$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5eb02e5-c78f-3b79-b5aa-717163259344.roa File: d5eb02e5-c78f-3b79-b5aa-717163259344.roa (raw, json) Hash identifier: dvMKz6ztYjCJeTeviXZd9z/jOuVgwDZTdPjRKYc10tU= Subject key identifier: 29:68:2E:26:09:61:B9:37:BD:5D:A4:4E:37:0F:50:22:07:8F:F6:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D0A779BF6173C6B98C206A480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5eb02e5-c78f-3b79-b5aa-717163259344.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 72.16.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:9b:f6:17:3c:6b:98:c2:06:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=49c62ac3-09d3-4e75-9dac-1ebbaf84d464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:4b:7d:5a:a6:e5:12:f6:a3:5b:ae:c3:31: fe:79:52:83:3c:9e:d1:f2:b0:8a:f4:e3:d3:4f:3f: 1c:33:5d:ea:0f:c1:32:5b:a8:2b:eb:9e:07:6e:c5: 2a:99:fb:2e:26:4d:7a:91:53:be:48:18:29:59:c9: e5:2a:bd:0b:11:98:63:c7:c7:c5:70:47:18:b8:0c: 8f:cd:d4:72:2c:ab:9e:11:d7:4d:5a:8c:1e:88:89: fd:0c:ff:50:e5:53:22:c1:19:8f:c3:94:37:a4:5b: 07:87:4a:a4:f9:7a:4b:51:b0:19:d5:e3:c6:9a:ba: 42:11:85:b2:b2:dc:88:83:e9:05:4a:03:80:30:ed: 8e:96:74:8e:bf:96:60:c9:62:75:55:83:d5:cf:e4: b6:ad:08:04:bc:79:e6:92:00:20:ad:51:3b:a9:78: 14:34:cf:e3:d0:9a:c4:36:09:d2:9f:73:a9:d6:93: 98:bc:00:17:d2:f3:bb:2b:ef:ad:e2:ca:cb:0a:b4: 2e:7a:98:1c:95:de:c3:ee:34:0c:c9:42:8b:92:95: d8:50:a4:36:a4:36:37:af:ed:51:5b:b5:08:66:86: 87:d4:37:1f:7f:93:eb:b7:d2:cc:71:00:3e:b8:09: cf:1d:f0:25:a9:cc:3a:6b:f2:53:3e:ac:f4:dd:fe: ea:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:68:2E:26:09:61:B9:37:BD:5D:A4:4E:37:0F:50:22:07:8F:F6:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5eb02e5-c78f-3b79-b5aa-717163259344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6f:0c:79:bf:a0:84:22:f5:ec:b1:81:0b:15:9f:dc:df:9c: 30:5f:e6:3d:d6:ff:2f:be:4e:98:cd:1d:b0:1f:cc:1f:60:1e: 88:17:df:68:8c:e5:1d:3b:8a:d5:a7:3d:46:c3:7b:3b:dc:55: 9d:00:11:ce:8d:0a:66:65:3b:ea:40:84:6e:af:f8:00:83:86: 2d:0f:c6:3e:81:92:3d:98:77:99:cb:a9:4f:32:11:be:4f:67: 89:8f:ac:18:79:ce:0b:95:15:f2:9c:37:2d:a5:85:1d:42:84: b1:c9:97:05:cc:9d:68:12:a6:0d:2d:14:c6:c2:7c:0d:c5:c7: 14:02:b2:ab:bd:bc:79:8a:8e:d2:5f:21:76:51:48:7f:ca:e1: 52:6d:01:5c:70:eb:30:e3:60:b7:d3:19:5b:d2:d4:d6:7b:5a: f7:b4:15:60:e8:ca:e0:86:d8:73:b6:d8:98:5d:78:54:00:37: 85:6d:7f:d4:7e:e3:3b:95:ce:48:b5:16:5e:db:a3:f4:5c:3e: 76:79:b4:0f:d1:34:4a:4d:d9:46:7a:f0:29:ea:3e:9f:11:a4: 1c:8e:04:f6:44:63:4b:73:db:69:a1:19:36:88:fc:33:34:dd: 86:97:07:db:c9:15:1b:5b:bd:20:b8:70:09:9e:43:96:b4:aa: 4b:61:31:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd5v2FzxrmMIGpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk NDljNjJhYzMtMDlkMy00ZTc1LTlkYWMtMWViYmFmODRkNDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsNLfVqm5RL2o1uuwzH+eVKDPJ7R8rCK9OPT Tz8cM13qD8EyW6gr654HbsUqmfsuJk16kVO+SBgpWcnlKr0LEZhjx8fFcEcYuAyP zdRyLKueEddNWoweiIn9DP9Q5VMiwRmPw5Q3pFsHh0qk+XpLUbAZ1ePGmrpCEYWy styIg+kFSgOAMO2OlnSOv5ZgyWJ1VYPVz+S2rQgEvHnmkgAgrVE7qXgUNM/j0JrE NgnSn3Op1pOYvAAX0vO7K++t4srLCrQuepgcld7D7jQMyUKLkpXYUKQ2pDY3r+1R W7UIZoaH1Dcff5Prt9LMcQA+uAnPHfAlqcw6a/JTPqz03f7qyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCloLiYJYbk3vV2kTjcPUCIHj/YYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDVlYjAyZTUtYzc4Zi0z Yjc5LWI1YWEtNzE3MTYzMjU5MzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpvDHm/oIQi9eyxgQsVn9zfnDBf5j3W/y++TpjNHbAfzB9gHogX32iM 5R07itWnPUbDezvcVZ0AEc6NCmZlO+pAhG6v+ACDhi0Pxj6Bkj2Yd5nLqU8yEb5P Z4mPrBh5zguVFfKcNy2lhR1ChLHJlwXMnWgSpg0tFMbCfA3FxxQCsqu9vHmKjtJf IXZRSH/K4VJtAVxw6zDjYLfTGVvS1NZ7Wve0FWDoyuCG2HO22JhdeFQAN4Vtf9R+ 4zuVzki1Fl7bo/RcPnZ5tA/RNEpN2UZ68CnqPp8RpByOBPZEY0tz22mhGTaI/DM0 3YaXB9vJFRtbvSC4cAmeQ5a0qkthMUQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:37 2026 by rpki-client