:9F:6E:DD:66:39:47:9C:06:4F:19:B2:0F:F4:AE:E1:54:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:94:e8:ca:34:f7:1e:61:62:12:e2:27:d8:8a:7b:79:06:ec: b7:01:ad:90:36:bc:06:ea:e8:0b:ba:0b:3f:1b:26:6b:41:31: a7:16:11:c3:03:fb:d2:6c:a9:60:c4:ef:c1:f1:50:31:63:0e: 5e:c0:90:21:cc:b8:6a:6d:be:be:94:44:06:b3:00:09:a8:3d: a3:b3:25:d9:ba:3e:77:3c:c1:82:da:b9:c9:02:2b:c3:11:2f: 17:7d:05:97:46:54:8e:02:a8:a8:9d:c2:c6:c0:35:08:ec:6d: 24:e1:be:db:78:13:65:ef:4c:ae:3e:7b:4e:a5:31:ba:cc:90: e6:3a:2a:7c:07:e4:d4:88:9e:ba:32:be:0b:42:ee:ff:61:bd: 23:40:02:7a:76:af:49:d2:50:ad:12:10:cc:3e:ba:44:f6:1d: 03:76:04:78:a2:f3:b2:ad:b2:be:0c:64:69:2b:65:c9:4f:e1: 09:f6:15:47:19:ca:ee:d7:c2:a2:c4:77:80:d9:96:f5:b3:08: 3a:ae:18:5c:2f:b1:4a:a6:0b:a0:69:0e:43:c2:e8:96:ec:87: 82:38:65:22:8d:61:12:f7:b4:f8:8b:5e:d3:80:b6:40:a9:be: 17:2e:82:38:0c:ee:fb:df:05:d8:4b:d6:42:46:3d:70:48:46: 66:44:84:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtSm4ROqd4dOqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk OTI0NzFkZWYtMWJkNC00YjYyLWIzZDgtNGQzMGYxYmVhODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgnllaYWlLqDcUvFzU0OmAlIj6fBNhDsMYu4 rmnqUGY31GhQE/V69JjCkIfTinVsjnOpgF2/I294QT/WpqmtmleVgtnG/HQyM5tc gjl0mTzQwSvkfKaLe7mZOaxbVcWbhrFYS14cYRsMHJNz+lgit5g0KIio5JLjNT8b EJkirBYI9j0IDww+1CUxGh9O8OMttaCwoBSRn8zUa0+MlzPoRZAsjuGpNjLAwGih 0yK2EUZ+4zV32Zls0Cp+5dtGwttr2zre30oW5jPkqzGqZqCtcAACAnoyZ1apt+rU F1f8dHKrRR7KQQRVW6sDCVOvUeNJMrjOPYTsGHGTGZQ5jQ2IxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb6kp9u3WY5R5wGTxmyD/Su4VTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjQzYmUzYTktNzFjNi0z NGFkLWIwZDMtZWRkMzljZWUzMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqU6Mo09x5hYhLiJ9iKe3kG7LcBrZA2vAbq6Au6Cz8bJmtBMacWEcMD +9JsqWDE78HxUDFjDl7AkCHMuGptvr6URAazAAmoPaOzJdm6Pnc8wYLauckCK8MR Lxd9BZdGVI4CqKidwsbANQjsbSThvtt4E2XvTK4+e06lMbrMkOY6KnwH5NSInroy vgtC7v9hvSNAAnp2r0nSUK0SEMw+ukT2HQN2BHii87Ktsr4MZGkrZclP4Qn2FUcZ yu7XwqLEd4DZlvWzCDquGFwvsUqmC6BpDkPC6Jbsh4I4ZSKNYRL3tPiLXtOAtkCp vhcugjgM7vvfBdhL1kJGPXBIRmZEhIE= -----END CERTIFICATE-----Generated at Sat Jun 13 06:01:40 2026 by rpki-client