$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/925f6416-fac5-3a8a-8ff2-0d2e68f4ef37.roa File: 925f6416-fac5-3a8a-8ff2-0d2e68f4ef37.roa (raw, json) Hash identifier: dXhFAHQ4Y9cbh12c5laNO5X6z/dsXD+ZIxoSiHQlIqw= Subject key identifier: 8C:F1:BA:84:87:A9:FF:B6:EE:79:72:9C:5F:B2:B5:14:C3:40:96:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA098FE3684F8E123F5500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/925f6416-fac5-3a8a-8ff2-0d2e68f4ef37.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 71.31.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:09:8f:e3:68:4f:8e:12:3f:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=c194d9cd-e341-43b4-b799-a753484b827a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c0:1c:95:2d:4e:cd:3f:71:ac:ef:6a:b0:6f: 04:51:be:1d:50:5b:6a:e6:ba:43:25:98:6b:f5:8a: 79:69:1b:04:99:1d:ad:8a:0d:d2:0a:a5:83:95:b3: 36:da:1f:a7:af:7b:6c:38:d9:0f:c2:eb:5d:5b:15: 55:81:52:dc:83:d5:14:b7:f6:52:1b:b0:72:dd:a2: aa:d7:10:90:53:31:d6:bf:5b:24:fd:14:85:44:79: 8c:88:1f:ff:93:d9:aa:ea:40:ee:76:eb:f6:9b:1c: d1:55:c8:98:fd:6d:a6:3f:9d:60:b6:ae:7e:74:a3: 90:2f:cc:5d:8c:5d:91:9b:a4:11:89:8e:c9:6c:e2: cc:34:e1:eb:43:ed:19:62:53:25:2c:01:e3:a7:52: 8a:12:77:29:da:c5:8b:7d:e5:09:96:1b:9a:9d:4d: f4:5d:d3:4d:35:7b:ce:8d:46:5d:cc:ed:67:1c:79: 98:2d:c4:2e:6b:b4:e9:c6:a7:14:14:46:77:ba:ca: 98:75:f2:20:e0:86:8c:29:ba:5b:4a:7a:10:4b:23: 39:71:ea:a2:b2:3b:f8:32:d1:13:d3:86:17:72:3d: bd:b1:7a:53:7b:bf:b4:62:df:c1:45:a0:5e:e5:09: b5:8b:a8:b9:bc:b0:2f:fe:0c:45:e3:e1:a3:08:7b: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F1:BA:84:87:A9:FF:B6:EE:79:72:9C:5F:B2:B5:14:C3:40:96:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/925f6416-fac5-3a8a-8ff2-0d2e68f4ef37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8f:cc:0a:06:e9:10:ea:e4:62:b0:0e:5a:a3:e9:37:3a:c0: 14:e1:03:17:01:51:f3:4d:b3:d5:3d:99:b6:d0:42:4f:44:11: 70:10:c3:12:43:79:06:af:d0:49:28:c5:5a:da:7e:ef:b1:81: 1f:00:a7:a5:a9:cf:43:d6:00:27:e4:4e:ef:c1:9c:0d:3a:c5: 51:4a:cf:c5:8e:d6:63:d0:ae:15:c6:3c:51:91:05:fa:30:c2: b3:74:1c:5b:d0:01:f2:c6:bc:4a:d3:89:e4:4f:0e:b1:ba:95: 4e:00:57:fa:45:1c:68:03:88:40:d7:9f:94:f7:39:29:a6:c0: e4:7c:bf:cb:fc:c3:b9:01:57:25:67:1c:4d:55:00:ce:65:45: f9:60:2d:78:76:74:28:11:f0:67:c8:97:40:8a:9a:84:6f:72: 43:2d:08:a0:89:2d:08:b3:a3:c6:0b:05:57:c0:af:74:d4:6f: 8f:92:58:e0:ea:3d:07:00:d3:9e:bf:d1:0e:d6:29:36:f7:31: d5:45:64:35:a1:dd:6c:13:23:e9:4c:08:e8:81:7b:79:df:f0: 90:34:31:05:87:70:7c:52:e5:d3:40:58:be:7b:40:b2:ff:d3: d6:61:cd:d7:49:5b:22:92:47:4c:75:4f:91:42:18:1d:d3:b6: 1b:12:58:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gmP42hPjhI/VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YzE5NGQ5Y2QtZTM0MS00M2I0LWI3OTktYTc1MzQ4NGI4MjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosAclS1OzT9xrO9qsG8EUb4dUFtq5rpDJZhr 9Yp5aRsEmR2tig3SCqWDlbM22h+nr3tsONkPwutdWxVVgVLcg9UUt/ZSG7By3aKq 1xCQUzHWv1sk/RSFRHmMiB//k9mq6kDuduv2mxzRVciY/W2mP51gtq5+dKOQL8xd jF2Rm6QRiY7JbOLMNOHrQ+0ZYlMlLAHjp1KKEncp2sWLfeUJlhuanU30XdNNNXvO jUZdzO1nHHmYLcQua7TpxqcUFEZ3usqYdfIg4IaMKbpbSnoQSyM5ceqisjv4MtET 04YXcj29sXpTe7+0Yt/BRaBe5Qm1i6i5vLAv/gxF4+GjCHvoKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzxuoSHqf+27nlynF+ytRTDQJbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTI1ZjY0MTYtZmFjNS0z YThhLThmZjItMGQyZTY4ZjRlZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGPzAoG6RDq5GKwDlqj6Tc6wBThAxcBUfNNs9U9mbbQQk9EEXAQwxJD eQav0EkoxVrafu+xgR8Ap6Wpz0PWACfkTu/BnA06xVFKz8WO1mPQrhXGPFGRBfow wrN0HFvQAfLGvErTieRPDrG6lU4AV/pFHGgDiEDXn5T3OSmmwOR8v8v8w7kBVyVn HE1VAM5lRflgLXh2dCgR8GfIl0CKmoRvckMtCKCJLQizo8YLBVfAr3TUb4+SWODq PQcA056/0Q7WKTb3MdVFZDWh3WwTI+lMCOiBe3nf8JA0MQWHcHxS5dNAWL57QLL/ 09ZhzddJWyKSR0x1T5FCGB3TthsSWM4= -----END CERTIFICATE-----Generated at Thu Mar 26 15:01:16 2026 by rpki-client