$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87b1a037-ef77-34de-9b75-f33eaabea7c4.roa File: 87b1a037-ef77-34de-9b75-f33eaabea7c4.roa (raw, json) Hash identifier: 7GckziQIz7SfshJuj8Pafd2xSl0IKIXTx55MavkhAFI= Subject key identifier: 6F:20:54:39:44:7B:27:D3:38:D5:E5:AE:73:50:D7:8E:E5:FC:6E:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A67FD53DE980A6F667120 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87b1a037-ef77-34de-9b75-f33eaabea7c4.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 63.138.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:67:fd:53:de:98:0a:6f:66:71:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=25f650cf-9780-401c-8c23-5d2e0f1a01c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:77:5c:8a:30:4b:79:60:9d:3b:b8:13:d9: 84:05:4b:e6:14:30:35:97:b0:ca:91:2b:76:15:7c: af:05:15:10:63:2d:15:69:88:5b:3c:04:e4:1a:aa: 01:33:a6:30:2a:33:c3:1a:25:5a:21:bd:fb:5d:eb: ac:0c:21:f0:5f:88:64:18:20:75:7c:a5:09:ab:60: 87:c1:a2:5c:b9:07:86:42:64:d6:88:86:4b:15:33: 37:e6:46:6c:b4:81:f5:be:4d:97:2a:bf:8b:cf:c0: a9:71:bd:46:ac:a2:f8:76:12:a3:de:b4:d2:3b:84: 91:19:2a:e0:a3:fd:67:40:b3:3c:3a:d0:18:93:ca: d4:f9:0e:9e:64:f0:c7:63:34:d8:3c:d7:f4:e9:9c: a8:0e:5a:d8:e0:bf:4f:63:85:0a:a6:63:75:af:f8: 0e:7e:ff:72:21:9c:3c:de:ca:fb:f7:c2:bf:e0:28: e2:bc:a0:f0:7f:11:4a:ce:39:01:a0:eb:83:70:4d: e1:da:d7:42:b8:48:04:06:36:ef:12:21:f0:d3:b0: 3d:84:38:57:d6:b4:42:5c:18:69:a5:76:63:9d:d1: cf:6d:ee:e3:dc:cc:b2:d8:a8:18:0a:6b:fb:6e:d2: 18:ab:cc:68:9b:4c:94:1e:19:4f:ae:03:44:0a:e3: d2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:20:54:39:44:7B:27:D3:38:D5:E5:AE:73:50:D7:8E:E5:FC:6E:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87b1a037-ef77-34de-9b75-f33eaabea7c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.138.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:10:7b:cf:56:a5:4d:71:ce:06:86:1f:40:f4:b9:8a:86:c2: ab:d4:05:b3:b8:7b:d5:30:76:b7:f4:5a:34:34:96:78:04:fb: 55:92:1a:d0:ac:43:72:d1:11:d5:d6:d0:28:02:42:63:da:cd: ad:b3:d2:20:9a:d9:8e:ff:d4:cf:ee:4d:69:ab:c3:79:ba:46: f0:b4:81:57:26:25:91:4a:53:8b:45:47:76:97:0f:f2:da:a3: c1:ce:1f:56:90:35:03:40:c0:28:1c:5d:63:fd:e6:fc:66:e8: 83:05:fb:af:c9:74:77:fc:20:9b:72:a4:7d:a8:38:c2:0e:d2: 73:ba:98:07:c3:0d:fb:46:ad:52:b9:bd:f5:8d:ba:85:94:be: 8b:24:7c:29:ab:f7:c4:c7:2b:2e:39:43:f0:c5:a1:a6:36:35: e4:6c:ad:46:d4:89:29:e6:c3:b4:4e:6f:34:8d:a0:74:c0:0b: 8b:4b:5f:60:8a:b5:3e:a0:1f:76:43:83:c8:77:74:b8:c0:2a: 88:e8:1f:4f:5b:e4:98:4f:aa:cd:a2:6b:47:bc:37:e4:63:3a: 97:7b:a8:79:50:dc:95:3d:4a:a6:72:e2:f5:82:42:36:28:16: 47:0a:2a:8a:76:7b:e2:f9:ef:e9:c2:02:fa:85:44:82:98:86: bb:f8:73:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCmf9U96YCm9mcSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MjVmNjUwY2YtOTc4MC00MDFjLThjMjMtNWQyZTBmMWEwMWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7V3XIowS3lgnTu4E9mEBUvmFDA1l7DKkSt2 FXyvBRUQYy0VaYhbPATkGqoBM6YwKjPDGiVaIb37XeusDCHwX4hkGCB1fKUJq2CH waJcuQeGQmTWiIZLFTM35kZstIH1vk2XKr+Lz8Cpcb1GrKL4dhKj3rTSO4SRGSrg o/1nQLM8OtAYk8rU+Q6eZPDHYzTYPNf06ZyoDlrY4L9PY4UKpmN1r/gOfv9yIZw8 3sr798K/4CjivKDwfxFKzjkBoOuDcE3h2tdCuEgEBjbvEiHw07A9hDhX1rRCXBhp pXZjndHPbe7j3Myy2KgYCmv7btIYq8xom0yUHhlPrgNECuPSowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8gVDlEeyfTONXlrnNQ147l/G6QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdiMWEwMzctZWY3Ny0z NGRlLTliNzUtZjMzZWFhYmVhN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAQe89WpU1xzgaGH0D0uYqGwqvUBbO4e9Uwdrf0WjQ0lngE+1WSGtCs Q3LREdXW0CgCQmPaza2z0iCa2Y7/1M/uTWmrw3m6RvC0gVcmJZFKU4tFR3aXD/La o8HOH1aQNQNAwCgcXWP95vxm6IMF+6/JdHf8IJtypH2oOMIO0nO6mAfDDftGrVK5 vfWNuoWUvoskfCmr98THKy45Q/DFoaY2NeRsrUbUiSnmw7RObzSNoHTAC4tLX2CK tT6gH3ZDg8h3dLjAKojoH09b5JhPqs2ia0e8N+RjOpd7qHlQ3JU9SqZy4vWCQjYo FkcKKop2e+L57+nCAvqFRIKYhrv4c10= -----END CERTIFICATE-----Generated at Thu Mar 26 14:41:11 2026 by rpki-client