$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d25a7acf-1d46-3e1a-863f-915f0faee9d2.roa File: d25a7acf-1d46-3e1a-863f-915f0faee9d2.roa (raw, json) Hash identifier: DtLvjOs5f8MxWgaCUcX2cLXmIoFjIdhnetXPKcJDamU= Subject key identifier: 70:AF:83:70:43:85:42:62:E1:91:0C:F5:7A:73:28:15:1C:8D:D4:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7CA72C5F7B62C7312C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d25a7acf-1d46-3e1a-863f-915f0faee9d2.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 395464 IP address blocks: 71.31.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7c:a7:2c:5f:7b:62:c7:31:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=079de6a5-9009-427a-b48e-f4ce959919b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:48:15:0e:e3:85:84:80:c6:71:17:65:9d:ad: d6:91:18:96:aa:ea:8c:a0:e5:f3:60:6f:f4:24:42: fc:40:e7:23:69:5a:4e:3b:17:cc:99:b8:5c:62:11: 87:47:02:46:b7:7d:cb:65:b0:4e:da:17:1c:b3:7b: 65:3c:4e:ce:4e:84:73:24:f3:14:76:73:45:81:dd: 64:36:6d:ad:36:94:82:ae:f8:55:f2:99:d7:9d:bf: dd:1c:57:a2:c0:74:79:39:53:ff:6f:5c:82:30:5b: fb:3e:92:4d:60:00:5f:39:b5:7d:57:f3:44:11:e5: 33:78:6e:bd:86:71:d6:a3:7e:05:49:33:51:fd:d2: 18:8b:ec:69:30:2c:31:97:1c:e2:aa:60:01:0d:25: d0:de:82:30:78:c1:1f:d5:ad:8a:e8:3a:1a:74:eb: 37:98:5b:0f:d8:68:cd:c4:8b:dc:02:2b:2c:dc:96: 18:e4:b8:cd:82:7b:31:46:83:19:23:96:5f:81:4d: 11:9f:58:12:1a:47:67:de:a1:d8:1b:6f:90:42:89: ca:3e:5f:de:ac:77:63:e7:e8:22:72:93:90:25:14: 6c:6b:90:22:63:40:95:4d:36:69:ee:02:53:f0:84: 3e:69:19:67:b1:a6:fb:e0:f5:3b:25:68:2e:8f:b0: 07:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AF:83:70:43:85:42:62:E1:91:0C:F5:7A:73:28:15:1C:8D:D4:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d25a7acf-1d46-3e1a-863f-915f0faee9d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c2:fa:24:fc:5b:cd:f3:d6:97:06:be:76:41:60:c2:2b:a4: 11:d3:84:07:c4:c8:4c:23:35:f3:a2:14:dd:99:74:9a:07:ac: 40:12:b8:d1:39:a8:7c:05:53:1e:c1:96:5d:a6:39:99:2d:12: 11:bd:10:90:f3:69:62:bd:ac:64:3f:a2:b0:44:8f:81:d5:1f: fd:f8:67:31:d8:fd:a1:90:21:a2:9b:cf:5f:d1:78:6b:3a:33: 6f:2a:54:8a:0f:81:57:a1:41:0a:ab:52:fb:1f:6e:f1:e9:d9: 09:98:32:29:9b:4d:44:de:2f:c5:8c:bb:7f:88:7e:06:69:fd: 1d:dd:d2:ab:50:a9:69:dc:b4:d4:fc:6f:6b:99:04:68:c8:b3: d1:83:12:a6:a9:08:62:f8:46:fa:67:6b:4f:6c:4d:44:20:b9: a9:30:df:86:7a:21:8b:89:f2:c9:57:97:36:77:9a:29:e7:52: c5:13:db:aa:36:0d:08:a9:6f:79:b1:3c:fa:b9:6b:6b:35:76: ab:69:67:8d:43:58:8c:a8:34:59:95:e3:d8:fd:73:63:dc:1d: 40:2d:17:93:59:74:ec:a3:52:fd:ab:be:4d:7a:32:ad:50:56: 6b:a0:88:9e:39:ae:59:73:29:ee:c7:65:cc:8b:67:60:72:39: 24:98:e7:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnynLF97YscxLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MDc5ZGU2YTUtOTAwOS00MjdhLWI0OGUtZjRjZTk1OTkxOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0gVDuOFhIDGcRdlna3WkRiWquqMoOXzYG/0 JEL8QOcjaVpOOxfMmbhcYhGHRwJGt33LZbBO2hccs3tlPE7OToRzJPMUdnNFgd1k Nm2tNpSCrvhV8pnXnb/dHFeiwHR5OVP/b1yCMFv7PpJNYABfObV9V/NEEeUzeG69 hnHWo34FSTNR/dIYi+xpMCwxlxziqmABDSXQ3oIweMEf1a2K6DoadOs3mFsP2GjN xIvcAiss3JYY5LjNgnsxRoMZI5ZfgU0Rn1gSGkdn3qHYG2+QQonKPl/erHdj5+gi cpOQJRRsa5AiY0CVTTZp7gJT8IQ+aRlnsab74PU7JWguj7AH2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCvg3BDhUJi4ZEM9XpzKBUcjdSBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI1YTdhY2YtMWQ0Ni0z ZTFhLTg2M2YtOTE1ZjBmYWVlOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx8eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXC+iT8W83z1pcGvnZBYMIrpBHThAfEyEwjNfOiFN2ZdJoHrEASuNE5 qHwFUx7Bll2mOZktEhG9EJDzaWK9rGQ/orBEj4HVH/34ZzHY/aGQIaKbz1/ReGs6 M28qVIoPgVehQQqrUvsfbvHp2QmYMimbTUTeL8WMu3+IfgZp/R3d0qtQqWnctNT8 b2uZBGjIs9GDEqapCGL4Rvpna09sTUQguakw34Z6IYuJ8slXlzZ3minnUsUT26o2 DQipb3mxPPq5a2s1dqtpZ41DWIyoNFmV49j9c2PcHUAtF5NZdOyjUv2rvk16Mq1Q VmugiJ45rllzKe7HZcyLZ2ByOSSY59s= -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:00 2026 by rpki-client