$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa File: 7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa (raw, json) Hash identifier: 3MOErnzNUllz4BvWw64dWC0F4vo7e5y3Y5sxKg7eW3c= Subject key identifier: F8:79:C6:A7:79:82:F2:0C:BA:12:19:2B:FF:41:6A:F2:C1:B6:C3:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A97CA36B44AC154590A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 72.25.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:97:ca:36:b4:4a:c1:54:59:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=61689559-5eba-456b-9e2a-fb04beddf794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:20:ab:08:5d:c9:52:e9:9a:f4:3c:ee:36:4e: a9:6b:95:a4:f3:30:a6:82:7c:69:2b:ce:46:b5:ec: 38:03:d5:9b:a0:91:31:c7:16:49:13:3f:f3:f6:3d: 18:7c:7e:dd:62:b0:0b:67:c3:8c:6a:af:ab:2e:f8: 86:6f:4b:c7:96:a1:fc:eb:75:4c:29:45:90:4a:ae: 5f:bd:6f:ca:5e:50:0c:79:9a:25:8b:d0:91:ca:20: c4:2f:32:e3:bd:46:41:a2:ba:23:02:f0:79:0b:5f: f5:5e:02:08:83:b0:7f:b1:bb:af:87:45:c9:9f:7a: 45:8d:2a:c3:2c:db:00:bc:00:56:23:6f:75:4e:d2: 89:f9:60:c6:d6:36:af:d1:9f:07:64:cb:95:66:c8: 87:6a:b4:02:58:31:98:31:b8:f1:a6:d0:bd:ca:a4: 52:02:27:90:ce:43:e9:37:3b:9a:84:cf:fc:04:d0: 6a:bd:9f:80:c2:ce:be:5d:12:22:7b:76:79:cb:ec: 96:b0:4e:54:bb:fd:df:7b:9a:52:a0:23:7d:75:34: b9:d4:9d:05:6b:f5:33:8e:63:1e:26:e1:2f:5d:c9: 3a:4e:e5:d9:75:24:43:ff:d7:75:f9:36:6f:c1:d5: 91:4d:f8:23:8b:32:76:1e:8e:8d:95:48:2d:1b:40: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:79:C6:A7:79:82:F2:0C:BA:12:19:2B:FF:41:6A:F2:C1:B6:C3:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e0125d0-b517-3612-9f37-c35c35e9e3e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.25.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:db:8a:cb:e9:65:7c:58:a3:0b:25:b9:c6:2c:f0:3c:4e:74: 51:ae:97:d7:ef:a4:9c:ca:ab:22:7d:62:89:ef:17:09:57:f4: c1:ca:f7:4f:d4:34:02:c1:1e:81:5b:f8:6a:02:14:1d:6e:08: e0:1d:ea:ca:06:07:d3:61:fa:45:36:97:17:d8:f2:a0:99:35: 5f:58:b5:96:f0:b5:f4:7e:19:3b:69:3b:4c:ef:b2:84:52:97: 37:e9:dd:70:ab:d0:c7:ae:8d:ff:63:30:fb:e6:d0:fc:28:77: 54:ee:90:b1:eb:26:0a:1e:32:65:13:22:bc:a0:7c:d5:50:91: d3:bc:30:55:f1:c9:20:6a:bb:50:79:7d:fc:18:19:ef:bf:f7: 61:aa:44:47:6a:b3:60:f4:19:ac:71:4a:60:4e:ce:7e:da:b2: 26:7a:88:25:82:be:26:f3:3a:af:a9:73:87:1a:04:bc:b3:82: df:b9:c1:42:87:aa:67:39:75:46:eb:2a:b1:61:36:3f:9e:fd: 36:25:be:99:35:a9:12:7b:01:bf:c6:80:48:9e:20:5d:79:b7: 3f:6a:c8:ac:3e:12:49:63:7f:fc:40:7b:a1:b1:a4:2f:50:cc: 32:54:a6:bb:cd:a0:fc:6d:ec:1f:6e:8a:5f:d5:1c:4a:17:b2: 86:f3:22:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpfKNrRKwVRZCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NjE2ODk1NTktNWViYS00NTZiLTllMmEtZmIwNGJlZGRmNzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCCrCF3JUuma9DzuNk6pa5Wk8zCmgnxpK85G tew4A9WboJExxxZJEz/z9j0YfH7dYrALZ8OMaq+rLviGb0vHlqH863VMKUWQSq5f vW/KXlAMeZoli9CRyiDELzLjvUZBorojAvB5C1/1XgIIg7B/sbuvh0XJn3pFjSrD LNsAvABWI291TtKJ+WDG1jav0Z8HZMuVZsiHarQCWDGYMbjxptC9yqRSAieQzkPp NzuahM/8BNBqvZ+Aws6+XRIie3Z5y+yWsE5Uu/3fe5pSoCN9dTS51J0Fa/UzjmMe JuEvXck6TuXZdSRD/9d1+TZvwdWRTfgjizJ2Ho6NlUgtG0ByvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPh5xqd5gvIMuhIZK/9BavLBtsOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2UwMTI1ZDAtYjUxNy0z NjEyLTlmMzctYzM1YzM1ZTllM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnbisvpZXxYowslucYs8DxOdFGul9fvpJzKqyJ9YonvFwlX9MHK90/U NALBHoFb+GoCFB1uCOAd6soGB9Nh+kU2lxfY8qCZNV9YtZbwtfR+GTtpO0zvsoRS lzfp3XCr0Meujf9jMPvm0Pwod1TukLHrJgoeMmUTIrygfNVQkdO8MFXxySBqu1B5 ffwYGe+/92GqREdqs2D0GaxxSmBOzn7asiZ6iCWCvibzOq+pc4caBLyzgt+5wUKH qmc5dUbrKrFhNj+e/TYlvpk1qRJ7Ab/GgEieIF15tz9qyKw+Ekljf/xAe6GxpC9Q zDJUprvNoPxt7B9uil/VHEoXsobzIng= -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:36 2026 by rpki-client