$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5882f490-a5be-3610-9c37-d30189e9628d.roa File: 5882f490-a5be-3610-9c37-d30189e9628d.roa (raw, json) Hash identifier: vYXMLrsMUTPbruSH21cMTjR3N9ntW8bao4E01Df6wdk= Subject key identifier: 1F:4F:6F:7E:33:71:98:B4:65:B7:29:FD:62:1C:8D:EF:67:CF:8B:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D420C98D3A39E14DEB600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5882f490-a5be-3610-9c37-d30189e9628d.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 72.16.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:42:0c:98:d3:a3:9e:14:de:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=8c82e391-f8c2-4cc2-803e-edab96d8edc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b1:f9:1a:5b:f0:12:66:e2:a3:4d:ff:e0:38: 4b:f1:76:d6:38:53:ce:21:d7:69:a6:7c:5f:39:d7: 83:4f:0c:28:3d:d1:2e:88:43:59:26:a0:85:9e:36: fc:65:70:3a:7e:f9:91:6d:2a:3f:2d:2b:dc:79:d9: b8:0f:81:e6:d8:fe:82:9d:b6:8f:0b:b1:c2:13:c1: a3:51:4e:5f:30:24:b7:17:a1:9e:78:72:1d:14:98: 45:5a:ed:44:6e:a9:57:43:19:cf:ca:61:5e:b1:44: 63:19:2a:aa:1f:b4:4b:a7:4f:91:10:7c:1c:22:00: 91:6f:64:70:75:57:93:d9:39:4e:86:b1:6c:77:4f: a7:59:b8:44:7d:2f:3e:a4:45:3a:3c:a3:54:c1:d2: fb:a7:94:cf:f6:10:a7:2c:23:1f:e3:f7:1c:95:57: 48:ca:7c:ee:58:3c:fc:d3:55:7c:c1:18:f7:9c:e1: c7:ef:29:fb:d1:77:82:56:b0:08:71:f6:ca:e3:24: c4:ac:1c:44:c7:43:23:33:64:09:7d:b2:19:4c:7d: 9f:95:08:d6:7d:2a:2b:37:9e:95:24:5d:fc:4a:ee: 18:96:d9:20:95:cb:b5:33:05:af:a4:76:32:43:ef: fe:97:d8:f4:88:b4:ff:68:52:1f:c3:1e:84:e0:38: 0e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4F:6F:7E:33:71:98:B4:65:B7:29:FD:62:1C:8D:EF:67:CF:8B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5882f490-a5be-3610-9c37-d30189e9628d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:cc:af:66:a2:6f:f9:4a:1f:11:a0:60:5c:31:24:57:45:c1: d3:cf:42:f1:42:c5:6a:8a:f6:6c:d8:b1:5d:58:7e:4c:bf:8e: 4b:c1:0c:b3:50:e5:52:90:fa:d2:53:93:91:8e:bc:2a:e4:d8: 5c:8c:c5:72:64:07:79:f6:a5:f2:14:1c:0a:b8:32:bf:1a:98: 36:fe:90:ea:93:20:bf:09:23:b0:d0:f8:c5:1a:13:8c:3b:70: 1e:81:5b:5b:ad:56:13:62:9a:59:23:48:25:70:c0:13:3a:4d: bd:35:a9:7e:99:68:b8:fe:a0:56:9e:70:8a:ce:fd:59:88:91: 32:9e:5e:07:de:13:5b:61:69:4b:60:2b:b9:73:0f:b1:b3:53: a8:7c:59:01:79:0c:0c:61:5d:d2:ec:1f:2e:66:a8:a1:5a:38: 3a:9f:11:f2:0b:36:52:c8:d6:65:c8:ba:b5:8b:f4:84:ef:b3: 5c:42:6b:09:c1:0c:6d:0f:7d:0a:e9:b2:a6:0e:ec:c6:5a:39: 6c:b1:87:5a:67:b6:0f:c7:7d:54:a9:09:69:83:ad:90:be:f3: bc:df:aa:eb:aa:a9:4f:94:cd:0a:0e:1c:f8:66:65:13:3a:ab: fc:bc:94:3c:09:df:5c:0f:e3:97:38:f3:93:c2:40:69:db:09: 15:e6:ac:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUIMmNOjnhTetgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk OGM4MmUzOTEtZjhjMi00Y2MyLTgwM2UtZWRhYjk2ZDhlZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLH5GlvwEmbio03/4DhL8XbWOFPOIddppnxf OdeDTwwoPdEuiENZJqCFnjb8ZXA6fvmRbSo/LSvcedm4D4Hm2P6CnbaPC7HCE8Gj UU5fMCS3F6GeeHIdFJhFWu1EbqlXQxnPymFesURjGSqqH7RLp0+REHwcIgCRb2Rw dVeT2TlOhrFsd0+nWbhEfS8+pEU6PKNUwdL7p5TP9hCnLCMf4/cclVdIynzuWDz8 01V8wRj3nOHH7yn70XeCVrAIcfbK4yTErBxEx0MjM2QJfbIZTH2flQjWfSorN56V JF38Su4Yltkglcu1MwWvpHYyQ+/+l9j0iLT/aFIfwx6E4DgO/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9Pb34zcZi0Zbcp/WIcje9nz4tIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTg4MmY0OTAtYTViZS0z NjEwLTljMzctZDMwMTg5ZTk2MjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3Mr2aib/lKHxGgYFwxJFdFwdPPQvFCxWqK9mzYsV1Yfky/jkvBDLNQ 5VKQ+tJTk5GOvCrk2FyMxXJkB3n2pfIUHAq4Mr8amDb+kOqTIL8JI7DQ+MUaE4w7 cB6BW1utVhNimlkjSCVwwBM6Tb01qX6ZaLj+oFaecIrO/VmIkTKeXgfeE1thaUtg K7lzD7GzU6h8WQF5DAxhXdLsHy5mqKFaODqfEfILNlLI1mXIurWL9ITvs1xCawnB DG0PfQrpsqYO7MZaOWyxh1pntg/HfVSpCWmDrZC+87zfquuqqU+UzQoOHPhmZRM6 q/y8lDwJ31wP45c485PCQGnbCRXmrFk= -----END CERTIFICATE-----Generated at Mon Sep 28 23:57:39 2026 by rpki-client