$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd7b5f78-3e59-3b46-bd42-e9580534e712.roa File: bd7b5f78-3e59-3b46-bd42-e9580534e712.roa (raw, json) Hash identifier: tOY3BxWPxHy+f7WSlEXunDRKE3K2Wa9m14QyGNk8f4k= Subject key identifier: DD:15:F2:97:56:F7:83:D8:0C:33:B7:BE:C1:06:59:44:B2:91:A9:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7BE265F6FE67DE64FD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd7b5f78-3e59-3b46-bd42-e9580534e712.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 53610 IP address blocks: 63.252.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7b:e2:65:f6:fe:67:de:64:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=84781850-620f-4c61-a73d-5463a60913b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b0:84:4b:15:e7:1c:26:d5:33:48:50:87:5b: 34:d2:85:10:b4:37:63:43:a1:6f:7a:53:05:be:27: f0:68:34:24:17:a9:6b:54:57:a5:77:20:28:51:c0: 5d:c7:b8:2b:ec:25:e3:f7:dd:f3:7a:4b:00:bb:74: 27:fc:57:48:9e:5b:e8:20:35:dc:5b:3c:b9:c8:34: f1:03:19:2c:f7:cd:c7:5e:36:de:4e:f3:ab:cd:25: 4f:af:56:67:32:e6:d6:0e:fb:a2:ca:83:aa:e7:72: 71:8b:af:8a:59:4f:88:b7:6e:60:c3:0a:bc:32:57: 96:e7:ad:d2:68:21:4a:f4:90:01:46:a8:fa:30:bd: 32:17:dc:19:5f:c3:86:a0:b0:b1:e8:67:4c:f2:82: bf:46:f8:7e:31:37:94:16:f2:65:37:56:bc:5d:fa: 95:1a:78:c1:44:b2:cb:fc:b4:3b:e5:da:e6:46:29: 71:ea:96:68:93:7d:d9:89:0d:32:55:42:ec:bd:29: 3f:3e:a3:5f:9b:3f:b4:cf:56:7f:24:7d:e0:97:86: d8:48:64:b7:fb:48:67:cf:d8:9f:43:05:13:e7:36: 22:ff:01:85:60:e6:54:40:38:21:62:38:6d:5d:cd: 8f:d8:08:63:55:0a:85:81:28:09:4c:f7:25:87:0c: 42:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:15:F2:97:56:F7:83:D8:0C:33:B7:BE:C1:06:59:44:B2:91:A9:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd7b5f78-3e59-3b46-bd42-e9580534e712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.252.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:bb:f0:f0:89:5d:a7:87:cf:46:be:a9:f4:5b:f7:da:27:6a: 57:87:54:e1:81:5d:61:8b:1e:b7:da:18:cc:d0:6b:cb:3b:d6: 0a:3b:b3:3a:d9:36:ed:f4:6d:10:77:32:82:f4:d3:22:80:eb: d4:c2:44:40:da:b2:13:0a:31:b5:52:22:6b:5d:30:18:22:87: 51:d1:68:10:7b:5d:2a:24:de:21:1d:3c:b6:fb:80:4a:70:5a: a2:8d:4f:8c:ca:35:c3:7b:7f:59:0f:f7:7c:29:d9:33:1a:ab: 89:c5:7d:a8:3f:a8:ac:82:e9:61:85:bd:d4:80:2f:0e:0d:ca: 16:35:7e:2b:d7:94:05:88:30:53:54:15:3e:e1:ac:ce:ad:35: 55:aa:6e:70:99:94:c7:f4:12:1e:0f:d1:7d:3e:b1:47:50:6f: 9d:ca:bd:71:b5:fd:9b:09:66:aa:bc:bf:1d:c3:ee:ae:fd:64: 02:1d:ff:ad:1c:95:96:04:e1:a3:61:db:b9:d2:fd:16:2f:1d: e6:10:fb:2e:7f:c6:12:f3:cb:bb:3f:9e:62:76:1f:53:12:b6: 91:6f:39:e1:9a:52:2b:41:46:bd:c5:47:db:a6:35:16:5d:87: 7c:d4:a2:14:03:de:cd:db:af:f3:aa:0a:44:60:40:6b:51:a6: 56:c6:2c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnviZfb+Z95k/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ODQ3ODE4NTAtNjIwZi00YzYxLWE3M2QtNTQ2M2E2MDkxM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7CESxXnHCbVM0hQh1s00oUQtDdjQ6FvelMF vifwaDQkF6lrVFeldyAoUcBdx7gr7CXj993zeksAu3Qn/FdInlvoIDXcWzy5yDTx Axks983HXjbeTvOrzSVPr1ZnMubWDvuiyoOq53Jxi6+KWU+It25gwwq8MleW563S aCFK9JABRqj6ML0yF9wZX8OGoLCx6GdM8oK/Rvh+MTeUFvJlN1a8XfqVGnjBRLLL /LQ75drmRilx6pZok33ZiQ0yVULsvSk/PqNfmz+0z1Z/JH3gl4bYSGS3+0hnz9if QwUT5zYi/wGFYOZUQDghYjhtXc2P2AhjVQqFgSgJTPclhwxCowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0V8pdW94PYDDO3vsEGWUSykantMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQ3YjVmNzgtM2U1OS0z YjQ2LWJkNDItZTk1ODA1MzRlNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP/zoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK78PCJXaeHz0a+qfRb99onaleHVOGBXWGLHrfaGMzQa8s71go7szrZ Nu30bRB3MoL00yKA69TCREDashMKMbVSImtdMBgih1HRaBB7XSok3iEdPLb7gEpw WqKNT4zKNcN7f1kP93wp2TMaq4nFfag/qKyC6WGFvdSALw4NyhY1fivXlAWIMFNU FT7hrM6tNVWqbnCZlMf0Eh4P0X0+sUdQb53KvXG1/ZsJZqq8vx3D7q79ZAId/60c lZYE4aNh27nS/RYvHeYQ+y5/xhLzy7s/nmJ2H1MStpFvOeGaUitBRr3FR9umNRZd h3zUohQD3s3br/OqCkRgQGtRplbGLJE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:52 2026 by rpki-client