$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa File: e825d20e-8e66-3271-be05-9ac1583f7e38.roa (raw, json) Hash identifier: hW5pGBm0NbfL5+aqdkYWuFGdu5MQ83cP9RkSvdMCpZE= Subject key identifier: 88:6F:3C:B7:6B:3E:DA:9B:E3:6D:B1:44:A0:5C:24:3B:39:6B:6B:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D3E000BB52E837D001CDF1000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 7029 IP address blocks: 71.31.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:0b:b5:2e:83:7d:00:1c:df:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=ddc96b23-b45d-482c-8569-4b6c3d0a622e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:6c:d4:23:ca:3a:b0:72:f4:ea:bd:24:76: 60:ea:f3:af:56:7e:7f:c6:f3:b2:a3:fb:88:45:b4: bc:9f:cf:9b:e0:81:ac:36:dd:da:95:47:77:4f:2d: 0f:5e:9c:e6:a1:59:09:91:0d:af:13:bb:55:5e:c3: 8e:82:12:2c:46:b8:63:6e:1c:38:f7:a2:5e:2a:22: b9:2a:c6:e6:fa:d3:34:02:b3:ee:62:ed:30:b3:5a: b4:0d:98:09:8b:01:68:0b:32:d3:c6:0a:04:53:ec: ba:9e:cf:c4:8d:05:70:6f:f7:8f:8e:44:f6:fa:30: 45:16:f5:95:f5:17:02:72:d4:e4:c4:cd:51:57:9e: fa:05:66:db:02:66:0a:eb:dd:1d:5c:a4:4a:e1:20: 69:80:c3:25:c2:35:33:ea:4b:fd:70:61:1a:79:e4: d6:19:0c:46:76:f7:4b:d8:15:fd:ff:10:f5:7c:65: ad:71:4e:4a:60:bc:3a:48:35:06:58:b9:9d:9e:5b: c5:56:b1:fb:f2:ca:39:a8:37:d1:3a:76:12:34:e2: bd:57:4a:af:30:e9:fa:26:d2:2f:59:0c:db:74:d5: 51:25:1b:40:56:a1:a1:b6:3a:a9:bd:cc:41:6b:62: 4e:ec:ce:bd:1a:6f:8a:30:b8:70:0d:e3:48:ab:33: 4d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6F:3C:B7:6B:3E:DA:9B:E3:6D:B1:44:A0:5C:24:3B:39:6B:6B:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ad:35:10:86:b8:fe:1c:40:f3:82:7e:d0:01:06:fc:02:40: 0d:94:b8:93:7a:25:a8:ac:f2:6d:a7:31:6d:2e:bc:f9:c9:f9: 68:6f:8d:82:2d:67:12:e0:2a:15:30:d7:ae:bc:47:b4:59:c4: ef:34:11:47:45:21:86:53:91:9d:d7:72:47:16:f6:7b:f6:48: 98:fd:7e:33:72:d1:13:24:22:02:58:47:dc:0b:0e:6f:a7:87: 35:6a:88:d8:c1:07:b3:75:13:a5:bd:17:36:2a:d4:3c:b3:65: a9:18:5d:76:9c:8c:90:52:01:3c:10:1d:ec:24:c6:49:91:f4: 38:46:ab:16:06:2f:d1:65:04:61:de:84:81:10:39:14:4a:ff: 19:38:e7:5e:39:9d:e1:56:62:3e:62:1d:5f:88:59:9e:50:e7: 4a:a4:4e:92:d3:e1:11:e0:4b:61:73:93:9d:1d:15:a5:8a:75: 3d:55:fb:0c:f6:14:79:13:8d:4d:e3:7b:38:d3:71:06:ad:f1: b4:71:fb:15:17:5d:f6:16:63:66:d2:81:94:f3:cf:60:dc:6c: 40:a7:0e:06:9a:2c:66:cf:f0:83:e7:2f:43:f8:e2:33:99:99: 66:f0:49:57:89:60:44:af:fa:20:28:88:37:72:d1:fa:c6:85: 58:8d:da:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAu1LoN9ABzfEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGRjOTZiMjMtYjQ1ZC00ODJjLTg1NjktNGI2YzNkMGE2MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ds1CPKOrBy9Oq9JHZg6vOvVn5/xvOyo/uI RbS8n8+b4IGsNt3alUd3Ty0PXpzmoVkJkQ2vE7tVXsOOghIsRrhjbhw496JeKiK5 Ksbm+tM0ArPuYu0ws1q0DZgJiwFoCzLTxgoEU+y6ns/EjQVwb/ePjkT2+jBFFvWV 9RcCctTkxM1RV576BWbbAmYK690dXKRK4SBpgMMlwjUz6kv9cGEaeeTWGQxGdvdL 2BX9/xD1fGWtcU5KYLw6SDUGWLmdnlvFVrH78so5qDfROnYSNOK9V0qvMOn6JtIv WQzbdNVRJRtAVqGhtjqpvcxBa2JO7M69Gm+KMLhwDeNIqzNNfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhvPLdrPtqb422xRKBcJDs5a2tTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgyNWQyMGUtOGU2Ni0z MjcxLWJlMDUtOWFjMTU4M2Y3ZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6tNRCGuP4cQPOCftABBvwCQA2UuJN6Jais8m2nMW0uvPnJ+WhvjYIt ZxLgKhUw1668R7RZxO80EUdFIYZTkZ3XckcW9nv2SJj9fjNy0RMkIgJYR9wLDm+n hzVqiNjBB7N1E6W9FzYq1DyzZakYXXacjJBSATwQHewkxkmR9DhGqxYGL9FlBGHe hIEQORRK/xk45145neFWYj5iHV+IWZ5Q50qkTpLT4RHgS2Fzk50dFaWKdT1V+wz2 FHkTjU3jezjTcQat8bRx+xUXXfYWY2bSgZTzz2DcbECnDgaaLGbP8IPnL0P44jOZ mWbwSVeJYESv+iAoiDdy0frGhViN2oo= -----END CERTIFICATE-----Generated at Thu Mar 26 08:03:51 2026 by rpki-client