$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5882f490-a5be-3610-9c37-d30189e9628d.roa File: 5882f490-a5be-3610-9c37-d30189e9628d.roa (raw, json) Hash identifier: RK3nIi7iWgc72xkt1x6U1bmfEhZR48zVjMjxToICKgk= Subject key identifier: 05:9E:C5:7D:40:85:91:82:A7:80:5E:36:D5:FB:A4:00:FF:D0:DE:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA05CE369BC33E290BCAC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5882f490-a5be-3610-9c37-d30189e9628d.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 72.16.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:05:ce:36:9b:c3:3e:29:0b:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=aa75c2e4-edb9-41b5-b810-106a44554f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ef:86:07:1b:19:d5:f4:be:b6:6f:b2:d9:19: 8a:52:6e:30:c3:a9:eb:10:27:9d:8b:a3:47:13:c7: 72:d1:52:07:36:7a:52:04:29:4a:0d:ec:b9:11:52: 9c:da:8b:74:71:24:41:0b:48:68:14:10:da:f0:58: fb:11:f9:26:9d:5b:95:21:b2:89:5b:e4:66:9e:f8: e1:1a:ad:f0:8a:e8:5f:1d:b5:3e:50:77:8a:45:37: 74:82:23:d8:3f:ca:36:a2:d6:ff:c1:99:50:04:92: 5f:17:7e:f0:ff:cd:8b:83:35:58:32:64:96:56:bc: 83:46:3a:2b:b2:4d:a3:e3:84:85:83:56:8b:61:b9: bc:1a:52:b5:63:a5:86:5f:f1:cb:51:f9:f4:b0:5c: 1f:53:03:b2:a5:7e:ca:59:4f:a4:4b:2c:c1:67:0f: 89:17:cd:ed:f1:9f:88:3f:0f:f1:ba:49:64:2a:0d: f1:5a:d9:cc:fe:9e:11:c1:a6:72:3d:37:4d:95:75: 5c:f8:84:2e:b9:f6:6a:31:29:a3:50:c3:78:37:0d: dd:42:8b:96:39:bd:87:81:17:3a:43:63:12:44:d6: b1:a0:4c:fa:44:c5:06:4b:24:dd:5d:fb:23:df:78: 9d:4a:8b:f3:d9:99:41:74:f8:3a:fa:61:15:3a:32: 20:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9E:C5:7D:40:85:91:82:A7:80:5E:36:D5:FB:A4:00:FF:D0:DE:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5882f490-a5be-3610-9c37-d30189e9628d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:33:38:cf:74:de:51:8a:a1:21:4e:ee:11:b1:7f:8e:a4:f2: ad:5d:b7:0c:f6:18:7b:a2:35:6c:a8:a0:08:e5:2b:3b:19:72: c6:40:59:39:a1:f1:99:fa:0f:a7:a1:0a:de:9b:1a:4a:bf:5d: 9f:c2:95:eb:b8:75:65:34:12:cc:55:36:fd:f4:b4:f2:45:90: a7:f6:7c:96:5c:43:4a:53:0f:df:03:1b:f9:c0:4d:f8:25:e8: de:a3:c7:9a:f2:c8:12:08:9b:04:08:c6:c9:9f:bb:68:5f:db: fc:4b:4a:87:dd:ed:6e:38:2e:5c:7a:bb:8c:7a:c4:f7:0f:58: 29:4c:63:9e:ea:91:ec:de:d7:a6:06:09:8a:68:5e:dd:50:6e: e0:fa:33:85:46:ba:a6:92:f8:aa:1b:04:4d:6f:30:a7:5b:55: a2:80:cb:74:57:74:d2:c0:39:ef:b6:04:51:b1:36:68:3d:2f: d8:ef:06:14:7e:9b:b5:44:98:99:29:a8:ea:94:a9:9d:f1:7e: f5:f4:54:40:34:a9:df:fb:7f:c4:67:55:f1:cf:8c:c3:69:36: a0:bd:5d:60:9a:9a:c6:33:ac:bc:b3:ad:aa:54:a5:28:09:27: 87:9f:61:b7:09:26:1f:e1:d2:92:79:f6:6b:a5:a3:ab:93:da: 2d:7c:df:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gXONpvDPikLysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YWE3NWMyZTQtZWRiOS00MWI1LWI4MTAtMTA2YTQ0NTU0ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg++GBxsZ1fS+tm+y2RmKUm4ww6nrECedi6NH E8dy0VIHNnpSBClKDey5EVKc2ot0cSRBC0hoFBDa8Fj7EfkmnVuVIbKJW+Rmnvjh Gq3wiuhfHbU+UHeKRTd0giPYP8o2otb/wZlQBJJfF37w/82LgzVYMmSWVryDRjor sk2j44SFg1aLYbm8GlK1Y6WGX/HLUfn0sFwfUwOypX7KWU+kSyzBZw+JF83t8Z+I Pw/xuklkKg3xWtnM/p4RwaZyPTdNlXVc+IQuufZqMSmjUMN4Nw3dQouWOb2HgRc6 Q2MSRNaxoEz6RMUGSyTdXfsj33idSovz2ZlBdPg6+mEVOjIgPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWexX1AhZGCp4BeNtX7pAD/0N7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTg4MmY0OTAtYTViZS0z NjEwLTljMzctZDMwMTg5ZTk2MjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8zOM903lGKoSFO7hGxf46k8q1dtwz2GHuiNWyooAjlKzsZcsZAWTmh 8Zn6D6ehCt6bGkq/XZ/Cleu4dWU0EsxVNv30tPJFkKf2fJZcQ0pTD98DG/nATfgl 6N6jx5ryyBIImwQIxsmfu2hf2/xLSofd7W44Llx6u4x6xPcPWClMY57qkeze16YG CYpoXt1QbuD6M4VGuqaS+KobBE1vMKdbVaKAy3RXdNLAOe+2BFGxNmg9L9jvBhR+ m7VEmJkpqOqUqZ3xfvX0VEA0qd/7f8RnVfHPjMNpNqC9XWCamsYzrLyzrapUpSgJ J4efYbcJJh/h0pJ59mulo6uT2i1835U= -----END CERTIFICATE-----Generated at Thu Mar 26 16:09:39 2026 by rpki-client