$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa File: 87e19014-95d4-3209-bca4-b836be54d913.roa (raw, json) Hash identifier: BA618/+YSHlFj2fXAv6iT/br3qYmcGuEgZ8YQURkSo8= Subject key identifier: 5C:0B:AC:EF:38:A5:28:6B:78:D3:8B:2D:55:62:4B:84:72:42:4A:0F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7DD05AA8019CDD90FEC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 53435 IP address blocks: 72.4.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7d:d0:5a:a8:01:9c:dd:90:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=3694f0e9-6acc-4b89-870e-38dcc3098b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:0e:6b:09:d9:75:fe:c2:88:d3:63:0e:c8: 55:c2:87:a8:5a:c1:ef:b9:de:90:e6:87:d1:1d:13: 9f:9d:e0:ce:86:44:9b:76:17:24:d3:56:87:4b:4a: 4c:ef:b8:87:51:68:63:33:61:cc:ec:66:4f:90:5f: c0:49:25:6e:f3:fd:ce:8c:3b:87:3e:42:d3:34:3d: 4b:d8:28:ca:30:5b:a1:f6:2b:6b:47:e3:d5:ed:5c: 4c:c0:b5:ac:54:de:f2:ba:e6:75:75:8f:5e:9d:cc: f3:48:c9:7f:fe:15:ac:41:60:50:0b:2b:28:70:88: 7a:4f:e1:da:1f:1e:1e:8a:f2:d7:7e:ae:ea:50:cc: a7:9b:9f:af:24:b2:fe:d3:2e:50:a5:9c:4e:c1:0c: bd:f0:38:56:8e:15:ec:75:28:a5:65:b9:6b:8b:cd: 4b:e2:70:51:6d:c9:55:cb:cb:48:1d:2e:ba:1f:47: 3f:b8:d7:9e:f6:b4:67:51:eb:6d:2f:b6:bf:66:9e: d3:e0:12:e1:28:c0:7e:8e:76:27:bb:46:fc:4c:8f: e8:0e:c2:c8:05:5b:55:5f:ac:88:71:49:93:36:03: e8:9c:0a:86:98:1b:ff:7a:9b:2e:9b:69:ef:14:4f: 8c:b3:e3:fe:35:62:44:7d:f0:19:95:65:30:20:2b: 56:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0B:AC:EF:38:A5:28:6B:78:D3:8B:2D:55:62:4B:84:72:42:4A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:a1:a9:7a:7e:8e:0b:1a:c5:aa:39:33:a6:50:58:6c:f3:b4: b6:6e:ec:71:e8:cb:97:fc:a7:30:9b:73:1e:66:b8:18:f2:22: a5:da:af:e4:1e:18:9e:37:80:93:18:b4:78:e9:23:d8:9f:9c: 97:6d:2a:fa:4c:96:3a:89:28:2c:dc:54:2d:b4:c3:0e:10:8e: a5:d8:21:67:36:69:93:b7:5b:7b:78:34:3a:d2:34:e2:db:56: 2a:1a:ef:4e:8a:59:d0:5a:17:2e:c6:9b:10:85:db:f6:64:ef: 32:8f:42:f8:62:61:0d:ac:7c:b9:18:bc:81:90:c8:68:a9:2b: 4f:1b:e0:e4:26:13:5f:d7:52:4b:6c:5b:b0:5f:cf:56:41:c8: a4:4c:ec:65:4a:36:bd:8d:7b:34:18:c6:4c:0e:ca:03:ea:a7: 7e:32:d0:9f:7c:cb:dd:29:5f:74:f0:7d:bc:ed:cc:14:32:6c: 47:fc:50:1e:14:15:64:9e:d8:30:34:1d:73:9a:a2:75:44:0e: 3c:96:c7:e8:49:2a:d1:3d:f4:88:87:93:25:1c:7b:3c:17:09: fb:41:cd:18:fa:fd:dc:da:63:e6:f6:0a:12:2c:07:47:36:79: a1:4f:17:be:ee:a0:f2:84:fe:4f:d0:e3:bc:a2:24:42:d3:2a: 61:d6:0e:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnX3QWqgBnN2Q/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MzY5NGYwZTktNmFjYy00Yjg5LTg3MGUtMzhkY2MzMDk4YjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAOawnZdf7CiNNjDshVwoeoWsHvud6Q5ofR HROfneDOhkSbdhck01aHS0pM77iHUWhjM2HM7GZPkF/ASSVu8/3OjDuHPkLTND1L 2CjKMFuh9itrR+PV7VxMwLWsVN7yuuZ1dY9enczzSMl//hWsQWBQCysocIh6T+Ha Hx4eivLXfq7qUMynm5+vJLL+0y5QpZxOwQy98DhWjhXsdSilZblri81L4nBRbclV y8tIHS66H0c/uNee9rRnUettL7a/Zp7T4BLhKMB+jnYnu0b8TI/oDsLIBVtVX6yI cUmTNgPonAqGmBv/epsum2nvFE+Ms+P+NWJEffAZlWUwICtWzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwLrO84pShreNOLLVViS4RyQkoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdlMTkwMTQtOTVkNC0z MjA5LWJjYTQtYjgzNmJlNTRkOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyhqXp+jgsaxao5M6ZQWGzztLZu7HHoy5f8pzCbcx5muBjyIqXar+Qe GJ43gJMYtHjpI9ifnJdtKvpMljqJKCzcVC20ww4QjqXYIWc2aZO3W3t4NDrSNOLb Vioa706KWdBaFy7GmxCF2/Zk7zKPQvhiYQ2sfLkYvIGQyGipK08b4OQmE1/XUkts W7Bfz1ZByKRM7GVKNr2NezQYxkwOygPqp34y0J98y90pX3TwfbztzBQybEf8UB4U FWSe2DA0HXOaonVEDjyWx+hJKtE99IiHkyUcezwXCftBzRj6/dzaY+b2ChIsB0c2 eaFPF77uoPKE/k/Q47yiJELTKmHWDhI= -----END CERTIFICATE-----Generated at Tue Oct 13 05:13:00 2026 by rpki-client