$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa File: 87e19014-95d4-3209-bca4-b836be54d913.roa (raw, json) Hash identifier: 1pgOjlKx/mEBvw0KmqN6e8HolkDsEmA27w1ZbCwzlZ8= Subject key identifier: 63:8B:B6:A4:F0:6D:27:2D:9D:76:9C:C2:23:BA:43:CE:34:5D:94:76 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1D0C45FC34E8678D68000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 53435 IP address blocks: 72.4.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:d0:c4:5f:c3:4e:86:78:d6:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=071912ef-635e-429d-a69a-64b7c322132e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bd:75:4a:3f:8a:9d:be:25:2f:f2:a3:5a:7d: 67:8a:4d:e6:c3:c6:e1:fe:fa:ee:a5:51:b0:e7:bb: 3f:c7:e7:60:5e:12:3d:35:dd:69:cf:4a:0c:b9:1d: ca:fd:17:15:f0:5f:46:1d:83:5d:00:32:09:c5:53: 83:e0:1b:16:e1:25:ba:23:18:86:30:e3:02:bd:fd: 7c:f2:67:e5:9a:30:1b:50:4c:fe:90:47:e6:98:33: 51:4f:d4:a8:d6:cd:f0:dc:96:e7:81:94:82:c9:d7: af:34:fd:03:6c:df:8c:39:17:28:70:6e:10:00:81: b9:f3:9e:8d:83:e9:75:4b:7c:4e:a2:e4:36:cf:cd: 87:6e:91:07:48:20:45:ef:e4:57:80:42:8e:1e:e2: 2a:dd:1e:64:cb:4b:33:a6:53:dd:6f:11:3f:34:9d: ca:36:61:8a:22:13:19:d8:a0:94:f2:4c:f4:8f:c7: 5c:57:c6:38:72:ac:57:c5:3d:36:cb:68:e9:93:94: e6:c7:d3:24:b0:24:e2:eb:39:98:f0:9f:cb:34:8a: 0d:f5:d0:70:cc:c0:b5:18:24:ff:95:cb:fb:84:49: 29:3a:0f:9b:67:4e:6c:58:2a:f3:f6:52:fc:21:e7: dd:6b:3c:4f:08:9d:3b:0d:0b:95:be:71:af:62:e7: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8B:B6:A4:F0:6D:27:2D:9D:76:9C:C2:23:BA:43:CE:34:5D:94:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b2:ea:27:c8:b4:aa:a8:62:a5:2b:8f:9b:99:bc:25:d2:80: b6:93:7c:0a:b2:44:bb:79:ce:88:ae:99:a1:ac:e8:db:96:8f: a4:9d:9c:fd:4b:04:bb:12:e8:fa:2a:a3:91:18:dc:4d:aa:66: 1f:b7:07:44:f6:3a:a4:d4:15:05:74:e4:b9:74:9b:ae:06:26: 80:ec:b9:0d:97:ed:55:05:d7:5b:ba:99:88:b9:12:ff:c2:06: 0c:4a:87:42:ea:28:36:04:0c:f3:6f:ad:fa:ca:a3:45:7e:59: bc:03:15:d6:17:64:f5:22:00:94:86:7f:ba:37:6f:19:27:2e: dd:21:f3:3e:f8:87:03:6c:20:55:9b:e8:14:29:09:2d:da:2f: b8:ad:98:20:b4:45:94:58:c9:34:92:85:e9:6e:87:a8:72:88: 60:27:91:eb:a6:3a:41:ec:44:f5:4b:ab:52:8a:74:37:94:67: 75:67:3b:a2:d6:74:45:70:7a:48:5b:14:da:50:60:78:b6:8f: 5e:c6:2d:8e:43:6b:1a:14:44:84:81:14:9c:04:8a:b6:53:b4: 10:d2:b0:ad:71:ba:c2:20:8e:0d:8d:3d:7a:34:9f:2a:d2:ac: 4c:66:5d:c7:a8:5f:06:cc:d5:6a:4d:f2:e5:6a:79:27:3b:21: a5:b1:76:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysdDEX8NOhnjWgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MDcxOTEyZWYtNjM1ZS00MjlkLWE2OWEtNjRiN2MzMjIxMzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb11Sj+Knb4lL/KjWn1nik3mw8bh/vrupVGw 57s/x+dgXhI9Nd1pz0oMuR3K/RcV8F9GHYNdADIJxVOD4BsW4SW6IxiGMOMCvf18 8mflmjAbUEz+kEfmmDNRT9So1s3w3JbngZSCydevNP0DbN+MORcocG4QAIG5856N g+l1S3xOouQ2z82HbpEHSCBF7+RXgEKOHuIq3R5ky0szplPdbxE/NJ3KNmGKIhMZ 2KCU8kz0j8dcV8Y4cqxXxT02y2jpk5Tmx9MksCTi6zmY8J/LNIoN9dBwzMC1GCT/ lcv7hEkpOg+bZ05sWCrz9lL8IefdazxPCJ07DQuVvnGvYuc5LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOLtqTwbSctnXacwiO6Q840XZR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdlMTkwMTQtOTVkNC0z MjA5LWJjYTQtYjgzNmJlNTRkOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuy6ifItKqoYqUrj5uZvCXSgLaTfAqyRLt5zoiumaGs6NuWj6SdnP1L BLsS6Poqo5EY3E2qZh+3B0T2OqTUFQV05Ll0m64GJoDsuQ2X7VUF11u6mYi5Ev/C BgxKh0LqKDYEDPNvrfrKo0V+WbwDFdYXZPUiAJSGf7o3bxknLt0h8z74hwNsIFWb 6BQpCS3aL7itmCC0RZRYyTSSheluh6hyiGAnkeumOkHsRPVLq1KKdDeUZ3VnO6LW dEVwekhbFNpQYHi2j17GLY5DaxoURISBFJwEirZTtBDSsK1xusIgjg2NPXo0nyrS rExmXceoXwbM1WpN8uVqeSc7IaWxdlY= -----END CERTIFICATE-----Generated at Thu Aug 27 15:19:46 2026 by rpki-client