$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa File: baeb3e2a-1ecc-336f-80c3-456c0c327903.roa (raw, json) Hash identifier: zoy7Y7vbxGeeBZ7zp7qUFrEI5eTX6o6zKMunuSAAXc8= Subject key identifier: E2:2C:C2:BA:FF:2E:82:E6:CD:32:70:F2:10:3F:BA:34:27:9C:D1:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E18AEF68E233E4A17D252D8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 72.172.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:f6:8e:23:3e:4a:17:d2:52:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=d7ada301-999d-42f7-b2f8-2f7261a82a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:0e:63:43:79:99:72:7e:eb:aa:1d:0e:e0: 7e:26:a3:ce:c3:53:0f:b1:68:34:0b:67:fd:15:01: 4d:db:75:6c:91:b9:05:cc:a2:1e:e4:6d:9c:52:4a: d5:3f:25:50:1a:07:c9:e7:09:c7:f0:7c:2f:b0:96: c1:40:e2:c4:23:3a:26:48:9b:1b:e2:8c:f4:76:c5: 0d:ce:d5:ae:f2:18:01:03:c6:9d:66:3d:84:d2:23: f6:76:78:b3:f2:fb:ed:35:2f:02:ee:04:93:f7:e3: a6:5d:db:a2:01:7d:14:7e:71:f3:de:56:e7:16:c1: 12:f1:14:ab:44:ac:5c:f1:34:31:bc:a6:15:f6:f5: 9c:b3:b2:57:a9:84:ab:84:66:f4:c4:b2:8e:fe:e9: 8c:c3:69:7b:04:6b:41:a9:27:48:58:ee:ab:32:7c: 06:0b:7f:a5:a8:77:54:04:3b:91:24:fd:f9:3f:f7: c1:a9:4a:ea:2a:5a:cb:26:f7:d6:fc:b6:36:08:f8: d3:f6:03:f4:38:6b:80:b1:b4:8b:ef:d4:9f:47:e5: 88:ae:ca:bb:58:c5:ad:9c:76:a2:7a:a4:0e:e7:f5: f2:28:74:c6:9c:81:cd:37:44:30:c4:51:0e:de:17: 36:97:50:66:f1:19:12:3f:2f:2a:94:17:c1:bf:c6: b6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2C:C2:BA:FF:2E:82:E6:CD:32:70:F2:10:3F:BA:34:27:9C:D1:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:82:c4:d9:98:da:cf:61:af:cb:15:41:b6:8f:92:3f:39:b5: f8:91:ea:b5:3f:1c:d5:2b:84:78:d4:64:dd:6d:9b:e4:6b:5e: 59:db:c2:62:0a:0a:d6:fa:9b:13:94:eb:36:52:5a:16:5f:1d: 32:a4:58:3c:5d:07:94:bf:2c:61:5f:46:66:46:ce:eb:ba:54: 34:51:1d:51:88:a4:40:0d:03:43:5e:b6:f1:81:aa:9c:87:a5: 9a:b8:0e:7a:40:da:04:43:cb:31:56:fe:57:66:29:b6:24:22: 9f:87:84:7a:05:4e:55:9e:00:a6:8d:d4:48:aa:36:84:8b:ec: 42:37:97:e0:7f:aa:01:67:74:fd:05:d1:c7:d0:b9:40:b7:f9: 37:92:6c:2e:67:d6:d5:57:bc:ff:98:a1:50:eb:49:43:14:ae: 6f:5a:16:55:40:69:50:aa:6c:8c:08:5b:13:80:86:f5:c2:1d: 80:1f:6f:4f:9f:34:49:82:c2:5f:33:81:92:bc:c7:81:38:3d: 71:39:74:f9:d9:9e:86:f4:f7:be:40:36:7e:42:18:f3:98:89: 15:73:41:e8:7d:4d:0f:1c:1a:f4:be:1a:1d:2b:bb:35:68:68: 4a:1f:0f:e9:fa:07:10:b7:74:b4:c3:0d:8e:0a:fe:0b:9a:11: 0c:4b:d3:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4YrvaOIz5KF9JS2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk ZDdhZGEzMDEtOTk5ZC00MmY3LWIyZjgtMmY3MjYxYTgyYTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEwOY0N5mXJ+66odDuB+JqPOw1MPsWg0C2f9 FQFN23VskbkFzKIe5G2cUkrVPyVQGgfJ5wnH8HwvsJbBQOLEIzomSJsb4oz0dsUN ztWu8hgBA8adZj2E0iP2dniz8vvtNS8C7gST9+OmXduiAX0UfnHz3lbnFsES8RSr RKxc8TQxvKYV9vWcs7JXqYSrhGb0xLKO/umMw2l7BGtBqSdIWO6rMnwGC3+lqHdU BDuRJP35P/fBqUrqKlrLJvfW/LY2CPjT9gP0OGuAsbSL79SfR+WIrsq7WMWtnHai eqQO5/XyKHTGnIHNN0QwxFEO3hc2l1Bm8RkSPy8qlBfBv8a24QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIswrr/LoLmzTJw8hA/ujQnnNGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmFlYjNlMmEtMWVjYy0z MzZmLTgwYzMtNDU2YzBjMzI3OTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSKwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqCxNmY2s9hr8sVQbaPkj85tfiR6rU/HNUrhHjUZN1tm+RrXlnbwmIK Ctb6mxOU6zZSWhZfHTKkWDxdB5S/LGFfRmZGzuu6VDRRHVGIpEANA0NetvGBqpyH pZq4DnpA2gRDyzFW/ldmKbYkIp+HhHoFTlWeAKaN1EiqNoSL7EI3l+B/qgFndP0F 0cfQuUC3+TeSbC5n1tVXvP+YoVDrSUMUrm9aFlVAaVCqbIwIWxOAhvXCHYAfb0+f NEmCwl8zgZK8x4E4PXE5dPnZnob0975ANn5CGPOYiRVzQeh9TQ8cGvS+Gh0ruzVo aEofD+n6BxC3dLTDDY4K/guaEQxL020= -----END CERTIFICATE-----Generated at Sat Jun 13 07:25:43 2026 by rpki-client