$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26a28423-f8af-3894-8a24-baa35c651a8c.roa File: 26a28423-f8af-3894-8a24-baa35c651a8c.roa (raw, json) Hash identifier: Zm7yM9iPOthFsYan7eo7mgCD2cJZKIKEMj4OUP4P8G0= Subject key identifier: 65:41:BB:BF:C0:F9:C4:BA:6B:45:47:25:0A:66:9C:DC:83:66:8D:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CD3EB4CD71E23D7CC6220 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26a28423-f8af-3894-8a24-baa35c651a8c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 36314 IP address blocks: 63.138.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d3:eb:4c:d7:1e:23:d7:cc:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=496ad5e6-a15a-43de-ba43-ebbadf3be856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:d2:27:b9:68:29:72:c5:97:6b:1b:d5:86: 21:6e:16:d3:25:20:3a:34:f0:f3:23:28:0b:ff:f0: 51:5a:7c:01:0d:dc:90:be:b2:3f:9c:73:84:3d:1a: 8d:0f:7f:e6:39:3b:00:7b:3d:e8:ed:2f:ab:16:cd: db:cc:4a:3b:c8:05:d0:43:77:eb:70:e7:8e:87:b9: bc:c0:39:ef:d5:6d:bc:c8:98:eb:45:e7:9a:c9:6d: c9:0b:d1:0c:2c:87:f1:51:97:60:93:4a:6a:dc:5b: 3c:82:ea:a6:a4:54:e1:c7:94:6d:77:70:7d:f3:d1: 0f:02:a8:83:18:31:cf:02:47:61:38:ab:40:c0:89: aa:cf:05:c6:3d:35:ee:29:22:81:5c:8e:b1:42:fb: db:8b:fe:18:46:a3:bb:12:55:bc:f1:0b:6b:31:9a: 4a:8d:e6:78:bd:84:26:57:58:4f:e7:6a:9c:ac:5b: 1d:10:f2:cf:80:9e:54:e2:be:66:1e:b5:e0:e9:ed: 54:d4:58:e2:1d:e2:e3:59:57:31:30:4c:74:a3:c0: 3b:7c:9d:13:f4:e3:8c:6b:0e:db:19:f5:2e:1b:3e: ff:14:5e:6e:70:67:7d:d8:7f:5c:04:4f:30:86:6f: 6d:17:2c:3e:b2:ed:64:2b:74:18:1e:6b:41:28:06: a4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:41:BB:BF:C0:F9:C4:BA:6B:45:47:25:0A:66:9C:DC:83:66:8D:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26a28423-f8af-3894-8a24-baa35c651a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.138.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:04:40:ed:2c:ee:2c:73:06:79:66:6f:f0:9b:ee:b8:fc:47: 37:2e:9f:24:e9:34:ca:b1:db:32:54:af:87:6a:82:ed:37:8a: 6b:93:26:0f:99:0f:28:d9:71:8c:e6:4c:17:33:d9:40:36:59: b9:aa:29:e0:77:da:34:b1:b7:da:45:33:1e:81:eb:3c:dd:93: 9d:14:81:0c:fe:63:47:93:00:cc:e1:63:89:e6:0e:90:dd:7c: 7d:85:c0:df:a8:76:68:51:16:5b:d7:17:8c:f4:73:1c:6f:f3: 67:e5:7f:98:91:6f:f6:f1:ca:dd:97:57:69:fe:3e:c7:78:f9: 19:7b:51:9a:8c:70:1b:e9:ba:ba:48:54:cc:ab:31:d6:1e:ec: c2:e6:b9:80:c7:e9:e6:65:ae:89:72:3f:fa:57:04:47:c1:72: bd:f5:4d:8f:83:9e:18:bd:1d:c8:85:cd:43:77:fa:24:b3:23: 89:67:e6:53:b7:c0:df:2c:16:c7:27:47:ea:7d:25:b3:f3:ee: e6:4c:e1:ed:b2:92:5e:3e:95:d8:36:1d:a6:42:e9:47:4d:b3: 41:a6:ac:8a:8a:66:b9:b8:23:f7:53:ad:ea:8c:6f:02:00:08: 79:46:94:3c:9e:e1:c9:10:d6:3a:bc:de:cb:65:d9:42:e3:60: 89:73:e1:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNPrTNceI9fMYiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NDk2YWQ1ZTYtYTE1YS00M2RlLWJhNDMtZWJiYWRmM2JlODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfnSJ7loKXLFl2sb1YYhbhbTJSA6NPDzIygL //BRWnwBDdyQvrI/nHOEPRqND3/mOTsAez3o7S+rFs3bzEo7yAXQQ3frcOeOh7m8 wDnv1W28yJjrReeayW3JC9EMLIfxUZdgk0pq3Fs8guqmpFThx5Rtd3B989EPAqiD GDHPAkdhOKtAwImqzwXGPTXuKSKBXI6xQvvbi/4YRqO7ElW88QtrMZpKjeZ4vYQm V1hP52qcrFsdEPLPgJ5U4r5mHrXg6e1U1FjiHeLjWVcxMEx0o8A7fJ0T9OOMaw7b GfUuGz7/FF5ucGd92H9cBE8whm9tFyw+su1kK3QYHmtBKAakTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVBu7/A+cS6a0VHJQpmnNyDZo3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjZhMjg0MjMtZjhhZi0z ODk0LThhMjQtYmFhMzVjNjUxYThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4qoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgEQO0s7ixzBnlmb/Cb7rj8RzcunyTpNMqx2zJUr4dqgu03imuTJg+Z DyjZcYzmTBcz2UA2WbmqKeB32jSxt9pFMx6B6zzdk50UgQz+Y0eTAMzhY4nmDpDd fH2FwN+odmhRFlvXF4z0cxxv82flf5iRb/bxyt2XV2n+Psd4+Rl7UZqMcBvpurpI VMyrMdYe7MLmuYDH6eZlrolyP/pXBEfBcr31TY+Dnhi9HciFzUN3+iSzI4ln5lO3 wN8sFscnR+p9JbPz7uZM4e2ykl4+ldg2HaZC6UdNs0GmrIqKZrm4I/dTreqMbwIA CHlGlDye4ckQ1jq83stl2ULjYIlz4e8= -----END CERTIFICATE-----Generated at Wed Nov 5 02:01:42 2025 by rpki-client