$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa File: c26c0b20-8706-3524-a0ea-85fc730e35b1.roa (raw, json) Hash identifier: OXOXd30KofQdjAO1VgCkDCPpymYa3rLW0CMEXHz0G/0= Subject key identifier: DA:B8:72:2B:04:EB:35:3B:64:FD:54:3E:9F:FA:F4:B5:40:D4:DD:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F22CFE61423D9C2D6E380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 72.25.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:22:cf:e6:14:23:d9:c2:d6:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=53d43b66-c3e3-48bc-b171-fb8df8e0023a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:03:3b:3a:0c:1f:72:7a:96:b8:1c:8b:13:ff: 40:a1:8c:58:38:96:7e:c4:35:cd:97:26:2c:00:27: a8:c2:37:cc:d3:ed:44:5c:08:58:19:a5:04:01:77: a1:71:0a:d3:8a:5d:1b:9f:22:67:23:4b:f8:92:2e: 3b:ba:a9:71:60:4d:e4:f7:42:8f:22:79:ad:4c:10: c6:46:c2:cb:83:86:30:f2:b9:08:8e:0b:50:9d:16: 88:89:80:20:37:d1:fb:c1:5c:2c:04:94:de:60:c5: ac:0e:b6:7a:86:b3:22:80:ab:f2:45:c1:ad:5f:85: 4a:94:03:e2:46:1a:c9:4f:fd:8c:1b:5c:4d:45:8f: c4:69:14:4b:f5:ff:9f:08:b8:d3:4d:e3:f0:9c:6e: 50:41:1a:f6:4c:27:b8:c8:5e:0b:83:96:13:b9:9c: e9:dd:cf:21:35:5d:0d:59:10:b4:75:c8:d7:a8:cb: 3a:e9:67:83:3e:e1:54:c0:b6:ee:1a:6d:08:43:f2: 8f:28:a1:e8:de:1f:46:67:69:1b:ce:e8:6b:c8:49: da:85:b4:a9:a3:ec:b2:ec:ba:57:9c:52:2d:f4:83: e7:e4:80:7b:ee:c4:bc:77:ca:9e:1f:03:a9:b3:47: 17:61:c6:71:44:21:ab:1a:13:ba:0a:cf:cd:b2:8a: 55:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B8:72:2B:04:EB:35:3B:64:FD:54:3E:9F:FA:F4:B5:40:D4:DD:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c26c0b20-8706-3524-a0ea-85fc730e35b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.25.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:fa:3a:c9:c8:bb:8f:7b:30:02:5b:09:d7:5b:f8:b8:59:19: bd:0b:c9:58:2b:0a:a9:55:a2:93:a9:fb:2a:12:b2:2b:2f:0f: f3:5a:83:8b:ef:a0:e1:71:fb:cb:1c:81:cc:4d:ff:22:82:93: c5:c0:87:e6:0a:80:77:14:bb:71:e9:83:0f:cb:cf:2d:8b:05: 72:a9:5a:7c:61:02:20:df:d8:ae:b0:fe:25:08:04:09:8b:34: dc:2b:d7:eb:cc:23:38:e8:75:c8:4a:b7:4e:29:ba:6f:e7:f7: c1:6e:30:b1:ab:37:15:f6:e6:52:31:cc:6c:d7:11:79:b3:9a: 3a:3a:df:07:0e:0b:78:f2:5c:23:27:33:7e:47:db:db:bd:d1: 4a:28:8f:ed:27:13:83:90:ce:46:4b:2c:6f:1b:0e:53:6d:64: 92:74:28:3b:ac:04:68:ec:10:03:a4:c6:78:9a:6e:0a:f2:77: e3:db:0d:ab:bf:d7:4c:eb:d2:1d:0c:03:a7:61:7e:21:87:45: 0d:72:dc:57:ce:c7:05:a2:f2:c8:9c:d3:6c:71:e9:16:5d:75: d2:a8:ea:de:ec:7d:cb:5f:2a:69:bc:c4:8b:38:06:6c:a7:cb: 44:87:50:bf:7f:47:bc:0b:a4:05:b9:59:d0:01:eb:bf:d8:2f: c7:ef:2d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyLP5hQj2cLW44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NTNkNDNiNjYtYzNlMy00OGJjLWIxNzEtZmI4ZGY4ZTAwMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwM7OgwfcnqWuByLE/9AoYxYOJZ+xDXNlyYs ACeowjfM0+1EXAhYGaUEAXehcQrTil0bnyJnI0v4ki47uqlxYE3k90KPInmtTBDG RsLLg4Yw8rkIjgtQnRaIiYAgN9H7wVwsBJTeYMWsDrZ6hrMigKvyRcGtX4VKlAPi RhrJT/2MG1xNRY/EaRRL9f+fCLjTTePwnG5QQRr2TCe4yF4Lg5YTuZzp3c8hNV0N WRC0dcjXqMs66WeDPuFUwLbuGm0IQ/KPKKHo3h9GZ2kbzuhryEnahbSpo+yy7LpX nFIt9IPn5IB77sS8d8qeHwOps0cXYcZxRCGrGhO6Cs/NsopV3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq4cisE6zU7ZP1UPp/69LVA1N09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzI2YzBiMjAtODcwNi0z NTI0LWEwZWEtODVmYzczMGUzNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESBkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn6OsnIu497MAJbCddb+LhZGb0LyVgrCqlVopOp+yoSsisvD/Nag4vv oOFx+8scgcxN/yKCk8XAh+YKgHcUu3Hpgw/Lzy2LBXKpWnxhAiDf2K6w/iUIBAmL NNwr1+vMIzjodchKt04pum/n98FuMLGrNxX25lIxzGzXEXmzmjo63wcOC3jyXCMn M35H29u90Uooj+0nE4OQzkZLLG8bDlNtZJJ0KDusBGjsEAOkxniabgryd+PbDau/ 10zr0h0MA6dhfiGHRQ1y3FfOxwWi8sic02xx6RZdddKo6t7sfctfKmm8xIs4Bmyn y0SHUL9/R7wLpAW5WdAB67/YL8fvLfI= -----END CERTIFICATE-----Generated at Sat Jun 13 20:12:19 2026 by rpki-client