$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28779c77-406d-37df-bf4f-733612fdb2a4.roa File: 28779c77-406d-37df-bf4f-733612fdb2a4.roa (raw, json) Hash identifier: AwEWb9Jy9oq96fP/BKZqfG1rGKMbqY7rimAs+Frb/gg= Subject key identifier: DD:55:ED:4D:7E:3C:15:2A:DB:54:67:81:43:30:D0:5A:E8:B9:16:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A926A1CDC0ACA4CCF0720 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28779c77-406d-37df-bf4f-733612fdb2a4.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 72.16.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:92:6a:1c:dc:0a:ca:4c:cf:07:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=142eefe6-4570-4f19-bdfd-a0224bfadcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:dd:9d:e9:70:45:41:0f:d5:a1:23:16:40: 92:f3:5c:01:c8:5c:37:a3:16:13:9d:10:90:91:ed: 9b:eb:73:ac:49:91:34:95:39:35:69:0c:1e:14:0e: 7a:96:c2:32:79:d2:f5:d7:5b:92:0e:af:02:4a:ed: 06:12:ae:26:c9:4a:66:1b:8b:4c:e3:f0:d0:ec:ea: 38:6d:30:ad:7e:55:ad:dd:8a:60:70:07:c0:45:07: 4c:a6:54:67:e5:dc:af:42:0f:a4:08:e9:9b:3e:ff: 32:f5:73:34:b8:ea:94:d5:c4:3c:fd:e1:5b:e4:69: 8e:a7:89:12:94:57:c4:ab:7f:db:f9:7e:70:2e:24: aa:b6:a1:6a:a1:4c:fd:6e:55:0d:d7:8c:ee:5a:a3: f0:fc:1d:3d:fc:fd:e6:ae:1e:69:aa:a0:a0:0f:0b: f4:3c:23:f9:b9:5e:32:64:ca:b2:61:98:3f:e0:62: cd:26:cb:d2:96:5d:78:ff:d0:45:f5:5d:8d:e0:0a: 92:d2:ea:1a:e7:f1:6b:f7:52:93:be:a1:3f:2e:7e: 8d:e2:80:41:fc:5d:be:3b:51:aa:94:df:23:10:a5: 69:7a:fa:ee:4b:ac:ab:93:24:27:61:07:a7:ce:04: 00:7c:91:24:e6:9d:79:30:e1:97:36:05:b2:6e:e4: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:55:ED:4D:7E:3C:15:2A:DB:54:67:81:43:30:D0:5A:E8:B9:16:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28779c77-406d-37df-bf4f-733612fdb2a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:56:16:85:fb:69:a1:33:17:03:b1:19:61:02:03:80:0a:f6: a1:9a:1e:16:56:5e:d4:72:2e:b3:03:5b:0c:2b:ae:b8:36:03: 51:d0:cd:6f:c1:2d:26:de:78:f4:b5:9a:c9:81:5c:ab:fc:2e: 1f:51:3b:ff:bb:bf:16:94:94:f0:16:18:3d:2d:60:65:ce:f2: 66:43:d2:fd:29:8b:d2:fe:f9:51:25:49:75:21:f9:30:59:22: 27:03:ac:e7:eb:72:b5:9f:2b:5d:e9:6c:77:a7:e0:c0:7e:d5: 35:81:57:1e:0a:ac:a5:a5:b9:18:6d:e8:9c:6b:bd:66:9e:34: f9:d0:b0:83:1b:09:b0:c2:76:a4:73:4f:8a:44:45:3b:ea:ea: 51:99:ea:27:70:b9:96:bb:c3:3a:a5:85:e2:da:dc:26:5c:f6: c3:f0:07:af:23:6d:d9:8e:98:d5:f1:81:bc:37:29:ea:e8:c8: 8a:be:3e:36:5e:d3:fa:23:f9:61:4a:1f:c9:80:76:1f:0f:cc: 74:2e:ca:fd:25:b2:e8:2b:27:5c:49:c1:f3:31:b0:b8:5a:f5: 40:6f:2a:68:ea:68:0f:a8:f7:29:5e:40:7f:2b:10:d6:28:08: f2:de:e8:4e:c9:bd:1b:d5:ec:3a:93:8d:8e:1d:72:aa:29:e0: 5b:27:12:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpJqHNwKykzPByAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MTQyZWVmZTYtNDU3MC00ZjE5LWJkZmQtYTAyMjRiZmFkY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUfdnelwRUEP1aEjFkCS81wByFw3oxYTnRCQ ke2b63OsSZE0lTk1aQweFA56lsIyedL111uSDq8CSu0GEq4myUpmG4tM4/DQ7Oo4 bTCtflWt3YpgcAfARQdMplRn5dyvQg+kCOmbPv8y9XM0uOqU1cQ8/eFb5GmOp4kS lFfEq3/b+X5wLiSqtqFqoUz9blUN14zuWqPw/B09/P3mrh5pqqCgDwv0PCP5uV4y ZMqyYZg/4GLNJsvSll14/9BF9V2N4AqS0uoa5/Fr91KTvqE/Ln6N4oBB/F2+O1Gq lN8jEKVpevruS6yrkyQnYQenzgQAfJEk5p15MOGXNgWybuSl7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1V7U1+PBUq21RngUMw0FrouRbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjg3NzljNzctNDA2ZC0z N2RmLWJmNGYtNzMzNjEyZmRiMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpWFoX7aaEzFwOxGWECA4AK9qGaHhZWXtRyLrMDWwwrrrg2A1HQzW/B LSbeePS1msmBXKv8Lh9RO/+7vxaUlPAWGD0tYGXO8mZD0v0pi9L++VElSXUh+TBZ IicDrOfrcrWfK13pbHen4MB+1TWBVx4KrKWluRht6JxrvWaeNPnQsIMbCbDCdqRz T4pERTvq6lGZ6idwuZa7wzqlheLa3CZc9sPwB68jbdmOmNXxgbw3KeroyIq+PjZe 0/oj+WFKH8mAdh8PzHQuyv0lsugrJ1xJwfMxsLha9UBvKmjqaA+o9yleQH8rENYo CPLe6E7JvRvV7DqTjY4dcqop4FsnEjs= -----END CERTIFICATE-----Generated at Fri Apr 17 11:24:00 2026 by rpki-client