$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68ec2170-5bd7-351d-86e9-f6f95a135eb3.roa File: 68ec2170-5bd7-351d-86e9-f6f95a135eb3.roa (raw, json) Hash identifier: V1MKEPc0E69tekskYmbdkDgnpgBrnF3kjTvRgRYVLr0= Subject key identifier: CA:42:01:84:39:E8:5B:AF:EC:79:B4:37:B6:B8:17:9C:5B:DE:CA:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA3AD60DC3CDECCCCCAC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68ec2170-5bd7-351d-86e9-f6f95a135eb3.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 71.31.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:3a:d6:0d:c3:cd:ec:cc:cc:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=c8aff45b-b4ab-4b55-933c-ba9a5589820a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ff:8e:93:f3:25:8c:e5:17:9a:fb:4a:4d:21: f2:35:be:7f:55:d8:bc:ab:aa:64:26:c3:88:c0:7d: bd:a6:c0:7c:e6:4d:64:e4:ef:bc:1d:ab:74:86:91: 34:e3:93:61:1d:aa:dc:8d:8d:4d:df:67:6a:9a:24: 4d:f7:fe:aa:66:c2:ff:de:e6:92:b4:ca:66:c7:a4: d8:ea:9f:39:1c:72:30:91:49:79:2a:17:b2:b5:7e: 19:42:08:5e:10:00:13:0f:60:51:69:68:6c:1c:2f: ea:7f:15:32:68:71:95:8d:de:3c:73:66:86:f9:c0: c9:a0:4e:2f:9c:7a:c3:79:75:de:6e:78:39:e2:16: 98:ad:47:d3:64:47:91:9a:0e:f2:43:73:82:08:ee: a9:bb:30:98:e2:ca:67:86:9d:5f:e7:6d:d3:6b:29: 44:65:17:06:89:89:40:a2:78:f3:f5:5c:f3:49:35: 75:2a:e7:75:7e:c4:67:e1:73:9a:75:aa:79:ba:70: 4e:61:28:23:a0:e1:36:bc:bd:e9:f7:22:dd:1a:00: 94:85:8f:24:3b:c5:71:f5:d9:4c:fb:ed:63:fa:da: d4:e3:90:b0:fa:5d:cd:d6:cf:97:b1:8e:07:7b:d7: 94:1d:40:02:2a:12:3f:c1:36:b9:0d:24:0b:2d:c3: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:42:01:84:39:E8:5B:AF:EC:79:B4:37:B6:B8:17:9C:5B:DE:CA:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68ec2170-5bd7-351d-86e9-f6f95a135eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:dd:b4:0d:eb:c8:3a:97:a5:41:1b:7a:96:94:2c:d4:9c:43: 04:ee:6e:4a:e3:2f:c1:f3:0f:23:d9:2f:e8:48:15:c6:e8:66: fd:01:7c:fa:ab:1f:07:ae:75:e2:43:c5:f3:c7:ea:8f:b5:a8: 22:b9:4b:86:d1:f0:80:f9:4e:ca:2a:58:e1:ca:e7:a1:80:37: bf:f3:54:5e:f5:e6:bc:01:13:07:72:d5:e8:07:b7:82:63:24: e8:80:e0:1c:30:a9:eb:45:93:e9:3e:61:a7:26:99:2b:c5:40: 8e:56:61:e0:6e:7d:52:2c:3d:1b:29:e3:a8:79:73:16:e8:d4: d4:af:aa:ea:cc:30:aa:dd:f3:20:07:48:73:2a:dc:6c:75:d5: 99:2c:b5:6c:4a:23:42:d0:19:fd:92:cd:05:98:3e:ef:b4:fc: cc:e4:e3:25:32:5b:49:d5:8e:f6:ca:b6:76:de:ee:e9:cd:92: f6:de:34:fd:b0:f3:34:8a:dd:0b:93:b4:e9:62:51:09:6a:e3: 86:79:62:fe:ff:1c:14:6f:4b:b4:82:a2:e6:81:d6:f6:d4:e6: 25:b5:86:3f:7b:79:85:46:56:00:b3:0e:6e:42:80:67:ca:d2: ff:d9:c9:82:89:6e:fc:6b:0a:37:e9:a4:f2:5c:fe:55:44:64: 36:c3:f3:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jrWDcPN7MzMrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YzhhZmY0NWItYjRhYi00YjU1LTkzM2MtYmE5YTU1ODk4MjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP+Ok/MljOUXmvtKTSHyNb5/Vdi8q6pkJsOI wH29psB85k1k5O+8Hat0hpE045NhHarcjY1N32dqmiRN9/6qZsL/3uaStMpmx6TY 6p85HHIwkUl5KheytX4ZQgheEAATD2BRaWhsHC/qfxUyaHGVjd48c2aG+cDJoE4v nHrDeXXebng54haYrUfTZEeRmg7yQ3OCCO6puzCY4spnhp1f523TaylEZRcGiYlA onjz9VzzSTV1Kud1fsRn4XOadap5unBOYSgjoOE2vL3p9yLdGgCUhY8kO8Vx9dlM ++1j+trU45Cw+l3N1s+XsY4He9eUHUACKhI/wTa5DSQLLcNDLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpCAYQ56Fuv7Hm0N7a4F5xb3sohMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjhlYzIxNzAtNWJkNy0z NTFkLTg2ZTktZjZmOTVhMTM1ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPdtA3ryDqXpUEbepaULNScQwTubkrjL8HzDyPZL+hIFcboZv0BfPqr HweudeJDxfPH6o+1qCK5S4bR8ID5TsoqWOHK56GAN7/zVF715rwBEwdy1egHt4Jj JOiA4BwwqetFk+k+YacmmSvFQI5WYeBufVIsPRsp46h5cxbo1NSvqurMMKrd8yAH SHMq3Gx11ZkstWxKI0LQGf2SzQWYPu+0/Mzk4yUyW0nVjvbKtnbe7unNkvbeNP2w 8zSK3QuTtOliUQlq44Z5Yv7/HBRvS7SCouaB1vbU5iW1hj97eYVGVgCzDm5CgGfK 0v/ZyYKJbvxrCjfppPJc/lVEZDbD8z8= -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:06 2026 by rpki-client