$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa File: 87e19014-95d4-3209-bca4-b836be54d913.roa (raw, json) Hash identifier: MmCrM5U9GWp0VHyQFgA+XWZCWj65yRp4utMBy3lE+wY= Subject key identifier: EB:CC:B7:A6:CD:9A:FB:4B:97:D7:E4:15:43:93:31:2A:CB:21:23:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F02EE0669D58B4026CD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 53435 IP address blocks: 72.4.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:02:ee:06:69:d5:8b:40:26:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=b2d50cc2-9754-42e0-90f2-7c56e82addf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:45:05:5f:54:f2:f0:f9:6e:78:52:60:d3:07: 1d:37:2a:06:cb:b3:98:60:e5:9c:95:08:17:b0:a1: 94:88:d4:03:54:c0:05:07:68:9f:f1:05:a9:2e:f8: a5:fb:c1:11:4f:19:cf:07:bf:95:70:08:2d:f3:46: eb:30:7b:39:11:ae:e2:c2:31:2e:20:23:ff:f8:f9: a2:c7:96:d8:70:51:de:dd:fa:3d:bd:b0:7a:a5:1c: 80:13:8a:ee:95:ec:ac:f4:63:3e:e5:5f:fe:45:a2: ef:6e:35:26:3d:69:d0:27:3b:27:0d:b9:88:37:1d: b4:7d:61:12:cc:ff:4d:84:73:9c:09:de:ea:80:f7: 22:4d:6a:c0:0d:5f:d9:6f:3b:d7:80:1d:f4:f8:3b: dc:d5:12:53:5e:66:a7:e3:dd:5e:91:b1:44:1c:41: ce:5d:6a:3b:e7:a5:2a:a9:42:ba:b0:87:ab:81:6f: cd:ae:1c:89:6f:63:2a:8d:05:5c:0f:ad:eb:f0:5a: f8:f9:5b:bd:c1:34:29:19:a0:12:65:9a:85:60:53: 2c:e5:24:91:3f:7a:db:34:91:ac:8a:87:ce:33:24: 5c:83:ac:d9:a5:4f:10:a3:a7:c2:b8:3a:c5:61:13: c4:73:84:05:37:5f:ba:d1:87:91:28:b4:1f:57:35: a3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CC:B7:A6:CD:9A:FB:4B:97:D7:E4:15:43:93:31:2A:CB:21:23:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4e:b1:06:57:d5:74:f5:4c:c4:2f:ba:e3:eb:3a:70:bc:4d: 53:eb:9f:9e:24:e1:a3:08:d0:d5:10:cc:fa:95:77:63:dd:3b: 2f:15:84:d7:fc:84:99:67:61:cb:f2:10:d1:ec:99:d7:29:8f: 04:ac:f7:c9:54:32:a6:d4:28:4d:bd:3e:e0:40:ff:69:52:c9: 62:f9:7a:b8:77:dc:2b:2d:af:b2:13:f8:53:b3:ce:3f:33:80: b4:fe:56:d3:48:0e:34:fd:e7:9d:78:bb:37:aa:56:ee:e2:e1: 24:48:e9:96:66:a5:0e:9f:47:47:a9:ee:8d:cb:fc:35:b2:08: c7:4e:26:f5:bc:91:3c:98:3e:d6:4c:85:8a:90:82:3c:fe:3d: 97:a3:31:44:3b:26:dd:29:1d:e1:52:d1:4e:52:fd:a3:76:3b: 39:85:51:ed:1b:67:fe:ce:ae:d0:44:03:e2:a5:13:30:08:45: ad:8d:18:97:71:53:4c:20:88:fc:7c:e6:e4:ae:e2:79:00:18: 03:9f:69:44:8a:38:9c:65:85:a5:49:56:a8:e9:70:1c:3b:54: d2:2c:b3:40:d3:01:fe:03:e6:3e:8e:0b:db:b7:83:03:e4:a5: c3:aa:69:e0:cc:0e:f8:2b:a9:5b:15:65:1a:83:2e:81:11:67: 78:12:d2:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwLuBmnVi0AmzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YjJkNTBjYzItOTc1NC00MmUwLTkwZjItN2M1NmU4MmFkZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEUFX1Ty8PlueFJg0wcdNyoGy7OYYOWclQgX sKGUiNQDVMAFB2if8QWpLvil+8ERTxnPB7+VcAgt80brMHs5Ea7iwjEuICP/+Pmi x5bYcFHe3fo9vbB6pRyAE4ruleys9GM+5V/+RaLvbjUmPWnQJzsnDbmINx20fWES zP9NhHOcCd7qgPciTWrADV/ZbzvXgB30+Dvc1RJTXman491ekbFEHEHOXWo756Uq qUK6sIergW/NrhyJb2MqjQVcD63r8Fr4+Vu9wTQpGaASZZqFYFMs5SSRP3rbNJGs iofOMyRcg6zZpU8Qo6fCuDrFYRPEc4QFN1+60YeRKLQfVzWjAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvMt6bNmvtLl9fkFUOTMSrLISP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdlMTkwMTQtOTVkNC0z MjA5LWJjYTQtYjgzNmJlNTRkOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdOsQZX1XT1TMQvuuPrOnC8TVPrn54k4aMI0NUQzPqVd2PdOy8VhNf8 hJlnYcvyENHsmdcpjwSs98lUMqbUKE29PuBA/2lSyWL5erh33Cstr7IT+FOzzj8z gLT+VtNIDjT95514uzeqVu7i4SRI6ZZmpQ6fR0ep7o3L/DWyCMdOJvW8kTyYPtZM hYqQgjz+PZejMUQ7Jt0pHeFS0U5S/aN2OzmFUe0bZ/7OrtBEA+KlEzAIRa2NGJdx U0wgiPx85uSu4nkAGAOfaUSKOJxlhaVJVqjpcBw7VNIss0DTAf4D5j6OC9u3gwPk pcOqaeDMDvgrqVsVZRqDLoERZ3gS0p0= -----END CERTIFICATE-----Generated at Sat Jun 13 16:23:13 2026 by rpki-client