$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa File: 02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa (raw, json) Hash identifier: mflqFEjdcjhUkzk8aV5SMsuIh6aQzIAXdwyKCDFk9WI= Subject key identifier: D1:39:9F:8D:8A:B4:D0:38:0A:F1:EC:86:04:AD:AB:7A:F9:C8:23:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F3A17D80CAB192B0CB3B06100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 72.172.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d8:0c:ab:19:2b:0c:b3:b0:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=e5aafef8-b87a-4be5-beca-cec59af753dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:83:5f:51:75:1d:aa:39:1b:3b:e5:d2:1d: 95:7f:55:3e:2e:fb:56:a4:6a:52:5b:60:e6:c6:f2: cd:76:11:df:31:39:9e:bc:87:22:b4:96:3f:16:87: 33:99:7c:ee:ed:1c:f9:b6:d6:64:30:b1:a2:d6:94: 4c:74:4b:9b:f5:4d:73:bd:c3:ea:5c:ec:a6:60:3b: 94:e1:bc:e8:89:d9:90:48:10:82:2f:02:91:ae:8e: 7c:9a:56:08:88:10:84:90:9b:74:f9:a2:d7:18:d6: 98:ff:e1:6d:6b:64:32:4d:cc:54:7f:80:98:d3:34: e3:b2:de:43:c8:ee:ac:6f:b7:7e:3e:f1:13:15:e0: 88:4e:72:dd:48:c3:e9:a2:45:51:53:46:25:5f:25: 8a:80:d7:02:f0:18:e7:3d:2a:36:d9:af:3a:ec:b4: 99:e6:2b:77:c6:29:16:75:f8:11:b9:f9:45:3e:f1: d5:70:f3:c4:9c:2b:24:ba:0e:9e:8a:8d:ed:2e:01: d8:f2:75:3f:cd:b5:c2:89:99:ca:97:06:5b:99:64: cc:8c:70:fa:f9:16:b9:ae:7f:4f:89:48:bd:4d:62: 95:c6:73:22:40:8b:6d:01:f7:fd:80:5d:7c:81:6f: 33:46:ac:6f:5b:56:95:aa:61:d4:b7:ec:8d:ed:e7: 89:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:39:9F:8D:8A:B4:D0:38:0A:F1:EC:86:04:AD:AB:7A:F9:C8:23:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:36:56:ed:11:27:6b:13:5e:60:2e:30:e2:d8:49:1c:2c:ca: 03:c2:bc:8a:85:a9:76:15:3a:7c:92:86:2b:22:58:1e:7c:d8: 76:1d:8d:2a:53:0f:fd:85:ec:fa:7d:6f:c1:d4:cf:66:13:3e: 63:4f:32:10:7f:3d:41:84:87:d5:27:4f:1b:c3:b8:d7:8e:df: 94:d8:8f:ab:50:74:46:47:e5:c7:4b:2a:3e:2f:16:15:f0:0c: 0c:09:ca:c3:cd:82:2d:a8:7a:56:ab:21:24:a9:d5:44:ef:79: a3:3b:44:cb:05:8e:3c:d1:97:7d:f1:e2:ee:73:b0:8d:4a:ca: ed:3f:10:3d:20:5a:f3:06:1a:91:86:80:c4:e7:13:92:b3:4f: 80:ad:f1:0b:32:b6:43:2a:5f:b3:8f:77:f9:6a:e4:47:f8:fb: d6:14:a8:6e:37:a4:0b:d4:4e:c4:b3:ee:83:7d:8a:dd:0f:c4: b0:51:25:16:ae:0a:13:12:15:ee:a2:74:fa:c9:00:6a:6f:63: ad:cb:27:26:39:0a:da:da:4c:2b:f5:7b:fd:64:7e:ea:50:01: bd:5c:f1:b7:7f:b2:30:99:91:da:f7:fb:4f:05:3c:f3:2d:d5: 82:fa:bc:4d:f4:46:4b:36:0b:16:c8:85:20:b5:cc:c5:2e:70: 3c:bc:87:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9gMqxkrDLOwYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk ZTVhYWZlZjgtYjg3YS00YmU1LWJlY2EtY2VjNTlhZjc1M2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKKDX1F1Hao5Gzvl0h2Vf1U+LvtWpGpSW2Dm xvLNdhHfMTmevIcitJY/FoczmXzu7Rz5ttZkMLGi1pRMdEub9U1zvcPqXOymYDuU 4bzoidmQSBCCLwKRro58mlYIiBCEkJt0+aLXGNaY/+Fta2QyTcxUf4CY0zTjst5D yO6sb7d+PvETFeCITnLdSMPpokVRU0YlXyWKgNcC8BjnPSo22a867LSZ5it3xikW dfgRuflFPvHVcPPEnCskug6eio3tLgHY8nU/zbXCiZnKlwZbmWTMjHD6+Ra5rn9P iUi9TWKVxnMiQIttAff9gF18gW8zRqxvW1aVqmHUt+yN7eeJ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE5n42KtNA4CvHshgStq3r5yCO9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDJiNGY1OGItZTY2ZC0z YmFlLWJjZjgtOWEwZGFhNjNkNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESKwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc2Vu0RJ2sTXmAuMOLYSRwsygPCvIqFqXYVOnyShisiWB582HYdjSpT D/2F7Pp9b8HUz2YTPmNPMhB/PUGEh9UnTxvDuNeO35TYj6tQdEZH5cdLKj4vFhXw DAwJysPNgi2oelarISSp1UTveaM7RMsFjjzRl33x4u5zsI1Kyu0/ED0gWvMGGpGG gMTnE5KzT4Ct8QsytkMqX7OPd/lq5Ef4+9YUqG43pAvUTsSz7oN9it0PxLBRJRau ChMSFe6idPrJAGpvY63LJyY5CtraTCv1e/1kfupQAb1c8bd/sjCZkdr3+08FPPMt 1YL6vE30Rks2CxbIhSC1zMUucDy8h9U= -----END CERTIFICATE-----Generated at Sun Sep 20 15:40:22 2026 by rpki-client