$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa File: 1a224cec-745f-335a-bdb0-1812db5a8b1c.roa (raw, json) Hash identifier: shYxmXY8Z66L3c+Jur7l7JGVMPfIvIeCmg+7qxSMzPY= Subject key identifier: C5:8A:EB:10:2C:2A:7F:1F:39:6F:7A:3C:47:C1:73:A3:97:1E:4F:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAE819192EB68074C644C9480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 7029 IP address blocks: 72.16.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:91:92:eb:68:07:4c:64:4c:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=f08bcd1e-c958-439e-9dab-f9a2a237c54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:cc:06:e7:5b:02:11:b1:cb:39:58:e7:3d: d3:bf:02:c9:8b:a4:d8:6a:de:13:85:0e:1c:74:b8: f1:fc:92:e2:9d:b5:44:3d:0a:e4:c0:b4:94:eb:ac: ab:5c:78:2e:cd:08:7f:9f:80:07:e6:88:48:69:43: af:94:90:51:de:db:cb:1d:44:8e:86:21:7e:16:46: ab:c6:fd:28:8d:92:43:36:3a:64:0c:36:1f:a0:33: ab:25:7b:4d:68:fd:74:b0:a4:67:e3:e4:2b:05:b1: d4:7a:54:6a:64:b7:57:03:48:4e:ca:e6:53:99:5a: 21:b0:41:ba:0e:25:60:9d:c7:86:75:ce:4e:b3:80: f1:b0:6f:17:ab:d4:57:f3:e6:33:78:b0:e3:62:d0: 17:45:ac:72:62:3d:25:47:43:62:c6:84:2f:3c:f4: 14:b4:96:e9:a1:19:9f:8c:17:27:e3:33:27:2e:98: 7c:1f:ae:38:b9:8c:09:d1:72:89:d3:41:82:bb:e9: 38:08:0c:8d:25:33:0e:63:47:c9:9f:2f:f1:f9:2d: c9:c1:96:cc:9d:10:33:4f:87:7b:05:c0:1a:7d:3e: 22:dc:b9:3c:7a:76:e6:45:e7:05:7c:74:4e:22:dc: 8e:7d:a5:10:3d:d4:ac:11:02:37:51:9b:e0:1a:46: 9a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8A:EB:10:2C:2A:7F:1F:39:6F:7A:3C:47:C1:73:A3:97:1E:4F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:89:4b:23:ed:0f:cb:d8:e7:53:e4:04:e3:b3:77:b5:e9:c6: 57:a8:46:c0:cb:f4:35:9e:c3:a7:02:50:6b:f7:af:ce:fc:74: 19:b7:6f:63:b4:ec:26:a5:1b:e0:22:9e:fa:7f:3a:1c:98:09: f4:19:f5:56:55:64:96:13:11:d6:82:22:56:d8:43:0d:ad:77: 95:ad:3a:f7:00:14:f8:bb:3c:ef:97:e8:47:41:b0:ff:6c:62: 49:74:75:bf:24:c9:c4:0d:9b:88:f8:1d:35:2c:60:09:b9:67: 07:8d:c9:08:1b:9c:ba:ea:33:80:b3:76:fa:5a:47:a9:74:14: 19:c5:13:f3:50:36:1c:7f:ad:45:8b:b1:ae:bb:ed:2b:bd:5f: 4c:05:ec:64:4e:f5:8e:bc:de:91:57:55:0f:40:57:0d:c7:8b: 69:9b:62:35:ad:9e:bc:ce:9b:ae:ec:49:25:41:cb:62:89:6e: df:f0:62:88:b9:27:ca:4f:8d:9f:38:ca:78:13:63:b2:70:ff: 50:65:54:99:d0:dd:bc:dd:35:27:5e:bb:9a:4d:5b:0b:65:29: ad:83:c8:f8:53:ec:e9:4f:e0:76:ce:b2:80:e3:04:3d:2b:d6: a5:af:bb:5f:e1:60:f4:29:e4:d7:5f:15:30:3e:15:1f:e5:f9: 4a:06:af:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugZGS62gHTGRMlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk ZjA4YmNkMWUtYzk1OC00MzllLTlkYWItZjlhMmEyMzdjNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkXMBudbAhGxyzlY5z3TvwLJi6TYat4ThQ4c dLjx/JLinbVEPQrkwLSU66yrXHguzQh/n4AH5ohIaUOvlJBR3tvLHUSOhiF+Fkar xv0ojZJDNjpkDDYfoDOrJXtNaP10sKRn4+QrBbHUelRqZLdXA0hOyuZTmVohsEG6 DiVgnceGdc5Os4DxsG8Xq9RX8+YzeLDjYtAXRaxyYj0lR0NixoQvPPQUtJbpoRmf jBcn4zMnLph8H644uYwJ0XKJ00GCu+k4CAyNJTMOY0fJny/x+S3JwZbMnRAzT4d7 BcAafT4i3Lk8enbmRecFfHROItyOfaUQPdSsEQI3UZvgGkaa4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWK6xAsKn8fOW96PEfBc6OXHk8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWEyMjRjZWMtNzQ1Zi0z MzVhLWJkYjAtMTgxMmRiNWE4YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqJSyPtD8vY51PkBOOzd7XpxleoRsDL9DWew6cCUGv3r878dBm3b2O0 7CalG+Ainvp/OhyYCfQZ9VZVZJYTEdaCIlbYQw2td5WtOvcAFPi7PO+X6EdBsP9s Ykl0db8kycQNm4j4HTUsYAm5ZweNyQgbnLrqM4CzdvpaR6l0FBnFE/NQNhx/rUWL sa677Su9X0wF7GRO9Y683pFXVQ9AVw3Hi2mbYjWtnrzOm67sSSVBy2KJbt/wYoi5 J8pPjZ84yngTY7Jw/1BlVJnQ3bzdNSdeu5pNWwtlKa2DyPhT7OlP4HbOsoDjBD0r 1qWvu1/hYPQp5NdfFTA+FR/l+UoGr9g= -----END CERTIFICATE-----Generated at Thu Aug 27 16:12:35 2026 by rpki-client