$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dc425f4-1940-3fd3-af8f-e75824c4359f.roa File: 7dc425f4-1940-3fd3-af8f-e75824c4359f.roa (raw, json) Hash identifier: dvYh5eXFTL8qcQtcHwzBSZr1wc3O7Gj0l3/LtBe+EKI= Subject key identifier: 23:6F:2A:8F:F5:F7:04:FB:A1:2C:27:21:BD:0C:71:7E:D2:6C:DF:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D747007F1B403B28E01CA7594 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dc425f4-1940-3fd3-af8f-e75824c4359f.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 72.16.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:07:f1:b4:03:b2:8e:01:ca:75:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=ce04b5bb-6edc-4dc3-a33a-0958e8bdc8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f6:04:8a:0b:25:f0:6b:20:dc:47:c1:04:52: 17:1c:9a:d8:c6:77:90:65:b0:4e:40:15:d2:01:e5: 6e:22:78:1f:ad:3f:f0:76:b7:29:8d:fa:fb:99:6f: 08:c1:7d:aa:53:e1:07:ea:6a:b1:68:a6:b0:0a:c6: 3d:64:6d:5c:1d:8e:8d:43:d7:12:54:03:91:2c:c5: 39:22:94:32:aa:37:c0:f1:7e:07:08:06:03:75:79: 12:f1:d8:1c:b5:3e:ac:d1:03:f0:ec:37:bb:5d:8f: c0:b3:70:74:b7:73:6d:45:ef:a7:7d:fd:10:78:72: 98:7f:5c:bd:f5:95:33:f1:04:53:18:b0:6d:e1:23: 30:1f:14:b6:4f:f4:61:c6:85:aa:af:20:a7:9e:72: e7:ba:3b:ac:94:f4:25:e1:eb:00:a9:34:ec:98:b9: 4e:34:65:7b:a2:c7:89:e2:8d:13:a7:c3:ae:0b:52: 2e:26:a0:5d:1b:61:ff:65:1f:65:a5:8a:33:b4:5a: 8f:48:d6:b0:34:0b:0b:f9:d5:64:16:4e:7b:a0:ed: 45:c7:dc:92:d0:a3:31:07:f5:35:9a:94:1d:ff:51: 90:37:72:b6:6a:6a:c3:e3:06:73:85:6c:1b:fe:82: 80:b5:b6:fa:e6:aa:3a:50:b7:f9:33:ab:d6:f2:80: 7d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6F:2A:8F:F5:F7:04:FB:A1:2C:27:21:BD:0C:71:7E:D2:6C:DF:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dc425f4-1940-3fd3-af8f-e75824c4359f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:35:dd:8c:b8:5d:37:af:d7:34:69:76:54:b6:43:b1:b9:8c: 56:0e:e7:3b:1b:25:a2:fe:e0:7b:fb:cf:2c:33:52:2a:e2:41: ba:e2:a8:1c:87:b6:6e:7f:44:63:32:3a:48:71:e4:d9:c9:c1: e0:60:6d:b3:ca:fd:6d:4f:73:d4:2e:72:dc:53:e0:d3:99:db: e9:4a:a0:16:68:fa:60:4a:99:3e:34:01:1a:4b:40:17:17:bc: a1:c6:14:1b:2c:59:3e:9a:6d:74:be:a3:9a:91:83:2e:cc:7c: 37:10:ae:f8:f4:ea:d3:8d:00:42:f4:3b:3f:17:51:f3:34:0f: 82:40:88:ca:7d:71:a7:02:84:12:28:ae:19:5a:73:e4:67:de: 09:bf:8d:1e:aa:85:73:d2:e0:8b:da:c0:f4:6b:29:21:b6:5c: c7:3f:bd:5c:db:57:73:6b:06:f1:3b:a0:86:4f:87:78:80:63: 8c:82:b7:be:7e:06:48:90:24:38:cc:44:5d:fa:50:f6:e0:9d: f4:ca:ee:4c:1d:39:01:7f:7b:f1:fb:75:fd:ab:96:30:26:47: 01:f5:6a:f9:27:92:64:13:08:97:ad:a8:1f:4d:9c:c2:c0:f8: 36:5b:ca:c4:8e:8b:68:88:59:eb:0b:3e:6d:49:0c:3a:1b:8b: da:03:4a:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10cAfxtAOyjgHKdZQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk Y2UwNGI1YmItNmVkYy00ZGMzLWEzM2EtMDk1OGU4YmRjOGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfYEigsl8Gsg3EfBBFIXHJrYxneQZbBOQBXS AeVuIngfrT/wdrcpjfr7mW8IwX2qU+EH6mqxaKawCsY9ZG1cHY6NQ9cSVAORLMU5 IpQyqjfA8X4HCAYDdXkS8dgctT6s0QPw7De7XY/As3B0t3NtRe+nff0QeHKYf1y9 9ZUz8QRTGLBt4SMwHxS2T/RhxoWqryCnnnLnujuslPQl4esAqTTsmLlONGV7oseJ 4o0Tp8OuC1IuJqBdG2H/ZR9lpYoztFqPSNawNAsL+dVkFk57oO1Fx9yS0KMxB/U1 mpQd/1GQN3K2amrD4wZzhWwb/oKAtbb65qo6ULf5M6vW8oB9hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNvKo/19wT7oSwnIb0McX7SbN9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2RjNDI1ZjQtMTk0MC0z ZmQzLWFmOGYtZTc1ODI0YzQzNTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBBRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD413Yy4XTev1zRpdlS2Q7G5jFYO5zsbJaL+4Hv7zywzUiriQbriqByH tm5/RGMyOkhx5NnJweBgbbPK/W1Pc9QuctxT4NOZ2+lKoBZo+mBKmT40ARpLQBcX vKHGFBssWT6abXS+o5qRgy7MfDcQrvj06tONAEL0Oz8XUfM0D4JAiMp9cacChBIo rhlac+Rn3gm/jR6qhXPS4IvawPRrKSG2XMc/vVzbV3NrBvE7oIZPh3iAY4yCt75+ BkiQJDjMRF36UPbgnfTK7kwdOQF/e/H7df2rljAmRwH1avknkmQTCJetqB9NnMLA +DZbysSOi2iIWesLPm1JDDobi9oDSqk= -----END CERTIFICATE-----Generated at Mon Apr 13 11:40:07 2026 by rpki-client