$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f65dd78-fd2c-3e4d-9df2-fe388d151578.roa File: 8f65dd78-fd2c-3e4d-9df2-fe388d151578.roa (raw, json) Hash identifier: MAST5/UaFmC1LHiGGlYh92hSnCZ22LYrZUdcUXGB9Xw= Subject key identifier: 36:7A:29:AB:71:14:73:3D:EB:B7:32:BE:57:8E:B1:5B:FC:A1:11:88 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A9383B5F009728435FD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f65dd78-fd2c-3e4d-9df2-fe388d151578.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 63.138.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:93:83:b5:f0:09:72:84:35:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=84e60e7e-cb82-4f5c-bf32-e2043fe5ed43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9b:d7:2b:de:89:3c:d8:26:f9:3b:64:4f:ab: 19:7b:a1:01:10:1f:2a:9f:de:67:ad:a5:3f:c6:c0: bd:8c:99:31:93:53:f8:db:b4:6c:2a:ce:9e:95:c0: 92:a9:0d:2e:c2:e2:fd:15:d6:33:8a:8f:a0:1c:92: 99:64:e4:fd:cc:f9:0e:0d:47:e4:ce:be:55:1e:53: e4:a1:2d:41:30:66:b0:6f:bb:30:3e:f6:0d:07:a4: 9f:d0:0c:0d:a7:84:53:ed:93:a3:cf:78:fa:40:4f: 0d:57:c4:bf:90:ce:13:3b:97:e0:f1:27:39:e0:cb: 8a:9f:33:3d:d3:74:9f:6d:68:86:5a:05:aa:7e:59: 8c:ef:a8:d5:24:9f:16:ce:bf:83:4d:d6:8e:7c:ed: 8c:7d:1f:0d:e6:3e:26:b8:76:e7:26:4d:13:a3:61: 4f:43:65:80:50:ba:03:5e:dc:c8:81:68:cb:6a:8b: 39:91:e1:a5:b9:76:7a:e7:35:26:d8:12:9d:e7:38: ce:e3:15:75:a7:c5:2d:5c:47:b3:f0:04:a9:f8:87: f5:f9:cf:6c:a3:b7:b0:cc:36:97:82:08:6b:f2:01: 9e:ed:5a:bd:3d:08:82:8f:10:16:2b:63:c8:18:8c: 41:9a:6f:42:b1:b6:5a:1e:3b:7d:f4:2d:80:19:ff: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7A:29:AB:71:14:73:3D:EB:B7:32:BE:57:8E:B1:5B:FC:A1:11:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f65dd78-fd2c-3e4d-9df2-fe388d151578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.138.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:61:dc:86:f7:4f:e2:b6:7b:2e:5e:b2:10:25:80:59:45:3b: 8f:16:96:28:74:bf:ac:f9:74:f4:a8:40:a8:cb:e6:59:26:9a: cf:f9:6a:e5:db:e1:98:ce:70:32:d3:13:8f:9e:e7:50:db:6d: 0f:9f:39:2b:62:33:61:d4:8e:49:79:f5:8e:51:13:8b:e3:32: 04:ba:d8:7b:9a:56:af:51:f5:c4:bb:a0:8b:81:2d:ae:2c:ae: db:cc:58:5b:36:d5:08:00:d1:9e:55:0a:1d:88:99:6d:b9:a8: 18:33:d1:a4:a7:37:86:76:51:86:b2:0c:21:25:02:b7:2d:91: 7d:29:1c:ba:0c:74:c6:0f:20:2f:e7:1b:47:c3:fb:57:af:22: 0a:18:d8:a7:56:af:8d:84:48:f3:99:b7:22:f9:54:22:71:86: b3:c8:f2:98:93:48:e1:9f:d6:3f:cf:7e:9d:c9:d0:65:3e:9d: 0c:61:b8:1d:75:c2:da:fc:4c:d3:f9:9a:74:d3:cd:26:8f:8a: f7:9e:29:5c:17:bd:1b:84:2d:ef:e2:1a:ad:58:91:af:a1:6f: 6b:ff:a8:11:62:d9:69:80:7d:9b:10:7e:c9:da:f7:bc:26:cb: 9d:b6:47:41:3d:0f:4d:05:1c:98:fd:05:82:e5:e7:a2:1e:b5: 38:2a:bc:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpODtfAJcoQ1/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ODRlNjBlN2UtY2I4Mi00ZjVjLWJmMzItZTIwNDNmZTVlZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5vXK96JPNgm+TtkT6sZe6EBEB8qn95nraU/ xsC9jJkxk1P427RsKs6elcCSqQ0uwuL9FdYzio+gHJKZZOT9zPkODUfkzr5VHlPk oS1BMGawb7swPvYNB6Sf0AwNp4RT7ZOjz3j6QE8NV8S/kM4TO5fg8Sc54MuKnzM9 03SfbWiGWgWqflmM76jVJJ8Wzr+DTdaOfO2MfR8N5j4muHbnJk0To2FPQ2WAULoD XtzIgWjLaos5keGluXZ65zUm2BKd5zjO4xV1p8UtXEez8ASp+If1+c9so7ewzDaX gghr8gGe7Vq9PQiCjxAWK2PIGIxBmm9CsbZaHjt99C2AGf/B5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZ6KatxFHM967cyvleOsVv8oRGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGY2NWRkNzgtZmQyYy0z ZTRkLTlkZjItZmUzODhkMTUxNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGph3Ib3T+K2ey5eshAlgFlFO48Wlih0v6z5dPSoQKjL5lkmms/5auXb 4ZjOcDLTE4+e51DbbQ+fOStiM2HUjkl59Y5RE4vjMgS62HuaVq9R9cS7oIuBLa4s rtvMWFs21QgA0Z5VCh2ImW25qBgz0aSnN4Z2UYayDCElArctkX0pHLoMdMYPIC/n G0fD+1evIgoY2KdWr42ESPOZtyL5VCJxhrPI8piTSOGf1j/Pfp3J0GU+nQxhuB11 wtr8TNP5mnTTzSaPiveeKVwXvRuELe/iGq1Yka+hb2v/qBFi2WmAfZsQfsna97wm y522R0E9D00FHJj9BYLl56IetTgqvBc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:54:27 2026 by rpki-client