$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bb5bf8c-69c7-3fbf-b5b1-3538c4631572.roa File: 8bb5bf8c-69c7-3fbf-b5b1-3538c4631572.roa (raw, json) Hash identifier: ZHao3HjnPqAMiemcuM/5z5cYXJ4/+rILLnYwlR7E4WI= Subject key identifier: 44:1F:3F:F5:10:5A:38:F0:C6:CF:99:DB:F5:A8:74:46:65:C0:60:4B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49863680291A15F7653A7400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bb5bf8c-69c7-3fbf-b5b1-3538c4631572.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 72.16.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:36:80:29:1a:15:f7:65:3a:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4e8ec594-0e3b-46bf-8ff8-1b263ec66299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dc:a2:1b:72:2d:8f:84:09:f1:ba:bf:e9:cb: 36:35:7f:6c:e8:45:fb:f3:b7:e8:49:60:53:61:eb: 24:a9:c6:d9:4b:33:48:0d:fe:88:88:7e:a6:99:81: 93:01:26:65:f8:77:ee:80:89:f6:54:86:4c:78:04: 23:00:c4:20:05:09:f2:16:fe:df:fd:5c:5f:59:67: ad:a8:9c:dc:50:f9:44:13:2b:8e:e7:d1:e2:a7:b5: 9f:9b:52:f0:1e:74:70:ad:72:e0:67:6d:92:9f:a3: 9b:ef:98:4a:c9:94:25:93:30:2d:61:d2:84:c1:ba: b8:43:5f:6f:bd:07:5a:a7:51:59:5b:10:77:97:f3: da:ed:9b:71:8f:bd:cb:ad:56:7d:0a:c8:96:01:a3: ac:f1:d7:52:af:27:26:13:9a:17:b1:85:9b:33:01: 1a:4d:05:63:78:5c:b2:1c:b6:8c:1a:c1:1f:c8:d0: ae:18:bd:b5:9e:dc:ae:4a:37:6a:e3:9d:45:88:5a: 04:50:b4:2e:60:8f:d4:62:a4:58:03:b0:b1:a7:95: 56:34:64:c9:8d:2f:df:4d:56:99:10:80:65:fb:26: d2:28:b9:c2:c2:2f:38:62:49:c8:b3:c5:7d:cc:12: b7:69:97:09:5b:55:f5:e8:06:c8:8b:62:1a:81:2c: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1F:3F:F5:10:5A:38:F0:C6:CF:99:DB:F5:A8:74:46:65:C0:60:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8bb5bf8c-69c7-3fbf-b5b1-3538c4631572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f9:52:bd:24:f7:9c:04:64:c5:a4:24:34:7b:4a:55:f1:c3: 9b:78:0f:91:b3:68:d2:79:41:22:38:ed:45:45:53:11:74:fe: 98:7d:17:7e:ad:e8:a9:47:bb:8d:98:7f:96:91:f0:55:e8:91: 90:7b:66:48:09:bb:c2:91:8a:48:fd:1d:90:36:eb:91:6d:c4: a9:70:65:72:08:94:a2:ee:86:cc:f9:99:f3:c5:7a:d9:d3:e4: cd:30:14:65:79:26:e9:73:0d:52:df:5f:40:84:2c:d6:5a:5d: 87:c7:bb:6d:3b:a8:98:dc:81:90:c4:7e:3d:9a:88:6c:1b:e8: 54:29:a2:95:cb:2b:0f:09:2f:8e:8f:da:06:d2:6f:56:4b:00: c3:83:73:39:c9:bb:34:85:08:8d:74:a2:05:07:46:41:d0:c8: 56:c9:52:80:70:1d:5b:3a:df:e7:7f:29:2a:45:fb:98:3c:81: e6:ee:57:be:4d:78:22:2b:df:ee:8f:a1:86:44:9a:4c:ff:73: c2:77:3e:04:af:bd:a5:03:d6:9e:4e:4b:dc:5f:7d:41:ab:db: e1:1d:8b:ab:3f:95:5e:e4:02:75:42:e9:79:d6:dc:38:bb:e6: 12:a6:cb:73:d1:ed:54:a8:b1:61:56:68:b6:cd:b8:4c:87:0f: 48:5d:a5:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhjaAKRoV92U6dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGU4ZWM1OTQtMGUzYi00NmJmLThmZjgtMWIyNjNlYzY2Mjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdyiG3Itj4QJ8bq/6cs2NX9s6EX787foSWBT YeskqcbZSzNIDf6IiH6mmYGTASZl+HfugIn2VIZMeAQjAMQgBQnyFv7f/VxfWWet qJzcUPlEEyuO59Hip7Wfm1LwHnRwrXLgZ22Sn6Ob75hKyZQlkzAtYdKEwbq4Q19v vQdap1FZWxB3l/Pa7Ztxj73LrVZ9CsiWAaOs8ddSrycmE5oXsYWbMwEaTQVjeFyy HLaMGsEfyNCuGL21ntyuSjdq451FiFoEULQuYI/UYqRYA7Cxp5VWNGTJjS/fTVaZ EIBl+ybSKLnCwi84YknIs8V9zBK3aZcJW1X16AbIi2IagSymPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQfP/UQWjjwxs+Z2/WodEZlwGBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGJiNWJmOGMtNjljNy0z ZmJmLWI1YjEtMzUzOGM0NjMxNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB75Ur0k95wEZMWkJDR7SlXxw5t4D5GzaNJ5QSI47UVFUxF0/ph9F36t 6KlHu42Yf5aR8FXokZB7ZkgJu8KRikj9HZA265FtxKlwZXIIlKLuhsz5mfPFetnT 5M0wFGV5JulzDVLfX0CELNZaXYfHu207qJjcgZDEfj2aiGwb6FQpopXLKw8JL46P 2gbSb1ZLAMODcznJuzSFCI10ogUHRkHQyFbJUoBwHVs63+d/KSpF+5g8gebuV75N eCIr3+6PoYZEmkz/c8J3PgSvvaUD1p5OS9xffUGr2+Edi6s/lV7kAnVC6XnW3Di7 5hKmy3PR7VSosWFWaLbNuEyHD0hdpeo= -----END CERTIFICATE-----Generated at Sat Sep 26 19:50:40 2026 by rpki-client