$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1a9cfe-62ae-33c5-9512-caf264f0a3a0.roa File: 1c1a9cfe-62ae-33c5-9512-caf264f0a3a0.roa (raw, json) Hash identifier: fYQxbyJMhsfqTXXPCPn9VjmgKQTSJLDAIJoEF1rkCDQ= Subject key identifier: 62:C8:EB:6C:64:FF:B1:50:60:39:28:F6:2A:B3:6F:74:E6:0C:C2:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6AD33BDB90B08FDB1700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1a9cfe-62ae-33c5-9512-caf264f0a3a0.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 72.4.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6a:d3:3b:db:90:b0:8f:db:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=beae6c93-1b36-48e0-a554-6de88c0b1cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:11:01:e4:a0:94:7f:2d:84:e0:6e:79:db: 9a:ca:14:4a:72:a0:e8:39:95:7e:ad:10:ef:5a:43: 4b:cc:eb:2a:07:30:88:d2:94:c0:7d:7e:16:73:0d: 2c:70:d7:b1:86:dd:cf:76:f0:ef:e1:0f:18:ab:15: 6b:10:24:7b:ea:bb:c7:9b:d0:22:d2:06:58:db:72: 55:03:66:a5:4d:12:5a:d9:71:4d:b2:c7:34:85:06: 59:07:0e:09:cf:f6:c8:d7:cb:65:89:42:e8:f6:5b: 04:54:f7:bb:2e:83:1c:98:08:4a:26:ed:df:bd:6a: 57:a3:59:14:a7:64:a7:a5:0f:e5:a3:3e:51:70:89: 37:d4:13:3c:99:4e:c6:98:cf:03:df:c5:bc:5b:ba: 2e:e5:5e:e4:44:2a:19:df:02:f9:23:4d:f8:14:39: 1d:99:c6:f5:dc:00:be:d9:6d:fc:c1:ac:88:8d:ee: a2:85:a1:18:51:63:a2:7b:44:c6:e3:3f:21:1f:bd: f1:3d:c5:43:50:08:8d:dc:e4:7e:63:2d:a4:cd:31: c4:a2:bf:f4:c6:5b:90:df:4b:38:62:d3:ff:2f:b8: 34:bc:93:01:7f:aa:4d:2c:7a:6a:a6:c3:a3:28:15: c2:e8:b9:e4:ef:84:11:41:d6:4b:1b:77:71:0e:11: 4f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C8:EB:6C:64:FF:B1:50:60:39:28:F6:2A:B3:6F:74:E6:0C:C2:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1a9cfe-62ae-33c5-9512-caf264f0a3a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a8:02:7d:46:fa:27:81:e0:3e:8a:a1:e3:a3:ae:fa:73:2a: d9:4b:bd:bf:5a:b0:40:52:94:71:a2:82:cd:bf:d7:84:bc:31: 04:7a:43:98:e4:57:57:5d:37:bd:4d:35:89:f8:7f:92:2f:1c: 4a:b4:34:97:1f:8a:e6:6f:7e:e3:96:61:ea:aa:19:cf:24:79: 8c:22:13:75:12:51:7d:73:c8:0d:7e:ef:f0:66:84:a4:d2:ca: e4:34:9f:f3:28:da:af:19:b4:78:10:c2:b1:73:ec:eb:45:73: d4:d4:81:19:d5:e9:4d:44:7d:66:43:73:6e:5a:41:b0:4d:71: 90:cb:00:eb:e6:4e:c7:96:60:86:65:67:4e:de:29:97:f4:67: 59:d4:cf:8f:01:37:ee:47:9c:53:06:52:f6:48:80:82:fd:78: e6:27:58:91:69:60:1f:3a:e2:50:04:0a:9a:15:00:fd:d6:1b: bc:54:47:a4:64:2f:8d:1b:58:62:0d:e3:4e:97:c6:fe:d8:d2: 88:55:f4:a0:a0:29:b2:69:80:a8:35:e8:94:33:ce:d2:d6:fa: 1d:78:49:5c:01:4d:5b:42:35:1f:59:ab:5c:34:7c:05:7c:ed: 02:ad:d4:fe:a5:fa:7d:8c:f9:31:46:1f:32:a6:51:5f:d0:51: 9c:63:5e:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmrTO9uQsI/bFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YmVhZTZjOTMtMWIzNi00OGUwLWE1NTQtNmRlODhjMGIxY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+QRAeSglH8thOBueduayhRKcqDoOZV+rRDv WkNLzOsqBzCI0pTAfX4Wcw0scNexht3PdvDv4Q8YqxVrECR76rvHm9Ai0gZY23JV A2alTRJa2XFNssc0hQZZBw4Jz/bI18tliULo9lsEVPe7LoMcmAhKJu3fvWpXo1kU p2SnpQ/loz5RcIk31BM8mU7GmM8D38W8W7ou5V7kRCoZ3wL5I034FDkdmcb13AC+ 2W38wayIje6ihaEYUWOie0TG4z8hH73xPcVDUAiN3OR+Yy2kzTHEor/0xluQ30s4 YtP/L7g0vJMBf6pNLHpqpsOjKBXC6Lnk74QRQdZLG3dxDhFPVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLI62xk/7FQYDko9iqzb3TmDMI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMxYTljZmUtNjJhZS0z M2M1LTk1MTItY2FmMjY0ZjBhM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSATAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKoAn1G+ieB4D6KoeOjrvpzKtlLvb9asEBSlHGigs2/14S8MQR6Q5jk V1ddN71NNYn4f5IvHEq0NJcfiuZvfuOWYeqqGc8keYwiE3USUX1zyA1+7/BmhKTS yuQ0n/Mo2q8ZtHgQwrFz7OtFc9TUgRnV6U1EfWZDc25aQbBNcZDLAOvmTseWYIZl Z07eKZf0Z1nUz48BN+5HnFMGUvZIgIL9eOYnWJFpYB864lAECpoVAP3WG7xUR6Rk L40bWGIN406Xxv7Y0ohV9KCgKbJpgKg16JQzztLW+h14SVwBTVtCNR9Zq1w0fAV8 7QKt1P6l+n2M+TFGHzKmUV/QUZxjXjA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:38:49 2026 by rpki-client