$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8ab029b-01e2-3287-84ba-e14d9aa83ef5.roa File: e8ab029b-01e2-3287-84ba-e14d9aa83ef5.roa (raw, json) Hash identifier: jhfpyRtko4LsCZT8NKGOU85QPF6658ju4LeOX+XQ9CY= Subject key identifier: 27:9E:63:B3:35:11:44:62:16:E9:62:9D:DF:BF:83:D8:60:02:F3:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D07ACECB12A1C65F77490FE90 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8ab029b-01e2-3287-84ba-e14d9aa83ef5.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 7029 IP address blocks: 71.31.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:ec:b1:2a:1c:65:f7:74:90:fe:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=70b58bcc-4d10-4ca2-a7cf-5ce2f7b4a085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:23:1a:54:01:5f:43:c5:e6:a7:04:ab:55:6a: e9:ff:ae:6a:96:ca:57:98:2f:25:9f:62:1c:57:f6: 45:29:2c:6e:3a:de:af:44:be:b9:51:1d:67:78:b6: 21:d0:f5:ca:41:87:34:b1:e6:f6:49:33:7a:2b:4a: 7e:46:8b:3a:6e:93:98:86:81:5d:58:1c:0d:cf:70: a2:84:dc:d3:38:c8:de:d2:4f:1f:17:a4:ed:33:e0: a5:3a:1b:ef:2d:f2:ab:51:d9:10:8d:01:b9:37:84: a3:2b:79:7d:30:07:24:52:32:cb:8f:9d:cb:0a:cd: a3:3f:9f:a5:0d:cc:5f:02:70:26:fa:26:32:ca:1b: f9:0d:bb:50:7e:e2:a2:b8:8b:25:1d:d9:7e:8d:57: 15:6d:2e:89:be:3b:0d:4a:5e:65:6d:b4:fb:7d:d9: 01:14:42:90:ca:39:c4:fb:be:0a:7d:23:7c:75:c2: 94:4c:20:89:07:18:79:21:7f:5d:70:fb:a1:ff:e3: 7f:01:91:9b:24:9a:c0:20:80:c8:31:85:30:f2:e5: 38:6a:39:0e:b3:b5:7d:c1:46:16:f4:c4:de:7e:83: f6:72:97:9e:ed:31:25:b6:aa:0f:c5:b6:52:6e:fc: a8:42:48:db:f8:64:3f:14:a1:51:ee:55:2b:10:b8: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9E:63:B3:35:11:44:62:16:E9:62:9D:DF:BF:83:D8:60:02:F3:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8ab029b-01e2-3287-84ba-e14d9aa83ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d9:4c:27:7b:66:51:ba:f3:0c:dc:f3:f6:2a:1e:fb:87:2f: 13:e7:87:d1:df:18:ff:54:5b:69:38:04:ad:ae:96:b4:b6:8e: 49:3a:51:51:2a:a7:5f:b2:91:2f:fc:3b:05:38:f9:ff:0f:6e: 93:b2:9d:be:df:52:9e:e6:11:69:34:30:6f:d2:bb:9e:87:13: a6:ae:50:f6:2d:b5:c7:3b:5e:97:77:68:4e:5e:05:96:c2:5d: be:5e:42:77:44:55:c0:01:eb:7f:fb:21:32:c8:62:6b:6c:2a: f4:fd:f8:57:c5:dc:72:f9:dd:6d:2b:60:0a:4b:66:7f:ef:a1: e9:b4:8c:ee:40:28:6f:50:86:5e:a4:c3:0a:89:49:84:f9:cb: 4b:77:0c:9f:90:46:dd:f1:2f:45:7e:ce:19:35:65:08:31:85: 0e:97:73:b8:42:bd:a5:69:d0:94:18:44:97:12:f7:5c:ca:e3: 78:a2:9b:cb:c4:94:6e:74:31:1f:ad:58:37:6c:95:2a:da:cf: 29:7c:b8:8f:74:13:66:d2:ab:fc:fc:ef:d4:7d:4e:4c:91:b6: 44:00:1c:8c:01:a3:39:71:a6:92:8c:ef:4f:6e:2d:51:70:4a: f3:8c:f4:e2:28:c4:52:33:d2:f3:37:4a:d5:ff:70:6b:a9:cd: 77:fc:29:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrOyxKhxl93SQ/pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk NzBiNThiY2MtNGQxMC00Y2EyLWE3Y2YtNWNlMmY3YjRhMDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSMaVAFfQ8XmpwSrVWrp/65qlspXmC8ln2Ic V/ZFKSxuOt6vRL65UR1neLYh0PXKQYc0seb2STN6K0p+Ros6bpOYhoFdWBwNz3Ci hNzTOMje0k8fF6TtM+ClOhvvLfKrUdkQjQG5N4SjK3l9MAckUjLLj53LCs2jP5+l DcxfAnAm+iYyyhv5DbtQfuKiuIslHdl+jVcVbS6JvjsNSl5lbbT7fdkBFEKQyjnE +74KfSN8dcKUTCCJBxh5IX9dcPuh/+N/AZGbJJrAIIDIMYUw8uU4ajkOs7V9wUYW 9MTefoP2cpee7TEltqoPxbZSbvyoQkjb+GQ/FKFR7lUrELjQUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeeY7M1EURiFulind+/g9hgAvNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZThhYjAyOWItMDFlMi0z Mjg3LTg0YmEtZTE0ZDlhYTgzZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILZTCd7ZlG68wzc8/YqHvuHLxPnh9HfGP9UW2k4BK2ulrS2jkk6UVEq p1+ykS/8OwU4+f8PbpOynb7fUp7mEWk0MG/Su56HE6auUPYttcc7Xpd3aE5eBZbC Xb5eQndEVcAB63/7ITLIYmtsKvT9+FfF3HL53W0rYApLZn/voem0jO5AKG9Qhl6k wwqJSYT5y0t3DJ+QRt3xL0V+zhk1ZQgxhQ6Xc7hCvaVp0JQYRJcS91zK43iim8vE lG50MR+tWDdslSrazyl8uI90E2bSq/z879R9TkyRtkQAHIwBozlxppKM709uLVFw SvOM9OIoxFIz0vM3StX/cGupzXf8KWQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:20:21 2026 by rpki-client