$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa File: 1a224cec-745f-335a-bdb0-1812db5a8b1c.roa (raw, json) Hash identifier: ScNr2M2GxRlIc5rUrcfL4bwFjM64Lisk6qh7X2tbowY= Subject key identifier: E0:5C:09:65:F0:69:79:53:FD:8E:36:7F:7F:DD:3A:A6:89:92:09:DA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA03C0E4CD7FD3345DAA20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 72.16.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:03:c0:e4:cd:7f:d3:34:5d:aa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=ea79cc6a-60a5-4576-993a-2a9ff79ae0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:31:97:14:c8:6b:26:04:13:18:90:1e:5a: 09:c2:5d:f4:02:d5:29:e1:b7:c8:e5:fd:e6:94:ef: fe:ac:27:03:23:5e:a4:f3:6b:69:91:f3:5d:06:f5: 46:19:7d:10:1c:1e:e5:a5:67:fe:ab:3b:65:35:73: 1b:b7:27:b2:c3:77:63:a1:6a:a8:53:a1:30:9f:f1: 33:68:28:53:2c:ba:05:85:c5:bf:48:39:ef:f3:83: a7:6b:8f:85:b7:08:85:37:8a:0b:a5:0a:cb:0c:ad: 72:7c:dd:09:17:21:10:45:e4:da:9e:27:03:63:5f: d1:7a:4f:6c:19:87:d8:70:a7:b5:66:31:37:ac:6a: 86:f1:e3:51:90:cb:1e:fd:07:77:86:ea:43:73:0b: bf:ca:07:70:c8:31:5c:4b:ce:22:ca:d5:05:e6:ad: 2a:fe:a8:fb:d0:61:82:9a:8e:b8:82:42:fe:49:2c: 6e:64:80:79:95:e8:07:25:29:e5:d6:77:cd:5c:34: 99:24:01:7f:9e:41:e4:5e:c2:20:84:61:7c:4d:a3: 3e:42:53:92:a0:c7:21:13:15:49:b5:98:26:96:c5: 4e:44:56:6b:e3:42:1e:6f:6b:84:7f:fb:4b:4d:6d: 99:46:56:1c:3d:16:67:3e:ff:c8:89:19:6e:f6:ca: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5C:09:65:F0:69:79:53:FD:8E:36:7F:7F:DD:3A:A6:89:92:09:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c6:0d:2d:85:7d:8a:7a:98:a1:95:4c:a6:bb:b3:6b:9a:28: a8:9a:40:30:32:1e:78:09:30:04:c8:bf:bf:f3:b0:a9:5e:20: f7:d6:e7:85:93:22:8a:60:48:cc:40:5c:6b:d4:57:32:20:f8: 25:46:b6:90:cf:48:be:c5:51:dd:43:87:e0:b3:1b:78:6b:da: 0c:e3:a1:23:f5:43:c7:09:aa:65:68:dc:20:c9:15:d2:1e:7b: c7:57:2c:11:1d:fc:08:bb:d9:9b:1c:87:44:51:48:71:dc:d3: 2f:64:5e:39:c8:85:72:5d:18:b1:47:f9:de:39:58:b8:66:c3: c6:c9:f0:60:f6:8c:9c:4a:30:5d:ab:c0:50:1b:35:ab:cd:62: 69:64:1f:60:bf:b8:fd:f5:de:47:f2:8c:ba:ad:9d:23:64:4a: e6:df:01:08:a2:fe:93:38:64:89:f6:e8:06:41:ba:03:3d:2d: d3:6e:6f:1c:84:14:8f:dc:05:e2:bd:f5:84:52:2f:25:c5:5a: 9b:d6:0c:91:81:9a:52:09:4a:a9:09:d7:96:6e:8e:b8:3a:5f: cd:b7:73:2d:fb:1b:a7:d6:2e:e4:7a:c2:77:7c:1a:8c:bd:4c: 49:a9:48:58:71:b6:0e:9d:30:f2:d1:94:f8:98:2a:59:38:b9: 34:d0:88:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gPA5M1/0zRdqiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk ZWE3OWNjNmEtNjBhNS00NTc2LTk5M2EtMmE5ZmY3OWFlMGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLAxlxTIayYEExiQHloJwl30AtUp4bfI5f3m lO/+rCcDI16k82tpkfNdBvVGGX0QHB7lpWf+qztlNXMbtyeyw3djoWqoU6Ewn/Ez aChTLLoFhcW/SDnv84Ona4+FtwiFN4oLpQrLDK1yfN0JFyEQReTanicDY1/Rek9s GYfYcKe1ZjE3rGqG8eNRkMse/Qd3hupDcwu/ygdwyDFcS84iytUF5q0q/qj70GGC mo64gkL+SSxuZIB5legHJSnl1nfNXDSZJAF/nkHkXsIghGF8TaM+QlOSoMchExVJ tZgmlsVORFZr40Ieb2uEf/tLTW2ZRlYcPRZnPv/IiRlu9srP0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBcCWXwaXlT/Y42f3/dOqaJkgnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWEyMjRjZWMtNzQ1Zi0z MzVhLWJkYjAtMTgxMmRiNWE4YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7GDS2FfYp6mKGVTKa7s2uaKKiaQDAyHngJMATIv7/zsKleIPfW54WT IopgSMxAXGvUVzIg+CVGtpDPSL7FUd1Dh+CzG3hr2gzjoSP1Q8cJqmVo3CDJFdIe e8dXLBEd/Ai72Zsch0RRSHHc0y9kXjnIhXJdGLFH+d45WLhmw8bJ8GD2jJxKMF2r wFAbNavNYmlkH2C/uP313kfyjLqtnSNkSubfAQii/pM4ZIn26AZBugM9LdNubxyE FI/cBeK99YRSLyXFWpvWDJGBmlIJSqkJ15Zujrg6X823cy37G6fWLuR6wnd8Goy9 TEmpSFhxtg6dMPLRlPiYKlk4uTTQiHs= -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:59 2026 by rpki-client