$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa File: baeb3e2a-1ecc-336f-80c3-456c0c327903.roa (raw, json) Hash identifier: J+Bd+RRxhASYYD77EfQgxKMr37GjUjk1tkqhn1LSHhw= Subject key identifier: 30:07:B4:40:52:16:23:FF:75:F8:FA:EF:E1:CF:3F:DF:48:B4:4E:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EBB11C1DF54CD9DC66B532D37 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 72.172.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c1:df:54:cd:9d:c6:6b:53:2d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=af11558e-24cb-424f-99c1-9f0585e6d3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:76:6e:56:b1:e5:0b:79:da:a4:1c:0c:51: 2f:d4:15:cc:54:0a:7d:3b:7b:97:e6:fb:49:0c:3e: 59:bc:bc:39:cf:57:e7:54:e9:42:38:81:40:81:ba: 80:bf:2c:3a:f8:de:b4:96:bc:ab:03:3a:9f:cf:e5: 31:5d:0b:ae:bf:59:6c:6c:a8:27:29:a5:51:f0:d5: cc:3d:68:6a:63:cf:ad:f6:2c:42:ba:31:b9:c2:89: fc:3c:6b:8b:4d:6e:11:9e:51:3a:9d:67:85:b4:49: d5:f1:db:02:b3:a7:9b:8f:a3:89:43:36:3c:57:95: 3c:a0:b1:2f:80:74:0e:b2:5f:e3:98:4c:e3:eb:9c: 71:4e:50:e4:e0:40:19:de:a3:6b:15:cf:69:7e:d8: 0d:c7:a4:a2:bc:67:1c:99:5d:a0:7e:90:38:fd:f5: 0d:8a:6a:c0:10:af:2b:5d:98:26:d9:99:02:0a:c7: 56:11:3d:23:7a:0e:52:94:f0:4f:00:ae:50:f6:75: 3a:83:6a:64:30:75:25:92:fa:bb:86:52:b4:b7:ad: 17:3a:9b:97:de:93:71:77:8c:a4:9b:f3:f9:8f:c7: df:47:7e:60:b3:98:3f:5b:91:b5:f0:1c:0a:0b:a8: 28:24:12:65:78:c3:95:cf:ed:2e:15:b4:7a:ea:d8: 94:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:07:B4:40:52:16:23:FF:75:F8:FA:EF:E1:CF:3F:DF:48:B4:4E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b9:a0:45:f8:98:eb:06:ee:0a:36:18:06:0b:ef:3c:32:7c: 02:8a:b6:72:81:e2:d9:54:07:58:11:06:ec:94:2f:20:58:48: 0e:50:3d:02:e8:8f:b2:0e:cc:a0:67:66:37:5a:af:86:c1:e6: 37:3a:5d:c1:6c:c9:f7:a8:7f:2a:f8:dc:d1:64:3e:73:93:e4: a2:8b:d9:25:0d:b6:22:cd:82:ec:89:1e:06:1a:52:ad:10:8f: 48:2a:63:74:d8:3c:c5:e8:5b:d3:e7:1c:dc:e1:43:8f:54:ea: 33:b8:b1:3a:3f:67:00:1d:c7:4e:ed:17:03:34:37:d4:f1:5e: 75:19:4b:a4:87:3e:d1:e8:3c:3c:46:0d:9e:e8:f9:bd:30:d4: 1b:d4:41:22:2f:d2:fa:56:53:a7:8b:a9:f3:2c:fd:3e:64:f1: 53:c7:53:4f:74:e8:41:c6:84:9f:f9:cf:24:c1:03:46:f4:7d: 48:14:a4:71:fc:d5:42:65:71:45:a4:20:d8:42:38:0d:e9:42: c3:b0:09:3d:30:76:50:46:76:cf:8d:ec:a7:61:2c:6b:8b:4d: b2:7f:4c:51:24:be:0a:54:78:2e:29:83:10:aa:90:64:74:16: a5:3f:5e:fb:e2:91:87:4b:74:09:06:c0:7a:2d:ed:c6:27:6a: ae:b9:85:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcHfVM2dxmtTLTcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YWYxMTU1OGUtMjRjYi00MjRmLTk5YzEtOWYwNTg1ZTZkM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTl2blax5Qt52qQcDFEv1BXMVAp9O3uX5vtJ DD5ZvLw5z1fnVOlCOIFAgbqAvyw6+N60lryrAzqfz+UxXQuuv1lsbKgnKaVR8NXM PWhqY8+t9ixCujG5won8PGuLTW4RnlE6nWeFtEnV8dsCs6ebj6OJQzY8V5U8oLEv gHQOsl/jmEzj65xxTlDk4EAZ3qNrFc9pftgNx6SivGccmV2gfpA4/fUNimrAEK8r XZgm2ZkCCsdWET0jeg5SlPBPAK5Q9nU6g2pkMHUlkvq7hlK0t60XOpuX3pNxd4yk m/P5j8ffR35gs5g/W5G18BwKC6goJBJleMOVz+0uFbR66tiUqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAHtEBSFiP/dfj67+HPP99ItE6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmFlYjNlMmEtMWVjYy0z MzZmLTgwYzMtNDU2YzBjMzI3OTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSKwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK5oEX4mOsG7go2GAYL7zwyfAKKtnKB4tlUB1gRBuyULyBYSA5QPQLo j7IOzKBnZjdar4bB5jc6XcFsyfeofyr43NFkPnOT5KKL2SUNtiLNguyJHgYaUq0Q j0gqY3TYPMXoW9PnHNzhQ49U6jO4sTo/ZwAdx07tFwM0N9TxXnUZS6SHPtHoPDxG DZ7o+b0w1BvUQSIv0vpWU6eLqfMs/T5k8VPHU0906EHGhJ/5zyTBA0b0fUgUpHH8 1UJlcUWkINhCOA3pQsOwCT0wdlBGds+N7KdhLGuLTbJ/TFEkvgpUeC4pgxCqkGR0 FqU/XvvikYdLdAkGwHot7cYnaq65hec= -----END CERTIFICATE-----Generated at Thu Aug 27 16:09:10 2026 by rpki-client