$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/677bf449-16a3-35f8-b3cb-cacac6c0b5c2.roa File: 677bf449-16a3-35f8-b3cb-cacac6c0b5c2.roa (raw, json) Hash identifier: 8TgmNylsHZzsizWCNtEY9wMyOyn4xwT3Cy9BhELbzus= Subject key identifier: C2:B2:2C:3E:73:96:0E:7B:90:58:49:DE:3B:CB:BB:8E:5A:FF:DC:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D0D427C4FC4635CEBA8866D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/677bf449-16a3-35f8-b3cb-cacac6c0b5c2.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 72.16.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:7c:4f:c4:63:5c:eb:a8:86:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=071ca8be-8c07-49fb-99ee-0d8bd77c602b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:17:89:8d:bd:12:c3:ba:8a:af:e5:57:67:c8: 1f:16:b3:7e:60:82:b1:f9:9b:d0:0e:fe:ae:05:6d: f1:d6:9f:cc:47:c4:7a:a7:52:ae:b3:01:1b:ad:e3: 82:ce:fa:60:19:7f:9d:39:4f:a4:41:97:fa:f1:39: 93:32:d5:b7:7f:bd:b2:1a:95:83:bc:91:d2:c5:0d: b2:8b:94:7d:6d:7a:d0:2f:07:f5:e9:65:23:c2:28: d3:58:66:b2:57:a2:61:e4:2b:f8:37:f1:8d:31:cf: 9b:67:bc:a8:26:2e:14:a3:4f:cb:49:c3:a2:3c:de: 3c:5e:ff:a3:ab:f0:9a:e5:64:01:d3:7f:3c:d5:23: af:89:27:56:38:66:8e:67:e5:ed:92:5a:99:61:25: e1:55:2b:f8:e9:30:be:8e:ed:3e:e6:0b:cb:82:47: b3:d3:1a:57:e2:1a:a0:26:5e:e2:fd:a7:1a:5c:4e: a3:a1:76:06:a4:f6:b8:5c:8e:2e:28:19:14:fa:33: 38:6b:48:71:16:3f:a7:2b:75:99:41:42:b3:cf:40: 58:13:24:df:0f:d5:3f:b0:d2:64:e0:d4:fc:f0:43: b4:2d:20:9b:e1:26:0c:ba:10:2e:bc:f9:3f:52:9f: dc:c2:14:a8:cf:4f:23:a1:f5:89:53:b2:85:36:fc: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B2:2C:3E:73:96:0E:7B:90:58:49:DE:3B:CB:BB:8E:5A:FF:DC:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/677bf449-16a3-35f8-b3cb-cacac6c0b5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:23:bb:84:72:dc:65:1d:f7:e6:31:e0:65:fc:48:19:e5:8f: 87:56:15:14:01:87:6a:ec:25:35:51:a1:8b:d1:4c:d2:0c:03: 83:7f:53:ef:6b:93:ed:69:41:66:4d:fb:07:07:77:76:ed:78: ea:16:74:13:e5:d7:1d:70:5e:e2:8d:ff:81:f9:39:28:e7:b2: be:61:e4:b6:8c:7a:bf:5c:c3:d8:52:f0:18:70:3f:ed:9b:d2: 02:0d:c8:09:0d:4c:fb:34:6e:cb:9b:bd:30:f2:d3:a4:9c:b6: d0:ac:ee:04:42:f6:47:2e:0f:7d:3e:e8:28:42:80:08:18:15: 76:e5:e2:9e:73:31:52:cd:9c:f3:59:46:bc:97:0c:b3:d5:96: 81:6d:bd:07:2f:9d:85:ce:f3:74:97:6a:3e:bb:30:e6:f1:8b: 41:a7:1e:3b:6a:3f:aa:8c:cc:83:4b:99:2d:68:57:bb:ef:3d: 4e:4e:f5:1b:68:55:82:6e:c8:a3:68:20:86:53:56:ff:e6:94: 9f:20:d8:68:26:26:21:37:7e:2e:96:d2:21:c2:48:49:d9:91: c1:4d:79:ed:3a:ae:a4:d3:56:02:0e:e7:eb:cf:0e:3e:6b:0c: 9c:cb:d6:d7:a0:e1:83:10:d5:5c:a8:a8:64:0f:5f:75:c2:27: ee:9d:54:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQnxPxGNc66iGbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MDcxY2E4YmUtOGMwNy00OWZiLTk5ZWUtMGQ4YmQ3N2M2MDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBeJjb0Sw7qKr+VXZ8gfFrN+YIKx+ZvQDv6u BW3x1p/MR8R6p1KuswEbreOCzvpgGX+dOU+kQZf68TmTMtW3f72yGpWDvJHSxQ2y i5R9bXrQLwf16WUjwijTWGayV6Jh5Cv4N/GNMc+bZ7yoJi4Uo0/LScOiPN48Xv+j q/Ca5WQB03881SOviSdWOGaOZ+XtklqZYSXhVSv46TC+ju0+5gvLgkez0xpX4hqg Jl7i/acaXE6joXYGpPa4XI4uKBkU+jM4a0hxFj+nK3WZQUKzz0BYEyTfD9U/sNJk 4NT88EO0LSCb4SYMuhAuvPk/Up/cwhSoz08jofWJU7KFNvysEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKyLD5zlg57kFhJ3jvLu45a/9z7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjc3YmY0NDktMTZhMy0z NWY4LWIzY2ItY2FjYWM2YzBiNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwju4Ry3GUd9+Yx4GX8SBnlj4dWFRQBh2rsJTVRoYvRTNIMA4N/U+9r k+1pQWZN+wcHd3bteOoWdBPl1x1wXuKN/4H5OSjnsr5h5LaMer9cw9hS8BhwP+2b 0gINyAkNTPs0bsubvTDy06ScttCs7gRC9kcuD30+6ChCgAgYFXbl4p5zMVLNnPNZ RryXDLPVloFtvQcvnYXO83SXaj67MObxi0GnHjtqP6qMzINLmS1oV7vvPU5O9Rto VYJuyKNoIIZTVv/mlJ8g2GgmJiE3fi6W0iHCSEnZkcFNee06rqTTVgIO5+vPDj5r DJzL1teg4YMQ1VyoqGQPX3XCJ+6dVE4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:37 2026 by rpki-client