$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/230d53cc-fdcf-3da4-a7ce-3953e46b2f57.roa File: 230d53cc-fdcf-3da4-a7ce-3953e46b2f57.roa (raw, json) Hash identifier: pwnGdvl8GY1bJJeULq51+RtpEGwYIY+EKSxf+Hj+uZ4= Subject key identifier: E2:2F:DD:2E:3A:35:EA:E5:54:73:93:6B:97:4A:BA:45:3A:5F:8D:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A97BB04E60132E43A5280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/230d53cc-fdcf-3da4-a7ce-3953e46b2f57.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 72.16.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:97:bb:04:e6:01:32:e4:3a:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=a6d72718-df00-4205-b128-d6cb9be7e2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:b8:2c:7d:22:57:82:50:90:8c:ef:d5:a2: 29:94:cb:ff:74:d7:d0:a4:78:7f:d7:3c:6c:31:e8: 18:89:fa:2d:cd:81:b5:ad:7e:3c:55:1e:54:6e:27: e3:08:5e:a4:2e:d0:92:90:42:7e:33:7c:02:0c:61: 1f:1e:5e:79:0d:29:2c:42:db:71:26:5c:7e:97:2a: 40:2d:9d:8d:e0:9a:24:43:2c:03:90:31:19:2a:1b: da:b7:83:47:cd:31:c2:2f:fc:fa:45:4e:dc:1b:24: c4:c7:ce:f7:44:2c:36:13:ca:9e:20:66:11:ef:3e: 55:a9:bd:b1:f1:73:5a:a9:7e:37:44:93:86:2b:91: 30:96:04:df:ae:5f:90:f1:93:bd:6d:94:74:8b:ec: a1:8c:44:66:10:6d:1a:62:13:45:87:63:08:43:48: da:22:70:ad:97:88:51:9d:0a:93:0a:3f:c3:12:ba: ad:09:4e:70:07:f0:14:5e:8f:4f:1d:1d:49:93:f6: b3:f0:44:37:4d:3f:0d:55:31:bd:42:e3:e6:bf:a8: 1a:ed:73:03:b6:c0:39:ae:fd:20:78:9a:0d:7c:c1: 37:8a:f7:fa:9c:68:7c:87:2a:0d:ba:a8:5c:fc:4f: 20:13:9c:6a:90:5e:54:70:91:f8:c6:53:d4:90:39: 95:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2F:DD:2E:3A:35:EA:E5:54:73:93:6B:97:4A:BA:45:3A:5F:8D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/230d53cc-fdcf-3da4-a7ce-3953e46b2f57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b2:33:f3:5a:98:1b:c7:15:e5:c3:38:82:b3:cf:42:39:95: 06:f7:d1:51:2e:53:0d:96:52:c1:35:85:61:e4:0c:6c:72:91: 8c:dd:b6:f3:c7:33:e4:22:e4:50:64:d4:d3:75:c3:84:61:a8: de:ce:78:d9:df:8a:59:ec:a0:10:f2:ef:60:75:aa:9d:ac:47: 87:16:df:bd:32:88:76:60:30:8c:8b:0d:46:a5:7b:5f:82:92: c0:4a:0d:ab:e0:30:02:14:7f:db:79:ca:9e:cc:cd:c6:2c:80: 1f:6f:63:0e:b5:ba:cc:15:2a:91:2c:78:6e:85:85:c5:65:34: 8b:1c:8b:a6:eb:01:f9:e5:ad:89:a5:97:aa:47:f8:fd:52:10: b6:f1:51:f1:b9:b8:2b:7e:a6:57:a2:cc:e0:0d:33:4b:94:1c: 16:cb:16:6a:b9:64:ee:78:af:65:9d:f4:93:b7:dc:2b:98:f7: 0d:37:2a:ee:b7:b9:98:eb:0f:47:94:b9:88:fd:9e:27:bd:fa: 9d:e3:8d:08:58:fd:ad:a0:22:40:db:5b:85:04:5a:94:7f:18: 51:7d:e9:94:ff:d7:f8:d8:4c:ec:aa:64:1b:00:67:0a:38:de: 94:af:c2:06:91:6f:fe:29:bc:51:9a:23:e2:8c:f1:9c:ec:99: 44:2a:2b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpe7BOYBMuQ6UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YTZkNzI3MTgtZGYwMC00MjA1LWIxMjgtZDZjYjliZTdlMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggy4LH0iV4JQkIzv1aIplMv/dNfQpHh/1zxs MegYifotzYG1rX48VR5UbifjCF6kLtCSkEJ+M3wCDGEfHl55DSksQttxJlx+lypA LZ2N4JokQywDkDEZKhvat4NHzTHCL/z6RU7cGyTEx873RCw2E8qeIGYR7z5Vqb2x 8XNaqX43RJOGK5EwlgTfrl+Q8ZO9bZR0i+yhjERmEG0aYhNFh2MIQ0jaInCtl4hR nQqTCj/DErqtCU5wB/AUXo9PHR1Jk/az8EQ3TT8NVTG9QuPmv6ga7XMDtsA5rv0g eJoNfME3ivf6nGh8hyoNuqhc/E8gE5xqkF5UcJH4xlPUkDmVsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIv3S46NerlVHOTa5dKukU6X42+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjMwZDUzY2MtZmRjZi0z ZGE0LWE3Y2UtMzk1M2U0NmIyZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSBAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyyM/NamBvHFeXDOIKzz0I5lQb30VEuUw2WUsE1hWHkDGxykYzdtvPH M+Qi5FBk1NN1w4RhqN7OeNnfilnsoBDy72B1qp2sR4cW370yiHZgMIyLDUale1+C ksBKDavgMAIUf9t5yp7MzcYsgB9vYw61uswVKpEseG6FhcVlNIsci6brAfnlrYml l6pH+P1SELbxUfG5uCt+pleizOANM0uUHBbLFmq5ZO54r2Wd9JO33CuY9w03Ku63 uZjrD0eUuYj9nie9+p3jjQhY/a2gIkDbW4UEWpR/GFF96ZT/1/jYTOyqZBsAZwo4 3pSvwgaRb/4pvFGaI+KM8ZzsmUQqKyM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:26 2026 by rpki-client