$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62707f6e-2e8f-3840-a502-5deeb598170e.roa File: 62707f6e-2e8f-3840-a502-5deeb598170e.roa (raw, json) Hash identifier: TE5hSPr4SS4oTokiSsm3P89L5IkYvavqnQMio18StHM= Subject key identifier: 22:F6:74:5A:B9:0A:D5:51:91:F8:EE:BB:F8:C5:39:0B:74:15:10:A4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D571F9846907CCFEB11C192FF Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62707f6e-2e8f-3840-a502-5deeb598170e.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 7029 IP address blocks: 216.96.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:98:46:90:7c:cf:eb:11:c1:92:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=556c05ac-5042-48be-af08-49320350a495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:6e:2e:eb:8c:71:2b:f9:87:c8:07:a3:66: b9:9f:b6:be:fa:ef:79:e1:77:22:99:e7:5b:cc:e7: 1f:ec:43:42:5c:54:cc:8b:25:ab:b0:ea:89:e7:d1: 16:66:f9:37:35:5b:5a:61:50:8d:08:47:24:43:db: 63:f2:db:f7:a6:8a:95:c2:d9:bd:95:c4:ee:ec:38: fb:52:9a:5c:d6:87:91:4a:f7:c0:1e:2e:bf:5a:8a: 44:4e:54:5c:35:ae:5e:e7:36:05:2a:d0:6a:27:da: 88:49:7e:21:91:fc:6b:c5:73:df:cd:b5:35:dd:16: c1:b2:01:86:26:c3:70:c9:eb:cf:1b:1b:8a:5f:8e: 0d:9f:20:ba:e6:5d:a3:63:d0:43:6e:be:83:91:98: aa:4c:6b:12:fc:af:ba:44:e8:2f:ea:68:79:27:04: 39:ac:6a:7b:dc:f9:6b:6e:f3:35:8a:13:91:b9:ee: c8:26:67:53:56:1c:70:bd:5c:67:11:86:90:6f:6d: 27:c6:07:f4:e0:08:25:ea:6a:e2:37:3a:02:18:0f: ac:4f:4f:0c:04:aa:d8:26:0b:84:ee:d7:0d:fa:72: 82:51:ed:c4:4d:fa:92:f2:7a:27:ff:93:ae:b8:f2: a2:4c:61:27:75:59:7c:84:3d:b2:6a:b8:f0:c5:c2: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F6:74:5A:B9:0A:D5:51:91:F8:EE:BB:F8:C5:39:0B:74:15:10:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62707f6e-2e8f-3840-a502-5deeb598170e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d9:7e:db:23:0f:fc:3d:02:90:79:c7:39:7d:ab:6f:df:41: 62:d6:ed:4c:38:35:ca:e1:1a:42:90:71:e2:94:a8:84:e0:01: 92:8f:05:1f:26:be:02:7e:c7:69:47:b6:aa:c6:cf:56:c7:89: c3:16:04:7e:0b:0a:24:85:85:c3:ff:e9:42:bf:03:5d:c0:49: 6b:31:ce:1a:d3:de:ac:eb:30:90:62:d8:5a:36:a8:31:26:12: 51:68:37:c9:cb:35:1c:a8:2f:b5:63:9a:3d:a2:ef:35:a8:b8: be:76:ac:fe:d8:32:e7:28:ef:6a:d3:7b:9b:4b:72:84:f8:1e: 59:0c:5a:6e:e9:69:27:ba:25:31:13:9c:5f:ea:a6:c1:47:b1: 67:17:10:f4:05:64:cb:2f:2d:7d:cf:7e:71:93:f0:ae:13:0b: 70:c5:fe:e0:c9:fe:37:c8:5a:4f:9c:a0:90:2d:ba:aa:90:2c: cd:f9:5c:13:a4:72:3f:0c:91:8a:b1:80:b8:a5:da:bb:36:d3: 0a:8a:b7:60:a7:30:40:79:d2:dc:91:11:2e:d2:ae:9d:57:0a: 5d:bc:5c:60:cc:23:0f:b9:06:09:19:dc:91:b0:68:f5:07:11: ff:ae:0a:5c:3c:a6:1a:f0:11:f2:ae:8c:6d:54:d4:dd:58:d9: 05:64:c0:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH5hGkHzP6xHBkv8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NTU2YzA1YWMtNTA0Mi00OGJlLWFmMDgtNDkzMjAzNTBhNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRNuLuuMcSv5h8gHo2a5n7a++u954Xcimedb zOcf7ENCXFTMiyWrsOqJ59EWZvk3NVtaYVCNCEckQ9tj8tv3poqVwtm9lcTu7Dj7 Uppc1oeRSvfAHi6/WopETlRcNa5e5zYFKtBqJ9qISX4hkfxrxXPfzbU13RbBsgGG JsNwyevPGxuKX44NnyC65l2jY9BDbr6DkZiqTGsS/K+6ROgv6mh5JwQ5rGp73Plr bvM1ihORue7IJmdTVhxwvVxnEYaQb20nxgf04Agl6mriNzoCGA+sT08MBKrYJguE 7tcN+nKCUe3ETfqS8non/5OuuPKiTGEndVl8hD2yarjwxcJXvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL2dFq5CtVRkfjuu/jFOQt0FRCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjI3MDdmNmUtMmU4Zi0z ODQwLWE1MDItNWRlZWI1OTgxNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjZftsjD/w9ApB5xzl9q2/fQWLW7Uw4NcrhGkKQceKUqITgAZKPBR8m vgJ+x2lHtqrGz1bHicMWBH4LCiSFhcP/6UK/A13ASWsxzhrT3qzrMJBi2Fo2qDEm ElFoN8nLNRyoL7Vjmj2i7zWouL52rP7YMuco72rTe5tLcoT4HlkMWm7paSe6JTET nF/qpsFHsWcXEPQFZMsvLX3PfnGT8K4TC3DF/uDJ/jfIWk+coJAtuqqQLM35XBOk cj8MkYqxgLil2rs20wqKt2CnMEB50tyRES7Srp1XCl28XGDMIw+5BgkZ3JGwaPUH Ef+uClw8phrwEfKujG1U1N1Y2QVkwJ0= -----END CERTIFICATE-----Generated at Mon Apr 13 11:40:26 2026 by rpki-client