$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/353852e9-8244-3a99-a4c3-a3d7d092a01c.roa File: 353852e9-8244-3a99-a4c3-a3d7d092a01c.roa (raw, json) Hash identifier: c8Uv8heopZ7BVzBCXCMi5Fi+hz4M7+pvvaO5wEG/+Rk= Subject key identifier: 84:6F:68:6E:80:EB:29:9A:E2:C6:DC:5D:61:F0:20:C7:E5:76:47:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA796D3B9FC739E736F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/353852e9-8244-3a99-a4c3-a3d7d092a01c.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 53286 IP address blocks: 63.139.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a7:96:d3:b9:fc:73:9e:73:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=0fd5a554-7356-4ad9-9c67-8436116f6a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:26:a9:6a:45:f3:97:f5:fd:20:d4:c3:3d: bd:f8:c2:2c:0d:da:94:84:2b:ef:71:c5:65:b8:38: fd:4a:91:27:ff:14:68:f6:07:8a:f0:0c:ee:56:66: 5c:5c:f3:aa:1f:44:ae:77:9e:3c:86:de:13:bf:35: 9c:b6:23:0c:c6:67:bb:c9:06:3f:2c:bf:14:26:48: ba:93:95:32:45:47:e8:6c:5f:94:01:fd:06:ea:93: 00:e9:ec:c2:c9:d4:8b:6f:10:1c:b1:53:45:40:8c: 9e:f4:24:4a:b1:56:fd:e2:36:9d:87:aa:5f:ba:ee: 5f:94:6b:68:cb:8d:9b:aa:8f:6e:d4:9e:53:7f:84: 10:eb:95:b3:e7:a5:58:bb:64:02:c2:23:72:7c:99: d0:be:67:05:63:ba:36:93:de:31:94:74:52:89:aa: 4f:4d:d3:48:86:1c:a1:d1:d9:5c:d6:2c:6f:37:1b: e8:b4:bc:b4:b1:25:8d:9d:48:f0:34:b0:d3:44:21: 0c:6e:4f:ac:34:36:56:a5:6d:cf:98:d3:4f:c0:ae: 2f:d0:94:ca:96:b1:48:3a:ec:a5:dc:f3:f8:1b:b4: f7:58:9d:f9:8c:d3:6d:ca:06:e8:f6:46:91:e9:c0: 5a:f7:68:ed:ff:e9:3a:2d:3b:d0:0c:86:7f:1b:f0: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6F:68:6E:80:EB:29:9A:E2:C6:DC:5D:61:F0:20:C7:E5:76:47:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/353852e9-8244-3a99-a4c3-a3d7d092a01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.139.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:af:73:ab:95:0f:13:4b:bc:5f:94:30:67:70:04:6e:35:88: fd:d1:01:5f:5a:71:f7:eb:e8:00:4b:d5:57:b7:14:c7:0c:ff: c2:9a:ed:19:30:a0:7e:43:2a:55:97:b9:82:48:d3:6a:92:be: ee:7c:55:55:1e:ab:c4:2d:18:52:5f:4f:a2:96:68:6c:2e:8f: 29:f5:73:f2:2a:da:ba:05:2b:5b:23:0a:97:91:7a:85:ee:6a: c8:42:60:71:de:05:f0:9d:75:1c:aa:35:dc:58:ff:ee:1b:16: ca:d8:1f:7f:3b:e4:57:d9:34:ae:69:2a:a9:00:cf:2e:7e:3e: 40:6c:8d:4d:0a:8a:88:d6:78:51:18:5e:cc:95:d9:09:c8:83: a8:db:3d:43:12:a7:0a:38:c1:48:d8:eb:c2:6b:f7:39:f2:16: 98:64:7c:66:14:09:62:b8:17:7f:88:57:63:cb:96:e6:2b:43: 3a:54:03:89:3c:6d:31:33:8f:bd:3c:e1:df:ca:65:b6:16:63: eb:20:75:1b:41:39:64:1e:66:c0:38:57:e6:19:48:8d:89:cb: 2f:a4:ad:27:20:e8:0f:71:d2:b1:fc:ee:74:13:00:de:a5:1a: 9b:5d:df:1c:e0:3e:63:86:ce:18:fb:28:8c:97:f2:20:a2:05: de:77:39:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqeW07n8c55zbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MGZkNWE1NTQtNzM1Ni00YWQ5LTljNjctODQzNjExNmY2YTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZQmqWpF85f1/SDUwz29+MIsDdqUhCvvccVl uDj9SpEn/xRo9geK8AzuVmZcXPOqH0Sud548ht4TvzWctiMMxme7yQY/LL8UJki6 k5UyRUfobF+UAf0G6pMA6ezCydSLbxAcsVNFQIye9CRKsVb94jadh6pfuu5flGto y42bqo9u1J5Tf4QQ65Wz56VYu2QCwiNyfJnQvmcFY7o2k94xlHRSiapPTdNIhhyh 0dlc1ixvNxvotLy0sSWNnUjwNLDTRCEMbk+sNDZWpW3PmNNPwK4v0JTKlrFIOuyl 3PP4G7T3WJ35jNNtygbo9kaR6cBa92jt/+k6LTvQDIZ/G/AJYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRvaG6A6yma4sbcXWHwIMfldkcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzUzODUyZTktODI0NC0z YTk5LWE0YzMtYTNkN2QwOTJhMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4tUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSvc6uVDxNLvF+UMGdwBG41iP3RAV9acffr6ABL1Ve3FMcM/8Ka7Rkw oH5DKlWXuYJI02qSvu58VVUeq8QtGFJfT6KWaGwujyn1c/Iq2roFK1sjCpeReoXu ashCYHHeBfCddRyqNdxY/+4bFsrYH3875FfZNK5pKqkAzy5+PkBsjU0KiojWeFEY XsyV2QnIg6jbPUMSpwo4wUjY68Jr9znyFphkfGYUCWK4F3+IV2PLluYrQzpUA4k8 bTEzj7084d/KZbYWY+sgdRtBOWQeZsA4V+YZSI2Jyy+krScg6A9x0rH87nQTAN6l Gptd3xzgPmOGzhj7KIyX8iCiBd53OcE= -----END CERTIFICATE-----Generated at Fri Mar 27 03:40:01 2026 by rpki-client