$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9b30708-fdda-328c-b946-a894d5172642.roa File: a9b30708-fdda-328c-b946-a894d5172642.roa (raw, json) Hash identifier: U6wCgzt5Gyo5v9yxP8czM+yf0tepxP+oo/zLUDTWNtA= Subject key identifier: 3B:9C:74:19:41:8D:1C:B4:BE:13:A0:55:76:CB:06:E7:3E:86:FF:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E90BA4E2AE4D76B78BAA71A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9b30708-fdda-328c-b946-a894d5172642.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 7029 IP address blocks: 71.31.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:4e:2a:e4:d7:6b:78:ba:a7:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=3b99cf2a-1b95-42d6-ab1a-06c6a9c7552a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8a:52:c0:63:a4:b2:24:74:5b:fe:e8:ce:fa: 61:54:b6:0a:5e:8e:2f:f7:b9:94:0a:b0:8d:f8:19: 2e:2d:09:87:85:7c:8d:c4:04:09:a0:a6:80:c2:a1: fa:8e:39:24:cc:41:92:4d:18:d1:f6:64:76:1f:8b: 68:eb:a9:e7:f8:1c:21:d0:28:c3:e4:4e:48:c3:58: c9:63:78:f5:21:2e:bf:98:23:a9:43:0c:94:9b:15: 26:b9:d6:0a:39:bd:db:9a:b5:33:e7:b3:c9:29:23: fe:09:5b:25:09:57:ed:ee:51:cd:6c:25:d8:c4:b1: 4f:81:7d:0a:43:cf:a4:bb:bc:ba:0f:94:c0:b2:5f: 92:ff:9f:61:af:3a:48:a7:a2:46:be:96:ce:4c:82: 5b:93:c0:d2:73:56:72:6a:74:b2:c8:26:ce:d0:96: fb:7d:35:fb:44:9e:3b:07:d9:c7:7f:f4:1d:27:9f: 9e:af:4d:f0:b0:f3:9b:38:be:4f:48:1e:84:da:a5: 10:9a:79:2b:04:e4:61:e0:0c:43:6d:eb:9e:0b:13: c5:84:0f:17:a3:d6:b3:a4:70:50:d3:5c:7f:0f:10: 6a:26:45:06:98:93:11:a0:ec:49:15:9e:c6:b3:04: 4e:37:fc:fe:17:52:6c:19:48:69:5a:e6:f2:60:c0: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9C:74:19:41:8D:1C:B4:BE:13:A0:55:76:CB:06:E7:3E:86:FF:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9b30708-fdda-328c-b946-a894d5172642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:33:2c:ae:fe:42:a8:10:8b:a2:86:1b:18:b7:6f:50:90:7b: 90:9a:a2:0c:66:4a:62:33:d6:d0:1b:cd:42:59:8d:9f:a3:55: 19:37:56:8e:36:47:6d:7d:2e:52:5d:75:06:07:2f:54:65:e6: 1c:82:14:5e:89:9a:df:e5:75:5d:9e:fa:d8:e1:a9:03:04:66: 16:98:86:fb:7c:56:e6:40:4e:24:a0:8d:13:2a:89:43:03:60: 53:db:70:56:63:63:b6:dd:cd:b5:ee:a7:dd:e8:e8:46:23:13: 85:79:da:c8:39:ad:f3:37:03:01:1e:8f:be:08:13:c3:99:fe: c8:7d:d6:43:29:f6:ce:7d:83:c1:ba:c3:03:0c:da:88:81:d2: 3e:f9:d8:99:03:f6:b6:7c:82:fb:93:77:8c:bc:8f:01:dd:d4: bd:aa:c8:8f:2d:9f:b2:f3:10:c6:74:d3:a9:6e:b3:f7:78:ad: d2:8c:0b:2a:06:30:b6:8e:c4:96:73:6e:5c:e8:3f:7b:1f:c2: 43:7b:1c:35:63:4f:17:da:36:2f:73:83:a2:08:0b:97:ba:a7: 20:e1:55:66:a8:a0:a9:6a:ca:4e:b8:63:d8:ca:b1:87:3f:6b: 78:37:56:d1:03:fa:1f:3d:dd:a4:7f:5c:c1:33:c4:0d:5c:2b: 3c:28:2f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Quk4q5NdreLqnGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk M2I5OWNmMmEtMWI5NS00MmQ2LWFiMWEtMDZjNmE5Yzc1NTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIpSwGOksiR0W/7ozvphVLYKXo4v97mUCrCN +BkuLQmHhXyNxAQJoKaAwqH6jjkkzEGSTRjR9mR2H4to66nn+Bwh0CjD5E5Iw1jJ Y3j1IS6/mCOpQwyUmxUmudYKOb3bmrUz57PJKSP+CVslCVft7lHNbCXYxLFPgX0K Q8+ku7y6D5TAsl+S/59hrzpIp6JGvpbOTIJbk8DSc1ZyanSyyCbO0Jb7fTX7RJ47 B9nHf/QdJ5+er03wsPObOL5PSB6E2qUQmnkrBORh4AxDbeueCxPFhA8Xo9azpHBQ 01x/DxBqJkUGmJMRoOxJFZ7GswRON/z+F1JsGUhpWubyYMCRiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDucdBlBjRy0vhOgVXbLBuc+hv9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTliMzA3MDgtZmRkYS0z MjhjLWI5NDYtYTg5NGQ1MTcyNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx8yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkzLK7+QqgQi6KGGxi3b1CQe5CaogxmSmIz1tAbzUJZjZ+jVRk3Vo42 R219LlJddQYHL1Rl5hyCFF6Jmt/ldV2e+tjhqQMEZhaYhvt8VuZATiSgjRMqiUMD YFPbcFZjY7bdzbXup93o6EYjE4V52sg5rfM3AwEej74IE8OZ/sh91kMp9s59g8G6 wwMM2oiB0j752JkD9rZ8gvuTd4y8jwHd1L2qyI8tn7LzEMZ006lus/d4rdKMCyoG MLaOxJZzblzoP3sfwkN7HDVjTxfaNi9zg6IIC5e6pyDhVWaooKlqyk64Y9jKsYc/ a3g3VtED+h893aR/XMEzxA1cKzwoL1A= -----END CERTIFICATE-----Generated at Thu Jul 23 23:33:06 2026 by rpki-client