$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa File: 1a224cec-745f-335a-bdb0-1812db5a8b1c.roa (raw, json) Hash identifier: UrrR9gDfW+gSMOdOvJzOsT2wYR38JDBN2PRkbO/FIkk= Subject key identifier: C1:DE:BA:63:C6:12:5F:42:46:5C:C7:D1:87:95:CF:16:25:A1:1A:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D411FAE243F28E0080340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 72.16.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:41:1f:ae:24:3f:28:e0:08:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=daeebf19-9220-4312-a9f8-4a39ecac9b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e3:3c:c4:8f:2e:32:1c:99:92:62:fb:7c:4f: b6:9c:ec:d4:b0:d0:1e:c9:67:3c:43:16:68:26:ac: e7:32:ca:00:ac:bf:e4:0e:96:ce:e3:53:ae:65:48: 14:fc:2f:5a:a3:87:4e:73:82:b2:97:b1:bc:e5:75: 56:68:26:12:3e:54:98:dc:02:a3:13:43:77:0d:b3: fa:10:c3:7f:03:8a:28:a5:58:cd:74:f5:27:3b:cd: 76:c8:a5:ab:81:83:15:ab:71:3c:1f:03:73:6a:ee: 58:dd:e0:5f:44:0f:b1:32:aa:a6:d1:66:11:08:26: 7b:79:95:9c:1d:c0:98:f6:43:c5:23:78:38:a0:d9: dd:eb:32:4b:11:2c:5b:a6:4f:81:4c:fe:8a:76:89: b4:d5:e5:82:7a:99:8f:0d:fa:f3:93:fd:85:c1:26: ab:3b:7d:36:af:aa:fd:ef:99:24:c7:ea:b7:4b:fd: 21:0e:ae:bf:da:61:89:b0:8e:7b:70:b9:a7:87:7b: e1:b9:39:fd:0e:16:36:10:80:8d:50:cb:13:ee:7a: 00:d8:69:08:d1:90:4f:bf:e5:8c:40:f1:9e:d5:b0: 16:92:d6:d9:32:f1:ee:cf:95:88:1b:a1:b8:5b:56: 5b:8b:e9:11:f4:31:98:ac:22:ef:90:15:36:bb:37: 7a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DE:BA:63:C6:12:5F:42:46:5C:C7:D1:87:95:CF:16:25:A1:1A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a224cec-745f-335a-bdb0-1812db5a8b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:bf:34:05:e7:6a:1d:3d:d1:4c:45:9f:39:57:30:0c:7c:3c: 1e:77:58:af:3f:b0:85:1b:d5:40:4e:df:c6:83:ff:bc:0b:da: be:3c:4d:f7:22:91:b9:11:dc:da:ef:98:c6:b3:6d:1b:79:c7: 71:05:c0:7a:1e:ea:1b:da:c4:c7:94:db:7f:9e:f3:d1:eb:e7: cd:dd:89:d0:91:82:0b:71:d8:db:65:d4:f4:02:bd:67:e9:1a: c7:b1:2d:a8:74:5d:04:4e:64:81:15:1d:2f:33:60:29:8f:9a: c1:4f:16:99:68:3e:25:b9:88:55:a2:cb:9c:c3:5a:66:bb:b4: aa:2b:fb:e8:de:63:5d:e2:95:ed:4f:67:f1:95:5f:81:05:25: ea:41:4d:00:bf:e4:72:08:da:7f:cc:ae:57:cb:91:22:fe:95: f1:ab:01:03:8e:0e:eb:62:76:6a:20:8c:62:cd:ed:39:ce:ab: f7:e8:fb:e4:71:8a:97:ec:f6:d3:54:ef:bc:cb:92:37:7c:c2: 91:ca:9a:e8:b4:f1:38:3e:db:c5:25:2d:05:11:ce:11:1e:3b: ce:2d:b2:9a:18:e9:44:d4:1b:b8:15:aa:02:31:36:9b:0a:d0: eb:28:42:7e:b7:c4:c8:80:d9:30:93:7c:c8:c3:25:33:4c:c4: 76:e8:dc:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUEfriQ/KOAIA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZGFlZWJmMTktOTIyMC00MzEyLWE5ZjgtNGEzOWVjYWM5YjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+eM8xI8uMhyZkmL7fE+2nOzUsNAeyWc8QxZo JqznMsoArL/kDpbO41OuZUgU/C9ao4dOc4Kyl7G85XVWaCYSPlSY3AKjE0N3DbP6 EMN/A4oopVjNdPUnO812yKWrgYMVq3E8HwNzau5Y3eBfRA+xMqqm0WYRCCZ7eZWc HcCY9kPFI3g4oNnd6zJLESxbpk+BTP6Kdom01eWCepmPDfrzk/2FwSarO302r6r9 75kkx+q3S/0hDq6/2mGJsI57cLmnh3vhuTn9DhY2EICNUMsT7noA2GkI0ZBPv+WM QPGe1bAWktbZMvHuz5WIG6G4W1Zbi+kR9DGYrCLvkBU2uzd6zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHeumPGEl9CRlzH0YeVzxYloRqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWEyMjRjZWMtNzQ1Zi0z MzVhLWJkYjAtMTgxMmRiNWE4YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+/NAXnah090UxFnzlXMAx8PB53WK8/sIUb1UBO38aD/7wL2r48Tfci kbkR3NrvmMazbRt5x3EFwHoe6hvaxMeU23+e89Hr583didCRggtx2Ntl1PQCvWfp GsexLah0XQROZIEVHS8zYCmPmsFPFploPiW5iFWiy5zDWma7tKor++jeY13ile1P Z/GVX4EFJepBTQC/5HII2n/MrlfLkSL+lfGrAQOODutidmogjGLN7TnOq/fo++Rx ipfs9tNU77zLkjd8wpHKmui08Tg+28UlLQURzhEeO84tspoY6UTUG7gVqgIxNpsK 0OsoQn63xMiA2TCTfMjDJTNMxHbo3J4= -----END CERTIFICATE-----Generated at Mon Sep 28 18:05:13 2026 by rpki-client