$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b04baa1-b57a-36b8-8e5d-1a84751c3ade.roa File: 8b04baa1-b57a-36b8-8e5d-1a84751c3ade.roa (raw, json) Hash identifier: qDUahEYmgFoHI8H+AY+RlYH6xalHKCkrsHYyu56gJjw= Subject key identifier: 35:50:E3:71:B8:1F:E6:69:09:B2:11:9E:05:CB:33:D9:10:A4:A3:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D27AA13D61F5437EFB14DA280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b04baa1-b57a-36b8-8e5d-1a84751c3ade.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 72.44.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:13:d6:1f:54:37:ef:b1:4d:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=31a9fe3c-236e-4d24-bd81-b354c6dc733a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0a:52:9b:09:27:b5:6c:99:e6:f5:3d:8d:a9: 24:65:47:15:5e:28:d1:ee:d3:16:83:64:7e:cf:7c: 39:5c:6c:87:13:8c:20:f0:8c:6f:45:09:42:c8:8b: 53:93:6a:ed:ca:36:e9:7b:ba:a2:e7:01:1e:2e:bb: 6b:63:3f:90:aa:3a:09:e6:f7:cf:d7:d2:5b:70:d9: a3:e7:2e:f8:54:18:d6:eb:ed:90:6b:30:60:0f:ea: 3f:30:33:04:41:71:11:e6:41:73:c8:f8:fc:a6:fc: 8c:3a:e4:de:27:7e:29:37:92:20:bf:b3:a3:bb:f9: ed:15:8d:03:0a:2f:00:a6:db:1d:dc:e4:ec:0b:fa: 15:72:d2:64:8c:eb:78:d6:57:35:be:f7:20:d2:30: 34:21:12:c7:bc:07:cd:a1:5e:dd:2f:0a:69:58:48: bd:88:8f:f2:4a:02:4a:89:cc:ea:65:2f:42:9c:e0: 64:b0:b8:51:9d:f0:ae:90:53:70:f1:cb:cc:62:40: 4d:36:ba:d4:80:54:b0:99:cc:a0:8f:3c:ab:58:2d: a7:03:0b:b7:ad:b5:69:0b:7d:b2:8e:0e:dc:b1:64: af:af:3a:e3:53:1a:0f:a3:e4:1e:08:c0:2a:c8:35: c5:2b:0d:b2:32:7c:97:91:b3:b1:f0:23:97:2f:a5: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:50:E3:71:B8:1F:E6:69:09:B2:11:9E:05:CB:33:D9:10:A4:A3:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b04baa1-b57a-36b8-8e5d-1a84751c3ade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.44.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:fa:14:45:58:d4:14:91:81:03:38:8b:35:33:62:8b:9b:a4: db:ac:b7:e0:e4:ae:09:cf:c1:f0:8b:7e:12:90:7b:2c:af:a6: 71:79:02:39:49:8c:ee:95:af:2b:15:27:c1:e4:bc:6c:80:3f: f2:f4:25:fe:3a:93:4c:68:35:d6:81:fd:7e:fe:18:c0:fd:fc: b8:b1:b1:90:03:45:9c:32:ed:50:ca:28:9d:33:ac:68:dd:8e: 7f:89:54:50:69:4d:94:d7:f6:9a:df:24:0a:ca:ff:01:d2:87: 2a:cf:2a:5a:c9:55:77:95:fd:99:17:76:83:46:31:7a:59:e5: 9c:a4:ec:2e:72:d5:d1:d5:31:9b:fd:c1:90:ac:d6:c2:c2:84: 11:d0:f1:41:50:4e:14:0c:64:da:4c:c6:ba:81:23:86:65:90: f2:62:8c:3c:8a:ec:73:27:58:a3:6b:51:7b:75:47:41:94:65: 6c:45:d0:66:e0:a4:23:5c:a5:9f:48:71:37:ae:01:3e:4a:33: ef:67:60:fc:ee:35:85:34:09:7e:71:12:27:43:bd:8d:fa:0b: cb:d0:81:02:8c:aa:2a:7a:ad:0a:ef:09:4d:6d:1e:89:b3:da: f2:a0:ab:4a:7e:57:23:97:be:04:fb:9a:99:d7:e8:90:88:2e: 39:dc:74:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqhPWH1Q377FNooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MzFhOWZlM2MtMjM2ZS00ZDI0LWJkODEtYjM1NGM2ZGM3MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwpSmwkntWyZ5vU9jakkZUcVXijR7tMWg2R+ z3w5XGyHE4wg8IxvRQlCyItTk2rtyjbpe7qi5wEeLrtrYz+QqjoJ5vfP19JbcNmj 5y74VBjW6+2QazBgD+o/MDMEQXER5kFzyPj8pvyMOuTeJ34pN5Igv7Oju/ntFY0D Ci8Aptsd3OTsC/oVctJkjOt41lc1vvcg0jA0IRLHvAfNoV7dLwppWEi9iI/ySgJK iczqZS9CnOBksLhRnfCukFNw8cvMYkBNNrrUgFSwmcygjzyrWC2nAwu3rbVpC32y jg7csWSvrzrjUxoPo+QeCMAqyDXFKw2yMnyXkbOx8COXL6X9kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVQ43G4H+ZpCbIRngXLM9kQpKOgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGIwNGJhYTEtYjU3YS0z NmI4LThlNWQtMWE4NDc1MWMzYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESCwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/6FEVY1BSRgQM4izUzYoubpNust+DkrgnPwfCLfhKQeyyvpnF5AjlJ jO6VrysVJ8HkvGyAP/L0Jf46k0xoNdaB/X7+GMD9/LixsZADRZwy7VDKKJ0zrGjd jn+JVFBpTZTX9prfJArK/wHShyrPKlrJVXeV/ZkXdoNGMXpZ5Zyk7C5y1dHVMZv9 wZCs1sLChBHQ8UFQThQMZNpMxrqBI4ZlkPJijDyK7HMnWKNrUXt1R0GUZWxF0Gbg pCNcpZ9IcTeuAT5KM+9nYPzuNYU0CX5xEidDvY36C8vQgQKMqip6rQrvCU1tHomz 2vKgq0p+VyOXvgT7mpnX6JCILjncdBk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:39:14 2026 by rpki-client