$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d3521c4c-8b86-3753-8c96-a289ffb4f163.roa File: d3521c4c-8b86-3753-8c96-a289ffb4f163.roa (raw, json) Hash identifier: GaW1OdK2zSkZsi73RDHdgY4GaPRbjXQnLaKcOdgunGY= Subject key identifier: 98:7D:71:E6:A9:DB:8D:86:54:5D:58:1B:C5:F9:17:30:F3:80:48:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA7187C01C7DDF4926A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d3521c4c-8b86-3753-8c96-a289ffb4f163.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 40399 IP address blocks: 63.138.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a7:18:7c:01:c7:dd:f4:92:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=a3d4c3bf-02b3-4764-be6d-a70f6e4cccad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:30:0c:0f:8d:fb:d8:05:ec:b0:a9:dd:a1:79: 6e:73:01:f2:05:dc:9e:1e:33:4f:c1:40:0f:0f:13: e0:0d:ef:3d:80:15:b2:03:de:ab:26:3b:10:df:50: cd:16:0c:36:48:75:30:7c:ff:07:31:fb:04:ef:f6: 7c:ab:44:6e:cf:70:2e:35:f0:c0:b7:d8:f8:3c:ff: 78:b2:a8:50:68:77:4d:20:24:53:84:fc:f8:22:8e: 37:dd:24:59:44:dc:f1:ff:45:47:11:26:13:a9:a2: 94:ee:14:0a:18:74:58:c1:8c:20:4b:af:97:af:45: bc:1f:c4:4e:c7:05:6b:89:94:ad:77:20:33:39:44: e7:7a:12:ce:74:81:6b:91:86:47:bc:7a:98:2d:48: 58:9c:a0:7e:4e:96:b1:e7:52:c9:b9:04:6b:9b:39: b4:c8:bf:30:c9:fb:ab:5d:c1:a8:0d:4c:15:73:24: ad:33:3f:e1:c6:26:63:20:60:11:64:9f:bc:23:16: ac:ad:85:e8:b6:7d:69:b7:be:69:0e:80:a6:ca:e2: f4:95:68:9a:24:b8:15:ed:e5:d6:27:98:5e:71:36: 46:e8:d0:8b:7b:14:b4:02:2f:dc:6f:a7:9f:e1:d9: 73:f4:7f:c2:90:14:44:ae:0c:c7:ac:69:d0:ff:9f: 8b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7D:71:E6:A9:DB:8D:86:54:5D:58:1B:C5:F9:17:30:F3:80:48:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d3521c4c-8b86-3753-8c96-a289ffb4f163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.138.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ff:44:7d:cd:a5:08:fa:37:72:a4:4e:d1:7b:eb:2c:8d:63: 0b:2e:fd:46:72:4c:69:cd:a0:12:6f:f2:74:f6:e0:2c:c3:a9: 4d:36:38:e1:a0:62:06:5f:97:a2:0a:ea:53:e6:41:55:42:f9: 38:ea:f8:1c:6e:d7:6a:c4:71:c0:e7:81:a6:4d:d0:cf:1d:a8: cd:b4:90:d0:2e:b5:ac:36:d1:4e:c7:03:d7:7e:c7:63:7e:72: 8b:ac:ec:15:97:ce:30:3c:57:b6:88:8a:a9:fd:78:29:70:8f: cc:38:87:5c:e3:a3:5a:36:57:55:2d:46:ca:ca:23:b6:fd:9e: b3:2b:59:8b:07:5c:cb:8d:2e:18:d0:da:e6:6d:a4:fa:19:d6: 68:ef:27:9e:df:e0:40:dc:f8:67:9a:cc:eb:79:36:ad:08:1d: 79:45:4f:0c:1a:79:0b:4b:93:63:dd:30:e5:c1:28:af:b3:2f: fc:ea:ef:2f:fe:3b:83:77:e1:e9:39:88:22:0c:45:5e:48:80: 23:f5:46:38:b6:5c:d8:a3:4f:46:e4:eb:f2:8f:22:7c:a1:57: d4:ae:34:61:cc:d4:1d:f0:56:77:a2:06:00:89:a2:80:f0:56: 5b:8b:9d:99:05:a7:6e:41:01:f7:93:f9:4a:8c:93:d4:19:3a: cd:95:fd:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqcYfAHH3fSSagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YTNkNGMzYmYtMDJiMy00NzY0LWJlNmQtYTcwZjZlNGNjY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDAMD4372AXssKndoXlucwHyBdyeHjNPwUAP DxPgDe89gBWyA96rJjsQ31DNFgw2SHUwfP8HMfsE7/Z8q0Ruz3AuNfDAt9j4PP94 sqhQaHdNICRThPz4Io433SRZRNzx/0VHESYTqaKU7hQKGHRYwYwgS6+Xr0W8H8RO xwVriZStdyAzOUTnehLOdIFrkYZHvHqYLUhYnKB+Tpax51LJuQRrmzm0yL8wyfur XcGoDUwVcyStMz/hxiZjIGARZJ+8IxasrYXotn1pt75pDoCmyuL0lWiaJLgV7eXW J5hecTZG6NCLexS0Ai/cb6ef4dlz9H/CkBRErgzHrGnQ/5+LHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJh9ceap242GVF1YG8X5FzDzgEgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDM1MjFjNGMtOGI4Ni0z NzUzLThjOTYtYTI4OWZmYjRmMTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4ptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH//RH3NpQj6N3KkTtF76yyNYwsu/UZyTGnNoBJv8nT24CzDqU02OOGg YgZfl6IK6lPmQVVC+Tjq+Bxu12rEccDngaZN0M8dqM20kNAutaw20U7HA9d+x2N+ cous7BWXzjA8V7aIiqn9eClwj8w4h1zjo1o2V1UtRsrKI7b9nrMrWYsHXMuNLhjQ 2uZtpPoZ1mjvJ57f4EDc+GeazOt5Nq0IHXlFTwwaeQtLk2PdMOXBKK+zL/zq7y/+ O4N34ek5iCIMRV5IgCP1Rji2XNijT0bk6/KPInyhV9SuNGHM1B3wVneiBgCJooDw VluLnZkFp25BAfeT+UqMk9QZOs2V/fc= -----END CERTIFICATE-----Generated at Thu Mar 26 18:21:55 2026 by rpki-client