$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca6eef30-f7aa-3f9c-ab60-73282d5d8556.roa File: ca6eef30-f7aa-3f9c-ab60-73282d5d8556.roa (raw, json) Hash identifier: JQHrkBPEyA1mdx+JIYdt1RFrljEtlG5S07nUHrOpxZs= Subject key identifier: BF:F9:2E:46:54:24:C2:F8:2B:8D:87:54:08:92:EB:6F:06:21:3C:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024231CC4E9B289C304CA000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca6eef30-f7aa-3f9c-ab60-73282d5d8556.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 71.31.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:31:cc:4e:9b:28:9c:30:4c:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=74ff0976-1193-433a-91bf-c27302ad816c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f2:78:e2:03:ca:a9:4a:1c:63:df:10:63:33: 97:18:67:bf:8f:29:54:89:c7:18:a9:dc:27:4d:4b: 53:5d:b6:d6:fb:b2:d9:50:01:4b:31:bc:a9:2d:cc: 7f:e5:52:d8:e8:9c:ea:56:29:46:24:d9:04:54:8c: ea:8a:e4:8a:31:a2:de:89:c9:fd:57:83:0e:0f:05: 27:ad:ab:1a:9d:ba:41:cc:f2:35:df:0c:dd:df:9f: 2d:09:96:9c:f8:e1:7c:8d:93:61:8c:e8:14:c2:e5: 8a:d2:d2:06:38:17:1a:8c:ea:1f:71:95:2d:72:bb: 44:3c:4b:61:18:5e:e5:26:7b:61:03:83:53:a8:96: 98:53:fd:62:d1:d7:eb:7d:0d:bd:6d:60:6d:45:c4: a6:31:99:3c:9e:12:cc:b5:87:d7:b8:be:89:c9:6b: a0:12:b9:3f:ec:13:38:bf:b7:69:b1:84:71:d6:fb: a8:b2:bf:a6:eb:95:c4:6f:c5:4d:33:2c:9c:a8:5c: 8b:35:46:ca:4a:29:c9:77:0c:10:e1:a3:9b:c3:6f: 79:10:aa:6f:73:f7:f1:8d:92:35:59:a9:c4:ee:aa: 63:17:ac:ab:d6:68:1a:78:0d:89:96:6e:0a:e2:ae: 09:2f:6b:0d:ce:2e:13:ba:51:7a:d2:ce:6f:2b:b5: 8e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F9:2E:46:54:24:C2:F8:2B:8D:87:54:08:92:EB:6F:06:21:3C:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca6eef30-f7aa-3f9c-ab60-73282d5d8556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:4d:12:7b:f9:91:71:5b:e6:08:17:10:58:b3:15:e0:97:1f: e3:63:34:48:2a:b0:ed:a5:61:ee:00:d3:e4:77:dd:ed:bb:8b: 6b:20:a0:91:82:a4:68:6e:6e:ac:2c:f3:4a:e3:0a:70:8e:66: 94:35:35:a2:9b:35:be:3f:64:32:eb:a5:11:8e:8a:fe:4f:16: cd:fa:d8:13:53:c9:5e:f7:80:0f:1f:ab:23:43:57:10:98:e6: 36:c3:13:79:cb:97:f2:5e:4e:c5:10:2f:d0:02:a7:06:15:51: 5a:46:85:5c:cb:f0:12:6a:98:b7:53:cd:42:50:10:65:e4:56: c2:5e:8a:27:56:55:17:f1:7e:f3:f0:ce:33:e5:4c:52:9d:e4: 9e:ef:87:48:aa:d5:dc:6d:b4:2e:a6:4c:e2:65:d3:ad:69:f7: d0:b2:0c:cf:12:44:1c:b9:69:68:65:7b:8b:dd:43:c7:e8:ad: 95:08:90:6c:15:d6:77:07:d9:63:14:45:ca:82:b1:b1:f6:59: f7:fb:d1:5f:ff:6b:c2:08:2b:77:9e:1f:4c:11:3b:3b:9e:66: 80:ba:5c:6e:32:7b:84:78:00:65:8c:1f:af:37:0f:87:dd:94: e4:9c:55:ac:93:32:9d:3e:0c:86:8b:cc:72:45:00:58:c5:68: 10:91:89:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjHMTpsonDBMoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NzRmZjA5NzYtMTE5My00MzNhLTkxYmYtYzI3MzAyYWQ4MTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvJ44gPKqUocY98QYzOXGGe/jylUiccYqdwn TUtTXbbW+7LZUAFLMbypLcx/5VLY6JzqVilGJNkEVIzqiuSKMaLeicn9V4MODwUn rasanbpBzPI13wzd358tCZac+OF8jZNhjOgUwuWK0tIGOBcajOofcZUtcrtEPEth GF7lJnthA4NTqJaYU/1i0dfrfQ29bWBtRcSmMZk8nhLMtYfXuL6JyWugErk/7BM4 v7dpsYRx1vuosr+m65XEb8VNMyycqFyLNUbKSinJdwwQ4aObw295EKpvc/fxjZI1 WanE7qpjF6yr1mgaeA2Jlm4K4q4JL2sNzi4TulF60s5vK7WOPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/5LkZUJML4K42HVAiS628GITyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E2ZWVmMzAtZjdhYS0z ZjljLWFiNjAtNzMyODJkNWQ4NTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJNEnv5kXFb5ggXEFizFeCXH+NjNEgqsO2lYe4A0+R33e27i2sgoJGC pGhubqws80rjCnCOZpQ1NaKbNb4/ZDLrpRGOiv5PFs362BNTyV73gA8fqyNDVxCY 5jbDE3nLl/JeTsUQL9ACpwYVUVpGhVzL8BJqmLdTzUJQEGXkVsJeiidWVRfxfvPw zjPlTFKd5J7vh0iq1dxttC6mTOJl061p99CyDM8SRBy5aWhle4vdQ8forZUIkGwV 1ncH2WMURcqCsbH2Wff70V//a8IIK3eeH0wROzueZoC6XG4ye4R4AGWMH683D4fd lOScVayTMp0+DIaLzHJFAFjFaBCRifU= -----END CERTIFICATE-----Generated at Tue Oct 6 05:08:48 2026 by rpki-client