$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa File: 02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa (raw, json) Hash identifier: j2uSEzL08Zh/bVqql1c/SzCTTatOxxeyJ9B+Hpv5yPE= Subject key identifier: 05:49:1F:D3:C9:A3:2A:8B:FF:73:69:C4:E7:72:35:64:91:70:2A:6A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DB7703862ED52244AF1486C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 7029 IP address blocks: 72.172.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:38:62:ed:52:24:4a:f1:48:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=569bed0e-2791-48de-8a25-66bd475d7ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:a9:78:81:97:e8:24:e3:d8:f1:26:03:ef: a2:62:cb:01:91:73:f8:b7:3f:86:26:ee:c7:c9:0f: f1:3d:e0:ed:3d:49:e7:2b:95:38:18:1d:4b:56:b6: 1c:91:44:c1:19:c0:96:86:ee:18:eb:4e:c3:7b:3d: 48:3e:47:5c:3f:1e:87:4f:ae:e5:36:1f:c1:74:17: 7f:52:b2:f8:f1:7b:3e:48:48:75:fd:52:89:aa:a2: 51:43:4b:cb:57:50:41:d9:7e:83:72:bf:97:f2:63: 84:70:ec:8d:69:a3:dc:94:8d:d6:d4:3a:56:52:e0: a2:1d:2c:e6:04:f2:18:8b:17:ae:9b:93:be:06:d0: 00:94:e0:59:3c:70:00:73:b3:73:0a:e9:7e:3f:d7: 63:bf:1a:51:d2:4f:14:eb:5c:4d:98:ef:f8:ea:88: 33:b6:58:50:84:ae:ce:0f:2c:81:78:b3:98:55:24: 2e:fa:6c:40:03:5b:22:d7:c3:5d:a3:92:f6:3d:3a: 11:b5:e5:ff:3c:8c:04:5a:ba:6c:d6:2e:6e:82:0a: 34:8c:39:1b:25:a0:ca:ab:44:f8:5e:91:4c:2d:7e: a5:23:ed:8c:ef:66:a1:1c:9b:8a:07:f3:27:67:44: 46:ea:28:9a:e0:ca:75:d3:3f:74:5a:83:54:b5:9f: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:49:1F:D3:C9:A3:2A:8B:FF:73:69:C4:E7:72:35:64:91:70:2A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02b4f58b-e66d-3bae-bcf8-9a0daa63d706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:02:fb:7d:64:5c:b2:91:14:52:fc:b1:c6:13:99:98:40:d4: 38:1d:49:cc:d8:b3:1f:28:74:8b:0f:0c:c2:da:f1:c1:b5:f1: 1f:eb:3c:90:cc:03:d2:39:70:30:57:5f:5f:8e:63:e5:e1:0e: e6:0c:9d:1c:e8:76:8f:f5:b3:95:36:94:60:8d:bb:78:4a:71: c6:82:73:8e:5e:b8:e1:5c:8d:cf:a3:5e:9c:28:28:c2:7d:31: 3f:49:8b:df:7c:a7:64:4c:ce:e4:b3:6b:72:bd:c6:0b:bf:2a: aa:e5:8b:1e:52:20:15:a1:ac:c3:65:e7:ad:64:fe:21:e2:b6: 99:1b:7a:b7:0c:65:3a:3c:02:93:94:75:43:7f:2a:1f:e7:26: 93:c1:4b:5f:a0:dd:68:6b:56:b6:34:48:18:e5:9e:53:44:7b: 5a:15:e2:7f:49:cd:bc:a1:9c:5d:4f:1a:24:57:d0:88:66:e5: 26:53:7e:f6:a9:c0:04:80:0b:fc:77:e6:61:4e:fd:23:13:44: 57:58:bd:39:4b:c0:05:66:38:4b:89:58:8c:35:68:53:55:76: d3:40:77:e2:f8:b7:ed:9d:1a:af:6f:5f:59:f4:41:9a:e8:3f: e6:6e:23:a7:75:c2:17:89:30:e7:d9:46:aa:ae:58:4b:31:02: ba:f6:de:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDhi7VIkSvFIbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk NTY5YmVkMGUtMjc5MS00OGRlLThhMjUtNjZiZDQ3NWQ3ZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLSpeIGX6CTj2PEmA++iYssBkXP4tz+GJu7H yQ/xPeDtPUnnK5U4GB1LVrYckUTBGcCWhu4Y607Dez1IPkdcPx6HT67lNh/BdBd/ UrL48Xs+SEh1/VKJqqJRQ0vLV1BB2X6Dcr+X8mOEcOyNaaPclI3W1DpWUuCiHSzm BPIYixeum5O+BtAAlOBZPHAAc7NzCul+P9djvxpR0k8U61xNmO/46ogztlhQhK7O DyyBeLOYVSQu+mxAA1si18Ndo5L2PToRteX/PIwEWrps1i5uggo0jDkbJaDKq0T4 XpFMLX6lI+2M72ahHJuKB/MnZ0RG6iia4Mp10z90WoNUtZ/FKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVJH9PJoyqL/3NpxOdyNWSRcCpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDJiNGY1OGItZTY2ZC0z YmFlLWJjZjgtOWEwZGFhNjNkNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESKwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUC+31kXLKRFFL8scYTmZhA1DgdSczYsx8odIsPDMLa8cG18R/rPJDM A9I5cDBXX1+OY+XhDuYMnRzodo/1s5U2lGCNu3hKccaCc45euOFcjc+jXpwoKMJ9 MT9Ji998p2RMzuSza3K9xgu/Kqrlix5SIBWhrMNl561k/iHitpkbercMZTo8ApOU dUN/Kh/nJpPBS1+g3WhrVrY0SBjlnlNEe1oV4n9JzbyhnF1PGiRX0Ihm5SZTfvap wASAC/x35mFO/SMTRFdYvTlLwAVmOEuJWIw1aFNVdtNAd+L4t+2dGq9vX1n0QZro P+ZuI6d1wheJMOfZRqquWEsxArr23sI= -----END CERTIFICATE-----Generated at Wed May 13 03:01:43 2026 by rpki-client