$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa File: 02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa (raw, json) Hash identifier: +AZssjQOYRODIAOZJI++OontzBYsorMDAVdW84LvZUM= Subject key identifier: 4A:3F:32:E8:31:16:72:94:59:70:48:A8:C8:8B:0E:93:E6:53:62:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E97B50A7A1D023E664F4BA480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 7029 IP address blocks: 72.172.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:0a:7a:1d:02:3e:66:4f:4b:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=58031900-0a56-4542-a70e-0bb7a7991f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:18:d9:ed:3f:24:bf:bd:a8:d4:e3:e8:3b:ba: 4b:1e:75:97:61:3a:87:2b:f3:bb:ce:c3:ca:3d:11: 64:9a:93:0b:c8:3c:3c:8d:55:dc:d0:e4:12:08:18: 0e:52:cb:47:ab:b0:41:e8:4a:d2:4e:41:32:2f:80: 58:e0:73:20:e0:67:95:d3:e0:8f:96:43:2f:72:9c: 19:41:ac:e3:40:e8:42:c8:f1:cd:fc:bd:89:2c:ce: 3d:1a:59:ae:15:3d:99:2a:99:11:e7:fa:e1:fb:ca: 97:19:8c:31:7d:77:f9:55:52:87:1f:12:c7:cf:ef: 6a:94:c4:6e:39:b2:b7:83:28:90:7b:d2:a3:5a:23: 21:42:47:ed:33:bb:8c:2c:fe:7d:e0:32:e4:d1:90: 97:e1:6d:13:d5:29:a2:81:14:f1:ab:2c:a5:a3:3d: 9b:c6:7f:b8:9e:e6:ba:d4:9c:1c:cb:a1:e2:3d:80: 2e:58:44:0e:ac:13:37:07:7c:8d:38:57:f6:ce:ed: 36:88:68:e0:fd:70:55:d1:7d:4c:d7:4c:cc:9d:c9: d5:f3:c1:f1:f7:32:43:35:39:66:e9:29:e7:b8:82: 54:9f:1d:52:16:e6:27:c6:ca:1f:68:3f:83:7f:16: f2:5f:6a:22:43:75:50:36:04:26:a8:1e:67:e4:7e: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3F:32:E8:31:16:72:94:59:70:48:A8:C8:8B:0E:93:E6:53:62:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f4:b5:42:2e:dc:b7:e2:4b:82:7b:94:92:25:82:7e:ad:3f: 84:cb:c1:06:66:8c:84:a5:2a:72:67:9f:44:5e:81:1b:27:eb: 29:e4:ff:e5:e7:fe:f4:df:25:bf:f0:15:ff:9f:4c:a2:33:84: 72:47:32:45:e1:0c:4f:03:2f:98:15:f7:e6:21:ff:17:8e:87: 75:46:c4:c3:fa:27:22:be:ac:89:37:4a:17:c2:60:71:68:dc: e3:1f:68:10:fd:58:a4:0a:8d:6b:cc:a9:67:e5:0d:a4:a7:e3: 05:d3:6a:b0:41:1f:10:72:52:20:10:59:84:3f:fa:57:eb:9a: cb:20:16:c0:31:75:38:2a:cd:7f:d8:10:ea:5e:45:19:63:b8: bf:e5:f1:30:eb:f4:7a:58:63:90:d4:cf:7e:96:a9:bb:3e:4e: b6:f3:fb:38:00:9a:bc:dc:b6:f6:fb:c6:f8:5d:25:02:f7:21: 32:82:94:02:a5:34:b2:83:bc:e8:2a:23:46:85:46:b3:45:be: ac:f3:88:39:3b:a2:fd:fc:1e:bb:1d:c9:ec:22:61:f2:fc:44: 10:69:56:80:9f:ba:69:60:3f:46:89:03:98:77:cb:55:00:9d: ed:38:a9:c6:b2:81:63:8d:3a:fc:84:d1:28:e4:b9:9a:0d:2e: 06:9c:34:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQp6HQI+Zk9LpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk NTgwMzE5MDAtMGE1Ni00NTQyLWE3MGUtMGJiN2E3OTkxZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xjZ7T8kv72o1OPoO7pLHnWXYTqHK/O7zsPK PRFkmpMLyDw8jVXc0OQSCBgOUstHq7BB6ErSTkEyL4BY4HMg4GeV0+CPlkMvcpwZ QazjQOhCyPHN/L2JLM49GlmuFT2ZKpkR5/rh+8qXGYwxfXf5VVKHHxLHz+9qlMRu ObK3gyiQe9KjWiMhQkftM7uMLP594DLk0ZCX4W0T1SmigRTxqyyloz2bxn+4nua6 1Jwcy6HiPYAuWEQOrBM3B3yNOFf2zu02iGjg/XBV0X1M10zMncnV88Hx9zJDNTlm 6SnnuIJUnx1SFuYnxsofaD+DfxbyX2oiQ3VQNgQmqB5n5H5utQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo/MugxFnKUWXBIqMiLDpPmU2KXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDJiNGY1OGItZTY2ZC0z YmFlLWJjZjgtOWEwZGFhNjNkNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESKwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX0tUIu3LfiS4J7lJIlgn6tP4TLwQZmjISlKnJnn0RegRsn6ynk/+Xn /vTfJb/wFf+fTKIzhHJHMkXhDE8DL5gV9+Yh/xeOh3VGxMP6JyK+rIk3ShfCYHFo 3OMfaBD9WKQKjWvMqWflDaSn4wXTarBBHxByUiAQWYQ/+lfrmssgFsAxdTgqzX/Y EOpeRRljuL/l8TDr9HpYY5DUz36Wqbs+Trbz+zgAmrzctvb7xvhdJQL3ITKClAKl NLKDvOgqI0aFRrNFvqzziDk7ov38HrsdyewiYfL8RBBpVoCfumlgP0aJA5h3y1UA ne04qcaygWONOvyE0SjkuZoNLgacNBc= -----END CERTIFICATE-----Generated at Thu Jul 23 22:58:35 2026 by rpki-client