$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa File: 1a224cec-745f-335a-bdb0-1812db5a8b1c.roa (raw, json) Hash identifier: Zf8+wFH6r9+Vl1YkdN31cQHLeNrEq6KnobC5N/pXZvs= Subject key identifier: 8F:76:9C:39:B3:ED:E7:26:08:AE:63:ED:EE:E4:92:CB:38:72:1C:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0C1EC868F8FE7253DF231A60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 7029 IP address blocks: 72.16.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:c8:68:f8:fe:72:53:df:23:1a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=1da3b6c6-05f6-4571-8c51-138ad875f255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:20:1b:18:f1:62:12:44:f3:6a:ea:64:aa:9a: 80:ee:03:e1:ef:ee:5a:bc:18:50:31:26:c5:3d:bf: b3:6f:1d:2d:ab:5f:c5:f0:12:90:3e:4c:f2:d1:0e: 64:7e:fd:1a:1a:b0:36:40:b0:f2:4e:37:fd:55:d9: af:bd:e6:2a:69:48:33:fe:b0:7e:b1:d9:c7:19:6d: 85:d8:8c:49:7f:bc:d6:d0:c5:e9:81:c1:7c:12:7f: 03:76:41:f5:0a:7c:97:e8:b3:ae:1d:05:75:82:0b: de:aa:55:03:12:3a:b9:27:bb:e4:e7:2a:c7:9d:49: d2:1a:a7:e7:fa:a2:c5:75:ca:7a:ab:69:e7:d1:a3: 34:99:51:a1:6d:3a:4e:49:4f:c7:b6:b2:3b:87:b6: 72:92:43:36:a8:ab:1f:e5:8b:5c:a3:81:9f:5f:1b: fc:f3:73:d5:52:2d:01:84:2a:0b:80:f9:0f:ef:64: 7d:45:e4:c3:f9:ba:f0:87:89:f2:67:68:de:b0:79: 79:68:bd:6c:74:63:50:ae:f7:aa:78:f9:7d:80:ed: 54:f3:13:1e:50:77:20:43:80:9d:01:ef:47:8c:fc: 89:69:b5:39:9b:25:d9:38:31:09:1a:10:7b:35:9f: f1:80:95:d1:59:a2:60:14:1c:29:3e:b9:61:b8:2d: 1b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:76:9C:39:B3:ED:E7:26:08:AE:63:ED:EE:E4:92:CB:38:72:1C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ae:37:0f:ac:d3:c3:04:57:f7:64:e6:27:23:22:75:2b:cb: e6:92:51:8a:49:d8:2b:b6:8d:1b:6c:29:63:99:8e:bd:bb:a4: d2:a4:b2:a4:b4:46:47:2d:0c:a7:25:3c:ed:58:82:87:24:a4: 33:b7:a2:06:27:dc:56:c5:aa:ea:bf:c6:67:25:e4:50:8b:99: a9:07:e6:a0:cc:2c:2d:d2:ef:33:ff:6b:b3:b5:4b:13:cc:00: 5a:88:d4:22:0c:e7:e3:0b:e7:00:a1:0a:1d:be:74:aa:e6:7b: 40:43:ee:ce:e1:fd:a4:a6:88:3e:98:c3:30:cd:22:82:0b:84: 77:27:64:ff:97:07:70:96:d9:77:38:2d:f7:17:5b:5e:63:7b: 27:f1:17:07:c9:bf:38:03:ac:62:05:77:d5:43:ee:ba:c4:ba: 4f:1f:54:27:f3:c1:da:29:cf:f1:7a:ba:01:2f:db:ba:05:23: 0c:15:dc:cf:e9:ad:0a:39:0e:f1:fc:8b:31:e6:35:51:74:72: 4a:93:51:c9:d3:24:0a:d4:94:6c:49:cc:2d:22:bc:e0:38:85: f6:e3:54:d1:18:7d:41:e3:cd:15:8c:e2:9a:28:48:3b:8e:fe: e0:21:d5:56:89:01:8b:14:70:43:e8:38:b7:e8:e6:cc:48:8d: ad:05:c4:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHsho+P5yU98jGmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk MWRhM2I2YzYtMDVmNi00NTcxLThjNTEtMTM4YWQ4NzVmMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSAbGPFiEkTzaupkqpqA7gPh7+5avBhQMSbF Pb+zbx0tq1/F8BKQPkzy0Q5kfv0aGrA2QLDyTjf9VdmvveYqaUgz/rB+sdnHGW2F 2IxJf7zW0MXpgcF8En8DdkH1CnyX6LOuHQV1ggveqlUDEjq5J7vk5yrHnUnSGqfn +qLFdcp6q2nn0aM0mVGhbTpOSU/HtrI7h7ZykkM2qKsf5Ytco4GfXxv883PVUi0B hCoLgPkP72R9ReTD+brwh4nyZ2jesHl5aL1sdGNQrveqePl9gO1U8xMeUHcgQ4Cd Ae9HjPyJabU5myXZODEJGhB7NZ/xgJXRWaJgFBwpPrlhuC0blQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI92nDmz7ecmCK5j7e7kkss4chyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWEyMjRjZWMtNzQ1Zi0z MzVhLWJkYjAtMTgxMmRiNWE4YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+uNw+s08MEV/dk5icjInUry+aSUYpJ2Cu2jRtsKWOZjr27pNKksqS0 RkctDKclPO1YgockpDO3ogYn3FbFquq/xmcl5FCLmakH5qDMLC3S7zP/a7O1SxPM AFqI1CIM5+ML5wChCh2+dKrme0BD7s7h/aSmiD6YwzDNIoILhHcnZP+XB3CW2Xc4 LfcXW15jeyfxFwfJvzgDrGIFd9VD7rrEuk8fVCfzwdopz/F6ugEv27oFIwwV3M/p rQo5DvH8izHmNVF0ckqTUcnTJArUlGxJzC0ivOA4hfbjVNEYfUHjzRWM4pooSDuO /uAh1VaJAYsUcEPoOLfo5sxIja0FxNU= -----END CERTIFICATE-----Generated at Sat Jun 13 19:02:24 2026 by rpki-client