$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa File: baeb3e2a-1ecc-336f-80c3-456c0c327903.roa (raw, json) Hash identifier: eknKYn8XhQte5St3pSFcE528pv9c1CcZ95vgS6D2u7c= Subject key identifier: 17:E1:73:32:35:1C:2F:D9:49:ED:69:80:35:94:26:D6:8A:A0:3A:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D386A53FAA08EADC16BEC9240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 72.172.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:53:fa:a0:8e:ad:c1:6b:ec:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=4c0c2f7a-d99d-4a14-a7a7-3ed6f70c59c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:6e:3a:9b:37:1d:d8:8a:82:7e:30:fa:80: 7d:56:f3:58:8a:39:09:ef:0b:86:f6:25:d1:eb:3e: 17:a2:83:2f:e3:f3:7c:c2:43:91:19:fb:b6:96:0d: bb:dd:c7:fc:c5:46:68:a9:ad:cc:2c:a8:78:37:c5: aa:b4:e8:16:c3:63:c4:33:91:70:fe:f9:c3:d8:05: 3e:24:3a:b2:2d:66:33:17:a3:1e:e0:fd:a0:9c:b3: 7f:79:32:97:ff:f9:85:bd:7b:7a:b6:69:99:4c:88: e3:58:04:ce:23:1c:62:8b:57:59:80:65:fe:99:07: d9:a1:c0:3d:1d:93:df:cf:3a:93:a9:da:57:87:f9: a2:d1:e7:35:16:80:16:63:6e:bb:1c:08:5c:4e:38: 1c:45:d5:4b:89:b6:89:72:94:96:71:06:fe:fd:ad: c9:4a:29:5d:16:d2:f5:54:cf:5f:8d:92:ec:25:e5: aa:de:a2:d4:25:9d:4f:77:68:4e:07:8a:ad:68:4c: 7b:d6:e4:9d:44:ca:b5:ca:22:5a:4a:7c:5d:18:30: 58:eb:92:34:75:ae:73:8c:09:dc:23:eb:a6:a3:a1: 39:5e:f3:f2:19:ea:ea:59:61:78:33:24:da:17:71: f0:25:b4:96:77:a4:eb:d4:bf:c8:92:bf:b5:58:93: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E1:73:32:35:1C:2F:D9:49:ED:69:80:35:94:26:D6:8A:A0:3A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baeb3e2a-1ecc-336f-80c3-456c0c327903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:4e:86:f5:76:e1:83:5e:f0:ba:46:7f:a0:57:91:9f:7b:21: fe:f0:e0:1a:17:78:bf:16:e0:99:b6:c3:53:38:e2:e4:e1:26: 70:63:22:33:04:86:a3:fe:ce:bb:21:e3:5f:f2:35:0f:48:87: 9e:c1:14:f1:64:27:71:da:fc:5b:21:6f:53:53:33:c6:19:6c: 69:ef:2c:f1:03:db:68:1d:76:ff:0d:47:d7:17:cc:50:25:2d: 1e:91:77:ad:55:3e:b5:de:ec:6e:c6:56:32:22:99:f0:51:b5: 40:27:ab:2b:6a:8d:74:d5:35:8a:c0:d0:21:fe:19:5e:a1:a5: 23:eb:41:bf:91:c4:eb:d0:77:86:c9:fb:95:66:83:21:88:10: 9d:1a:4f:cb:c2:b2:69:57:ae:08:fa:2c:4f:aa:65:da:60:5a: 95:22:25:3c:d7:b6:8d:d3:6b:b4:b5:10:b9:60:66:59:48:04: 49:ce:14:57:67:0f:8f:95:97:48:69:0f:fd:ff:14:ba:5b:0b: 03:81:21:ca:2d:f5:16:ed:2b:7f:de:0e:5d:69:d4:4f:ba:37: ca:8f:75:34:86:67:60:74:3a:57:3c:ee:53:f7:79:10:d6:1d: cd:6f:02:44:ff:df:b7:94:33:3f:83:15:56:97:66:09:5a:f2: 63:b9:1c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alP6oI6twWvskkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NGMwYzJmN2EtZDk5ZC00YTE0LWE3YTctM2VkNmY3MGM1OWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdFuOps3HdiKgn4w+oB9VvNYijkJ7wuG9iXR 6z4XooMv4/N8wkORGfu2lg273cf8xUZoqa3MLKh4N8WqtOgWw2PEM5Fw/vnD2AU+ JDqyLWYzF6Me4P2gnLN/eTKX//mFvXt6tmmZTIjjWATOIxxii1dZgGX+mQfZocA9 HZPfzzqTqdpXh/mi0ec1FoAWY267HAhcTjgcRdVLibaJcpSWcQb+/a3JSildFtL1 VM9fjZLsJeWq3qLUJZ1Pd2hOB4qtaEx71uSdRMq1yiJaSnxdGDBY65I0da5zjAnc I+umo6E5XvPyGerqWWF4MyTaF3HwJbSWd6Tr1L/Ikr+1WJOdwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfhczI1HC/ZSe1pgDWUJtaKoDqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmFlYjNlMmEtMWVjYy0z MzZmLTgwYzMtNDU2YzBjMzI3OTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSKwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZOhvV24YNe8LpGf6BXkZ97If7w4BoXeL8W4Jm2w1M44uThJnBjIjME hqP+zrsh41/yNQ9Ih57BFPFkJ3Ha/Fshb1NTM8YZbGnvLPED22gddv8NR9cXzFAl LR6Rd61VPrXe7G7GVjIimfBRtUAnqytqjXTVNYrA0CH+GV6hpSPrQb+RxOvQd4bJ +5VmgyGIEJ0aT8vCsmlXrgj6LE+qZdpgWpUiJTzXto3Ta7S1ELlgZllIBEnOFFdn D4+Vl0hpD/3/FLpbCwOBIcot9RbtK3/eDl1p1E+6N8qPdTSGZ2B0Olc87lP3eRDW Hc1vAkT/37eUMz+DFVaXZgla8mO5HJ4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:53:36 2026 by rpki-client