$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f27f29-4f00-3512-8518-4faa4857810d.roa File: 28f27f29-4f00-3512-8518-4faa4857810d.roa (raw, json) Hash identifier: ByLYgNYLTu2m7mdmQoDb6aWljLHizNWmlJE8Iomjnm0= Subject key identifier: E0:05:1D:4C:C4:1E:B0:0B:C6:C1:48:44:60:94:13:B6:C8:B7:2E:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D746FDA86BE8EBB23868D8D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f27f29-4f00-3512-8518-4faa4857810d.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 27206 IP address blocks: 72.16.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:da:86:be:8e:bb:23:86:8d:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=1a99f2db-1ce9-418e-a137-ef3b88af8cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:50:e9:cb:45:4e:26:d6:8b:f9:fe:d0:7c:b4: c2:58:c2:41:89:08:5c:e8:13:ec:3d:ca:b8:52:ae: f7:f8:d1:87:53:71:91:65:6d:cb:96:9d:6c:77:3c: 69:2e:e8:a1:a6:13:92:d6:ba:2c:ad:f7:31:50:de: a3:56:4a:01:b9:0e:22:25:3d:7b:fd:dc:32:9f:1e: 0b:8d:8a:ea:85:f4:ad:c0:78:ea:67:71:b7:71:b2: 96:f1:b9:f6:df:5c:34:80:de:a4:15:3f:1c:84:d2: 76:38:75:11:a6:cb:6e:a6:42:77:35:4d:6b:99:56: 8c:ff:6c:f5:59:51:79:d0:4e:7d:87:c2:8f:e9:77: 39:e4:35:f4:32:c9:58:c2:c6:bf:7e:9a:ea:2e:64: a8:d6:8c:f7:8f:12:69:ee:48:c5:01:b4:1e:5e:9d: b2:3b:ae:04:08:c5:2c:b3:3a:23:c5:83:ab:bf:44: 7e:b5:6d:d8:99:e1:e4:8e:00:09:e4:57:f5:90:5d: 4c:52:b7:e9:22:1d:c8:27:b2:9d:05:2c:45:f4:b4: ca:b7:13:7f:8d:92:22:db:15:cc:93:cf:88:82:8b: 54:58:b3:04:72:83:20:dd:aa:39:12:24:21:c8:62: 56:c9:ad:6e:c7:3a:03:66:21:ea:1a:a4:ae:1a:9e: f9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:05:1D:4C:C4:1E:B0:0B:C6:C1:48:44:60:94:13:B6:C8:B7:2E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f27f29-4f00-3512-8518-4faa4857810d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a5:cc:f0:f5:e5:22:aa:01:73:78:e6:17:f4:a1:32:05:0e: 3e:28:ad:2d:5a:85:55:4b:98:a7:b7:80:1f:80:36:96:11:b1: 84:af:3f:75:cd:a9:70:d7:c2:39:fa:c5:6b:35:b9:76:79:ce: 19:a1:b6:66:9a:fb:c6:5f:fb:4b:d9:0c:12:7a:77:dd:99:13: 42:53:5b:cf:d5:95:bd:bd:e6:8c:8a:0f:0d:fb:bc:52:b0:1f: 9a:5b:a2:2a:5b:37:d7:e9:ac:12:94:66:34:84:b0:1c:76:0b: 4d:72:a7:21:41:22:d7:43:fa:f7:aa:f0:4f:79:d7:28:a6:85: e8:83:06:3f:cf:45:cb:39:2a:2d:c1:91:b6:47:5a:27:e4:55: bf:a3:9f:3d:93:83:ac:89:79:60:f4:e2:1f:f9:56:00:5e:19: 5f:df:c1:0c:dc:72:8e:54:2a:51:83:71:22:b0:3e:ec:bf:33: 24:9d:0e:03:0a:1b:c5:de:45:f2:14:38:ce:a7:07:05:75:ab: 77:68:ba:70:41:18:d9:fa:c2:93:44:5f:db:45:e4:97:83:c6: f7:fe:48:30:6e:62:00:f4:78:9d:72:34:07:6a:98:05:f5:e1: 33:2c:05:d5:bc:d9:34:50:df:fa:f6:4d:48:e2:2d:7b:92:8b: fd:1a:b2:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9qGvo67I4aNjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MWE5OWYyZGItMWNlOS00MThlLWExMzctZWYzYjg4YWY4Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlDpy0VOJtaL+f7QfLTCWMJBiQhc6BPsPcq4 Uq73+NGHU3GRZW3Llp1sdzxpLuihphOS1rosrfcxUN6jVkoBuQ4iJT17/dwynx4L jYrqhfStwHjqZ3G3cbKW8bn231w0gN6kFT8chNJ2OHURpstupkJ3NU1rmVaM/2z1 WVF50E59h8KP6Xc55DX0MslYwsa/fprqLmSo1oz3jxJp7kjFAbQeXp2yO64ECMUs szojxYOrv0R+tW3YmeHkjgAJ5Ff1kF1MUrfpIh3IJ7KdBSxF9LTKtxN/jZIi2xXM k8+IgotUWLMEcoMg3ao5EiQhyGJWya1uxzoDZiHqGqSuGp75zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAFHUzEHrALxsFIRGCUE7bIty5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjhmMjdmMjktNGYwMC0z NTEyLTg1MTgtNGZhYTQ4NTc4MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBBRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqlzPD15SKqAXN45hf0oTIFDj4orS1ahVVLmKe3gB+ANpYRsYSvP3XN qXDXwjn6xWs1uXZ5zhmhtmaa+8Zf+0vZDBJ6d92ZE0JTW8/Vlb295oyKDw37vFKw H5pboipbN9fprBKUZjSEsBx2C01ypyFBItdD+veq8E951yimheiDBj/PRcs5Ki3B kbZHWifkVb+jnz2Tg6yJeWD04h/5VgBeGV/fwQzcco5UKlGDcSKwPuy/MySdDgMK G8XeRfIUOM6nBwV1q3dounBBGNn6wpNEX9tF5JeDxvf+SDBuYgD0eJ1yNAdqmAX1 4TMsBdW82TRQ3/r2TUjiLXuSi/0asmo= -----END CERTIFICATE-----Generated at Mon Apr 13 11:42:19 2026 by rpki-client