$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa File: baeb3e2a-1ecc-336f-80c3-456c0c327903.roa (raw, json) Hash identifier: mSIuQPVzYFl5IQv9ww91mgtURMbGGWAZRl1dntzYSYs= Subject key identifier: 75:86:95:CA:02:8C:7F:D2:4A:B9:F3:64:D2:29:FA:B6:44:15:B1:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5E62C959F35C5E98705ECE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 7029 IP address blocks: 72.172.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c9:59:f3:5c:5e:98:70:5e:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=841118a2-55c7-4a14-baa4-3f63950d25fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:d2:ba:d6:1e:8c:47:c5:d0:08:72:e6:78: 15:9a:35:9b:e2:b8:c3:05:0e:3c:7f:22:58:f2:ad: 32:0d:ed:fe:99:8a:9e:73:16:f5:02:cf:6d:1e:90: 8c:5d:7e:ed:b6:db:a6:da:20:54:bf:91:8d:13:df: 28:d1:19:26:a9:61:be:a7:93:3e:65:22:aa:59:bd: cf:bc:f0:e9:d6:52:ab:93:a7:fa:b8:b3:10:02:7c: 64:e8:3c:73:a8:a3:bd:1a:51:3a:6c:50:d4:1f:cd: bf:ce:6b:f9:4f:51:b3:cf:bf:35:1d:08:a1:b0:e7: 7f:7e:74:6a:fd:0a:19:b4:d8:d7:c5:fd:ee:7c:6d: 99:a5:6c:6f:f7:90:cc:99:8e:26:25:e6:4d:ac:93: 1a:6f:11:df:f4:55:f9:9b:78:9e:4d:1d:f8:b1:cf: cb:ee:96:32:4c:23:51:a3:8f:83:0e:cc:60:90:4f: 84:d8:0a:92:27:3a:27:5c:6e:96:e4:39:82:06:02: 03:4d:b6:3d:b9:79:7c:03:41:1b:0f:91:82:2c:27: 01:a1:62:89:4a:01:d3:91:11:db:1c:bf:63:bf:51: 05:ba:21:2e:30:df:54:f6:94:e8:3e:38:ec:db:7f: 25:e1:56:a9:4f:5e:66:ef:59:26:41:4a:08:d9:b4: 32:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:86:95:CA:02:8C:7F:D2:4A:B9:F3:64:D2:29:FA:B6:44:15:B1:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4c:24:a2:b0:b3:4c:3a:fb:55:99:99:1a:e7:7f:de:c1:03: 4e:89:cc:df:0a:3c:50:e1:36:9a:e3:ae:23:ff:22:a7:9b:ba: 54:37:d5:72:57:91:74:9e:88:e5:37:60:0a:a8:59:ac:51:14: a6:29:26:33:84:41:b2:0f:45:81:e6:a5:c4:60:01:14:ed:49: ca:bc:b5:36:cd:3e:b6:9d:50:76:ca:60:db:05:96:f1:c1:14: bb:ee:3f:eb:01:8e:e7:f9:39:cf:16:97:a7:6c:00:a1:41:af: e4:45:8b:84:ea:e0:53:f3:f5:bf:9f:2e:0c:62:c3:97:74:88: d6:0a:d3:0b:56:1d:e7:a6:0c:57:69:ff:8d:8a:ec:af:c4:4c: e9:d6:b5:a4:24:60:e9:4f:67:1c:65:2a:e1:f6:09:0e:a7:46: 4b:4f:25:53:9a:fd:b7:d0:69:a0:81:d6:b6:2a:e5:3d:be:b5: 6e:d9:ff:e5:ee:ae:62:72:0b:47:b4:41:25:6b:75:96:51:57: d2:9e:0f:7a:99:e1:6b:df:14:b9:ee:c9:0f:6f:0c:69:7b:7a: 44:57:18:99:39:9c:1b:1b:2e:a6:8e:94:6b:42:17:76:a5:cb: e4:5a:89:d9:13:83:f3:d3:c2:39:09:54:ab:91:d9:62:75:45: 93:c8:05:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYslZ81xemHBezoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ODQxMTE4YTItNTVjNy00YTE0LWJhYTQtM2Y2Mzk1MGQyNWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomrSutYejEfF0Ahy5ngVmjWb4rjDBQ48fyJY 8q0yDe3+mYqecxb1As9tHpCMXX7tttum2iBUv5GNE98o0RkmqWG+p5M+ZSKqWb3P vPDp1lKrk6f6uLMQAnxk6DxzqKO9GlE6bFDUH82/zmv5T1Gzz781HQihsOd/fnRq /QoZtNjXxf3ufG2ZpWxv95DMmY4mJeZNrJMabxHf9FX5m3ieTR34sc/L7pYyTCNR o4+DDsxgkE+E2AqSJzonXG6W5DmCBgIDTbY9uXl8A0EbD5GCLCcBoWKJSgHTkRHb HL9jv1EFuiEuMN9U9pToPjjs238l4VapT15m71kmQUoI2bQyIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWGlcoCjH/SSrnzZNIp+rZEFbH0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmFlYjNlMmEtMWVjYy0z MzZmLTgwYzMtNDU2YzBjMzI3OTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSKwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9MJKKws0w6+1WZmRrnf97BA06JzN8KPFDhNprjriP/IqebulQ31XJX kXSeiOU3YAqoWaxRFKYpJjOEQbIPRYHmpcRgARTtScq8tTbNPradUHbKYNsFlvHB FLvuP+sBjuf5Oc8Wl6dsAKFBr+RFi4Tq4FPz9b+fLgxiw5d0iNYK0wtWHeemDFdp /42K7K/ETOnWtaQkYOlPZxxlKuH2CQ6nRktPJVOa/bfQaaCB1rYq5T2+tW7Z/+Xu rmJyC0e0QSVrdZZRV9KeD3qZ4WvfFLnuyQ9vDGl7ekRXGJk5nBsbLqaOlGtCF3al y+RaidkTg/PTwjkJVKuR2WJ1RZPIBWk= -----END CERTIFICATE-----Generated at Sat Oct 3 22:34:29 2026 by rpki-client