$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f27f29-4f00-3512-8518-4faa4857810d.roa File: 28f27f29-4f00-3512-8518-4faa4857810d.roa (raw, json) Hash identifier: fQKqV/Dt+medMzahVwXYiIpgU0cuVRC1KPNhdtXU9Vo= Subject key identifier: 32:F9:CF:C0:53:03:BE:03:1A:FD:79:D4:B7:2E:28:66:8D:D2:52:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E54B4AD51E9F22741BBBE4F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f27f29-4f00-3512-8518-4faa4857810d.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 27206 IP address blocks: 72.16.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:ad:51:e9:f2:27:41:bb:be:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=00c9c893-28ca-4235-87c6-5bba3f7b0b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:75:e4:e4:0c:2f:d3:e1:6f:0e:ba:49:76:e6: 4e:78:0a:cc:07:4f:4f:bc:a1:52:f1:4e:23:82:bf: f3:83:8c:20:5f:c7:2e:24:06:a2:2b:0d:44:c6:95: e2:ac:00:0e:d5:84:32:05:bf:fd:c5:c8:c8:dd:c2: 20:dc:be:99:9c:b0:aa:99:1b:e7:9e:77:ba:51:cd: 65:92:71:7e:6f:7b:ef:f7:68:e8:b5:d8:17:52:cd: 11:4d:69:d1:fa:f3:cc:73:02:ca:db:03:53:70:43: 24:bc:55:f8:0c:dd:df:72:0b:15:2a:06:51:bb:c8: 25:0e:53:e2:19:be:14:2d:75:8e:70:5b:16:11:d9: 39:a5:f7:ac:64:fa:da:fe:65:ef:94:09:36:e4:d5: dc:77:6d:9d:e1:03:89:d5:a7:f6:8c:05:62:c7:bd: 15:3b:76:f9:fc:3e:61:af:a7:bf:60:3c:a3:78:8c: cb:27:01:c8:83:97:3c:dd:ae:e5:1b:cb:8f:0f:a4: 61:60:bb:10:07:08:01:98:4d:6c:b9:ba:6b:d0:33: 1d:43:b0:ca:84:a8:96:bd:32:d0:1e:fb:96:62:9c: 00:30:e1:1b:3c:d5:68:9e:10:c8:fb:44:2a:51:fa: d3:8a:bf:19:14:c4:bb:b9:c7:1f:3c:07:a1:9b:38: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F9:CF:C0:53:03:BE:03:1A:FD:79:D4:B7:2E:28:66:8D:D2:52:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f27f29-4f00-3512-8518-4faa4857810d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:35:fb:53:4f:c6:07:63:fd:0a:d5:73:da:70:f7:be:9c:2a: e8:0b:b8:a3:32:a2:c6:5d:b7:fb:70:1c:32:af:67:36:e6:43: ab:88:5b:f5:c7:bd:c9:4d:87:61:99:af:4b:61:3b:fa:24:e9: ca:66:e7:92:a2:4e:f2:5a:dc:b1:6a:63:cc:2c:8b:ff:2b:34: 6e:9a:8e:05:af:95:13:5d:9c:0d:cf:41:0f:d2:9e:69:73:75: e2:ff:27:fc:ed:17:b0:03:ca:49:4e:c1:f0:22:52:0c:b2:d5: 10:05:32:bc:70:1a:74:34:0a:1a:b6:d8:3d:2e:42:9e:98:7d: 35:ed:55:d2:9a:3e:c8:51:2e:96:32:33:d7:ad:ae:c3:37:90: 26:b7:e9:95:3a:1b:84:27:4f:55:84:7c:36:1e:e2:72:91:3a: 6f:24:65:93:9d:3d:bb:ea:82:e2:d1:de:1d:c7:6d:81:cb:4d: d8:39:c8:23:92:ef:de:ba:0a:c9:32:51:ca:b8:6c:d2:1c:07: 56:8f:6e:19:c4:67:32:8f:95:d2:08:da:4e:60:17:1f:64:85: 6f:19:14:6b:68:0f:c8:d8:f4:39:78:38:bb:9b:ca:e5:28:ce: 15:8b:e8:0c:13:a5:d2:5b:ee:bf:8d:ca:0e:9f:fc:f1:14:ea: 9a:63:ed:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtK1R6fInQbu+TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk MDBjOWM4OTMtMjhjYS00MjM1LTg3YzYtNWJiYTNmN2IwYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXXk5Awv0+FvDrpJduZOeArMB09PvKFS8U4j gr/zg4wgX8cuJAaiKw1ExpXirAAO1YQyBb/9xcjI3cIg3L6ZnLCqmRvnnne6Uc1l knF+b3vv92jotdgXUs0RTWnR+vPMcwLK2wNTcEMkvFX4DN3fcgsVKgZRu8glDlPi Gb4ULXWOcFsWEdk5pfesZPra/mXvlAk25NXcd22d4QOJ1af2jAVix70VO3b5/D5h r6e/YDyjeIzLJwHIg5c83a7lG8uPD6RhYLsQBwgBmE1subpr0DMdQ7DKhKiWvTLQ HvuWYpwAMOEbPNVonhDI+0QqUfrTir8ZFMS7uccfPAehmziLTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL5z8BTA74DGv151LcuKGaN0lKfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjhmMjdmMjktNGYwMC0z NTEyLTg1MTgtNGZhYTQ4NTc4MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBBRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD01+1NPxgdj/QrVc9pw976cKugLuKMyosZdt/twHDKvZzbmQ6uIW/XH vclNh2GZr0thO/ok6cpm55KiTvJa3LFqY8wsi/8rNG6ajgWvlRNdnA3PQQ/Snmlz deL/J/ztF7ADyklOwfAiUgyy1RAFMrxwGnQ0Chq22D0uQp6YfTXtVdKaPshRLpYy M9etrsM3kCa36ZU6G4QnT1WEfDYe4nKROm8kZZOdPbvqguLR3h3HbYHLTdg5yCOS 7966CskyUcq4bNIcB1aPbhnEZzKPldII2k5gFx9khW8ZFGtoD8jY9Dl4OLubyuUo zhWL6AwTpdJb7r+Nyg6f/PEU6ppj7ZI= -----END CERTIFICATE-----Generated at Mon Jul 13 07:24:21 2026 by rpki-client