$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa File: 87e19014-95d4-3209-bca4-b836be54d913.roa (raw, json) Hash identifier: K6U996Mmoh+ElyTtjtIpUXu7QG6xLEU9mi5Q5FzujKs= Subject key identifier: 60:7C:CE:57:4A:F1:FA:10:45:D3:8A:A4:1C:E6:C6:A3:10:AF:07:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7BC2EE42F16B24FD4B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 53435 IP address blocks: 72.4.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7b:c2:ee:42:f1:6b:24:fd:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=b32dedf1-c587-49e0-8f9e-716bd55b5940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3e:e2:f1:0e:75:b3:98:66:3d:3e:18:3d:4a: e6:05:d3:1f:00:f3:d5:ae:47:03:31:0a:ca:d1:f9: 55:22:72:73:4b:82:b0:9f:92:0b:d1:6b:ff:31:c2: ac:c9:8b:06:a6:57:12:95:c7:9c:2a:a5:ba:3f:95: 7c:59:bb:35:a9:51:37:1c:93:c3:1c:94:29:76:74: c0:8f:f9:0e:8f:c1:e8:92:6b:cd:85:8b:f9:c3:fd: f7:1b:38:59:12:16:ca:65:78:b3:12:5c:2d:84:78: df:ed:40:8c:b1:82:76:82:0d:38:79:d2:77:79:57: ed:08:5d:61:d1:18:11:4b:a5:ed:d3:c6:97:9d:1b: b4:8d:ef:ee:1d:16:4c:a7:b7:36:e3:8b:65:66:30: a9:f0:26:5c:4b:cc:d1:41:37:2b:5b:9e:c7:8d:aa: e3:e2:d4:25:08:d5:a3:53:1e:d4:47:1e:e8:2e:e1: 45:e7:c5:cf:9e:18:62:5d:76:e8:ba:3d:b4:06:60: c5:98:c5:08:f8:68:0e:3c:57:1a:eb:21:0d:01:c8: 86:71:2b:9d:2b:46:3c:88:e8:68:b1:dd:d4:39:05: 49:98:57:8f:6d:da:10:83:ca:85:59:5a:54:db:d5: 7e:d9:e2:59:da:5a:6a:9a:9b:01:49:7f:28:a5:15: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7C:CE:57:4A:F1:FA:10:45:D3:8A:A4:1C:E6:C6:A3:10:AF:07:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87e19014-95d4-3209-bca4-b836be54d913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a2:e1:f6:29:c8:20:bc:25:8c:d1:65:34:03:ce:4a:b5:80: 44:f5:94:e2:a7:48:6b:db:6d:d2:0c:19:52:b9:80:0e:07:a9: e4:fd:a2:21:17:c3:ca:4e:15:a0:28:aa:5b:2c:2e:d1:0b:e2: b4:08:f4:76:0a:58:25:a1:09:14:a7:af:29:b2:94:c3:9b:92: 96:7f:28:e8:39:b5:dd:98:05:2b:1f:4e:9b:75:98:e2:81:46: d4:50:cd:06:36:ab:3c:4b:e5:0e:24:5c:06:98:c7:20:e3:af: c7:ee:ed:39:ce:07:1d:61:bf:11:bb:4d:f0:0c:47:c7:b0:01: d9:5a:cc:f3:dc:6e:77:f4:bc:1f:88:be:05:eb:17:a2:8d:60: 13:0c:b1:9d:cd:1c:75:60:42:2e:c9:6d:b4:2d:23:ba:58:89: a8:bf:2e:72:92:ad:f9:fe:38:51:55:64:aa:b9:04:78:bc:9a: a6:8a:fa:c6:27:3d:61:19:6e:0f:3b:d6:9d:f2:ed:1c:b3:29: 4a:14:52:b2:8b:af:1a:4e:c0:ff:fc:21:24:83:8c:c1:db:6a: 02:25:15:26:05:42:ea:e3:27:18:b8:52:cb:0c:c3:1e:f0:80: e5:2b:b1:43:ea:79:c0:79:84:a5:b0:6b:a6:7a:35:88:1b:47: 6a:0a:a5:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnvC7kLxayT9SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YjMyZGVkZjEtYzU4Ny00OWUwLThmOWUtNzE2YmQ1NWI1OTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz7i8Q51s5hmPT4YPUrmBdMfAPPVrkcDMQrK 0flVInJzS4Kwn5IL0Wv/McKsyYsGplcSlcecKqW6P5V8Wbs1qVE3HJPDHJQpdnTA j/kOj8HokmvNhYv5w/33GzhZEhbKZXizElwthHjf7UCMsYJ2gg04edJ3eVftCF1h 0RgRS6Xt08aXnRu0je/uHRZMp7c244tlZjCp8CZcS8zRQTcrW57Hjarj4tQlCNWj Ux7URx7oLuFF58XPnhhiXXbouj20BmDFmMUI+GgOPFca6yENAciGcSudK0Y8iOho sd3UOQVJmFePbdoQg8qFWVpU29V+2eJZ2lpqmpsBSX8opRXbwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB8zldK8foQRdOKpBzmxqMQrwf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdlMTkwMTQtOTVkNC0z MjA5LWJjYTQtYjgzNmJlNTRkOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWi4fYpyCC8JYzRZTQDzkq1gET1lOKnSGvbbdIMGVK5gA4HqeT9oiEX w8pOFaAoqlssLtEL4rQI9HYKWCWhCRSnrymylMObkpZ/KOg5td2YBSsfTpt1mOKB RtRQzQY2qzxL5Q4kXAaYxyDjr8fu7TnOBx1hvxG7TfAMR8ewAdlazPPcbnf0vB+I vgXrF6KNYBMMsZ3NHHVgQi7JbbQtI7pYiai/LnKSrfn+OFFVZKq5BHi8mqaK+sYn PWEZbg871p3y7RyzKUoUUrKLrxpOwP/8ISSDjMHbagIlFSYFQurjJxi4UssMwx7w gOUrsUPqecB5hKWwa6Z6NYgbR2oKpZY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:40 2026 by rpki-client