$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fbf45275-740b-390f-9807-d06c954adce0.roa File: fbf45275-740b-390f-9807-d06c954adce0.roa (raw, json) Hash identifier: TlPglfHbxY/EbWIPjdQEvLx0M583XNEb6paKjDniVdc= Subject key identifier: F2:E6:17:8C:A2:1B:3E:F8:38:0C:55:CC:D8:63:8A:81:48:CC:64:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49868767AAC4F48F48E43800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fbf45275-740b-390f-9807-d06c954adce0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 72.16.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:87:67:aa:c4:f4:8f:48:e4:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e9eaf6df-1227-4489-924c-02e6ed5fe915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:41:59:6f:3c:fb:8d:43:47:47:4b:8d:d6:5f: 6f:3a:5b:07:82:7c:f2:99:61:68:31:a1:c7:7d:5d: 7f:cf:c8:7f:35:ed:6e:74:06:bd:37:bc:8b:bb:b1: 86:c8:33:ae:91:01:a6:3a:41:22:24:b7:39:58:0f: 78:01:a4:24:4b:d6:22:6d:11:34:67:4c:ac:2d:33: f6:ad:ac:a4:88:f7:ff:a9:80:11:ba:29:e0:01:f6: c7:d9:6b:70:9b:ef:15:ab:db:18:cf:93:4f:2c:c4: 26:17:9c:f0:e3:2b:08:0a:dc:97:41:04:fc:e8:71: f3:b0:5d:f3:62:ee:a0:10:b8:8e:ec:d6:70:40:2c: 88:65:20:ee:76:63:20:35:6d:73:cb:fb:83:ea:ce: 64:f4:44:15:11:dc:6e:a1:d9:30:7d:c3:4c:29:41: 30:89:b3:01:e6:92:5a:db:9e:8e:2d:f7:d2:97:a5: b4:c7:00:a2:25:e9:74:42:cb:cf:03:af:3c:e1:c3: 98:14:62:95:73:55:28:28:1b:0a:b7:b4:08:ef:20: 42:35:05:27:0d:95:d5:83:1a:d6:bc:d3:3a:25:76: 35:86:7b:40:66:ab:ef:3b:6e:4a:9f:ea:71:ac:e4: f5:09:39:de:f0:63:01:5c:d8:9d:1a:bd:51:32:af: 86:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E6:17:8C:A2:1B:3E:F8:38:0C:55:CC:D8:63:8A:81:48:CC:64:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fbf45275-740b-390f-9807-d06c954adce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:1e:93:ae:e6:80:79:be:ab:7b:e8:85:00:6e:c0:77:e1:c5: d5:5d:dd:f2:cb:75:9e:a0:f2:3b:72:92:39:03:4c:a1:ed:b1: d5:19:25:26:d9:a3:91:3e:99:cb:c9:7f:b0:a4:3f:85:d2:4b: 2b:36:51:c9:cb:fe:67:1f:5d:9e:f6:fc:c9:ba:39:fa:62:54: ec:cd:26:aa:e1:5c:fb:60:1b:72:4d:65:b0:d0:a9:a8:a7:cd: 16:b4:8c:a9:b8:21:36:52:d2:ec:bd:ff:52:8d:1c:2b:90:cd: 9f:f3:cb:f9:93:e1:36:f3:e7:83:b5:6e:2f:d3:fc:6d:9f:eb: 02:00:ee:1c:39:02:36:f3:7b:15:ac:d8:0b:05:dd:08:4f:6b: d5:2b:81:a1:93:b9:d5:dc:57:ad:77:a5:5b:51:00:33:8a:a6: 4f:ba:0e:56:12:60:a6:2d:50:b8:aa:19:37:c5:68:fa:fc:89: 9a:49:8c:a6:86:af:1a:87:43:7f:65:3b:ff:4d:38:a8:20:5c: 1c:82:ed:cc:95:88:84:10:85:3f:96:66:39:be:20:50:1a:e2: fc:8a:66:41:5a:35:d6:2a:7f:9c:9e:0e:d9:85:39:75:cd:e6: 2f:c2:9e:86:e2:50:a2:e4:4e:f2:8d:cd:5e:38:2d:5e:c5:0a: 39:ad:a0:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhodnqsT0j0jkOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTllYWY2ZGYtMTIyNy00NDg5LTkyNGMtMDJlNmVkNWZlOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUFZbzz7jUNHR0uN1l9vOlsHgnzymWFoMaHH fV1/z8h/Ne1udAa9N7yLu7GGyDOukQGmOkEiJLc5WA94AaQkS9YibRE0Z0ysLTP2 raykiPf/qYARuingAfbH2Wtwm+8Vq9sYz5NPLMQmF5zw4ysICtyXQQT86HHzsF3z Yu6gELiO7NZwQCyIZSDudmMgNW1zy/uD6s5k9EQVEdxuodkwfcNMKUEwibMB5pJa 256OLffSl6W0xwCiJel0QsvPA6884cOYFGKVc1UoKBsKt7QI7yBCNQUnDZXVgxrW vNM6JXY1hntAZqvvO25Kn+pxrOT1CTne8GMBXNidGr1RMq+GzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLmF4yiGz74OAxVzNhjioFIzGSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmJmNDUyNzUtNzQwYi0z OTBmLTk4MDctZDA2Yzk1NGFkY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgek67mgHm+q3vohQBuwHfhxdVd3fLLdZ6g8jtykjkDTKHtsdUZJSbZ o5E+mcvJf7CkP4XSSys2UcnL/mcfXZ72/Mm6OfpiVOzNJqrhXPtgG3JNZbDQqain zRa0jKm4ITZS0uy9/1KNHCuQzZ/zy/mT4Tbz54O1bi/T/G2f6wIA7hw5AjbzexWs 2AsF3QhPa9UrgaGTudXcV613pVtRADOKpk+6DlYSYKYtULiqGTfFaPr8iZpJjKaG rxqHQ39lO/9NOKggXByC7cyViIQQhT+WZjm+IFAa4vyKZkFaNdYqf5yeDtmFOXXN 5i/CnobiUKLkTvKNzV44LV7FCjmtoDQ= -----END CERTIFICATE-----Generated at Fri Sep 25 22:50:00 2026 by rpki-client