$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5eb02e5-c78f-3b79-b5aa-717163259344.roa File: d5eb02e5-c78f-3b79-b5aa-717163259344.roa (raw, json) Hash identifier: 3tP0zRY+RAveaAaoGg73ruLWnkJ7CmFBVIRdZ3Nu3Rs= Subject key identifier: 1C:E1:8E:7B:35:8B:D2:A2:80:07:5A:18:C1:28:C0:D1:9E:59:BE:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DEB15E0E74F531114FDCF7200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5eb02e5-c78f-3b79-b5aa-717163259344.roa Signing time: Fri 22 May 2026 13:00:31 +0000 ROA not before: Fri 22 May 2026 13:00:31 +0000 ROA not after: Thu 20 Aug 2026 13:00:31 +0000 asID: 7029 IP address blocks: 72.16.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:15:e0:e7:4f:53:11:14:fd:cf:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 22 13:00:31 2026 GMT Not After : Aug 20 13:00:31 2026 GMT Subject: CN=8ca8abbd-c0f1-480c-b2ff-2706a441f984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:54:2b:53:cf:e0:26:0e:b1:f4:b2:97:c4: 76:ee:36:f1:25:e9:12:bc:ff:95:a2:56:0e:13:ee: be:90:47:74:24:ab:a4:cf:28:e6:1e:a8:81:4d:c6: 01:b6:a6:b7:0a:a8:c5:78:70:f6:06:4d:fc:96:82: e1:28:87:e6:03:b7:db:46:4d:c5:5f:75:6a:2a:d1: 99:bd:ef:bb:77:09:61:9a:3f:a2:c2:e2:0a:63:b0: 9e:6f:11:b4:1d:85:f9:cd:42:23:d3:39:01:63:d6: e9:79:a9:d6:9e:1b:e6:aa:23:ff:8c:bd:b2:d8:56: 11:a8:41:f0:3e:2d:92:7b:3d:39:70:ce:02:7c:96: 04:47:76:fe:a7:b0:61:6b:b4:99:3f:36:5f:3b:94: 26:94:b6:f8:e0:7f:25:c2:d4:03:19:eb:34:6a:66: cc:49:c2:6b:b5:cb:b8:44:1a:f4:78:92:7c:e9:b2: 95:9f:6c:75:32:c4:2e:d1:87:4f:0f:0d:70:37:b5: e1:86:c2:21:59:f5:31:c2:33:61:ca:b3:cf:2d:fd: 44:4b:5b:a7:75:ef:57:23:61:04:40:30:55:2c:22: fe:fe:99:2f:5e:fa:3f:83:10:cf:13:72:40:c4:c2: f3:67:57:f6:06:c1:cf:cd:ec:63:07:43:ae:f2:02: 5b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E1:8E:7B:35:8B:D2:A2:80:07:5A:18:C1:28:C0:D1:9E:59:BE:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5eb02e5-c78f-3b79-b5aa-717163259344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1d:4d:db:07:ae:36:f0:a8:62:1e:72:50:ec:20:7b:0d:3b: 44:b5:24:5e:68:75:0c:cd:ae:f7:65:6a:be:89:e3:f0:ab:32: ee:8f:b2:43:ce:88:0e:c8:c0:5f:50:d6:e9:9a:7d:13:fa:c1: e1:c2:3b:81:8f:4d:16:a4:1e:e6:c7:66:ec:6b:ef:56:51:1f: 33:aa:ff:13:41:b2:39:c7:c2:31:7e:b0:e3:6d:4e:91:ea:bc: 95:20:79:34:b9:33:51:11:7d:8b:3c:ad:a3:ef:29:48:0b:f8: 66:67:ea:8e:6f:7c:7f:96:43:69:70:33:61:d9:19:57:ec:10: 08:63:bc:57:af:6e:3d:35:e7:85:56:6e:e9:c9:80:be:ba:5f: 8d:2d:5b:e2:9b:63:16:b5:33:a2:3f:76:27:31:1d:bd:be:cb: c1:80:b8:fd:d1:cf:e7:1e:6e:1f:80:a7:73:31:8a:73:f4:96: 99:f4:8b:0b:e0:29:a4:d9:cc:03:79:38:03:35:ff:f9:9e:fe: ad:be:0e:ee:29:03:3f:0f:08:85:95:45:70:c0:74:c1:3c:73: 16:b1:ce:48:f5:ee:ac:5e:37:2e:67:63:6a:72:ec:f8:de:ba: 5b:03:b3:20:a5:c6:1c:01:b3:87:10:77:ec:36:b6:97:c4:17: 33:ba:4f:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3rFeDnT1MRFP3PcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUyMjEzMDAzMVoXDTI2MDgyMDEzMDAzMVowLzEtMCsGA1UEAxMk OGNhOGFiYmQtYzBmMS00ODBjLWIyZmYtMjcwNmE0NDFmOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur5UK1PP4CYOsfSyl8R27jbxJekSvP+VolYO E+6+kEd0JKukzyjmHqiBTcYBtqa3CqjFeHD2Bk38loLhKIfmA7fbRk3FX3VqKtGZ ve+7dwlhmj+iwuIKY7CebxG0HYX5zUIj0zkBY9bpeanWnhvmqiP/jL2y2FYRqEHw Pi2Sez05cM4CfJYER3b+p7Bha7SZPzZfO5QmlLb44H8lwtQDGes0ambMScJrtcu4 RBr0eJJ86bKVn2x1MsQu0YdPDw1wN7XhhsIhWfUxwjNhyrPPLf1ES1unde9XI2EE QDBVLCL+/pkvXvo/gxDPE3JAxMLzZ1f2BsHPzexjB0Ou8gJbcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzhjns1i9KigAdaGMEowNGeWb6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDVlYjAyZTUtYzc4Zi0z Yjc5LWI1YWEtNzE3MTYzMjU5MzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkdTdsHrjbwqGIeclDsIHsNO0S1JF5odQzNrvdlar6J4/CrMu6PskPO iA7IwF9Q1umafRP6weHCO4GPTRakHubHZuxr71ZRHzOq/xNBsjnHwjF+sONtTpHq vJUgeTS5M1ERfYs8raPvKUgL+GZn6o5vfH+WQ2lwM2HZGVfsEAhjvFevbj0154VW bunJgL66X40tW+KbYxa1M6I/dicxHb2+y8GAuP3Rz+cebh+Ap3MxinP0lpn0iwvg KaTZzAN5OAM1//me/q2+Du4pAz8PCIWVRXDAdME8cxaxzkj17qxeNy5nY2py7Pje ulsDsyClxhwBs4cQd+w2tpfEFzO6T+8= -----END CERTIFICATE-----Generated at Thu May 28 17:11:20 2026 by rpki-client