$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87b1a037-ef77-34de-9b75-f33eaabea7c4.roa File: 87b1a037-ef77-34de-9b75-f33eaabea7c4.roa (raw, json) Hash identifier: DU6J+r4Uh3P+J0cOmq+UyBhDomp7hve3KzmmnSeVLTg= Subject key identifier: FE:22:26:78:89:52:9C:7D:1D:AB:3B:A6:22:11:CB:58:10:DF:B3:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF529D26D3B8E7FB732C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87b1a037-ef77-34de-9b75-f33eaabea7c4.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 63.138.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f5:29:d2:6d:3b:8e:7f:b7:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=484c7d39-ee38-4250-964a-f295fe2bfd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:17:14:12:46:2a:0e:e8:9e:90:c4:8a:00: 31:ef:13:86:3c:ed:61:57:79:75:93:9b:b0:ec:0f: 6d:ba:29:f1:e4:25:21:87:46:00:21:d9:56:d7:9c: 83:26:29:41:3d:09:fb:3a:cd:1a:0e:98:3c:e0:38: 7b:31:a6:d0:c0:74:12:d0:e5:3a:b2:c0:7c:a7:b7: 6f:32:c3:e9:1a:ec:d9:e3:ec:fc:27:2c:c0:f9:10: 91:14:35:af:fd:78:5e:d4:5a:3d:55:b3:39:1f:94: 27:7e:ce:7b:af:53:da:cb:3a:f9:8b:c3:90:08:c4: 90:47:c5:32:bf:f3:29:e9:44:85:22:0e:aa:2a:c3: 00:ee:b8:3f:10:c7:21:eb:21:37:db:81:19:40:f0: 13:d3:52:11:a9:fd:a2:08:5c:9f:b0:0c:bf:be:5a: db:b6:93:f3:a9:db:da:79:47:a4:10:c3:f9:fe:76: 25:a8:16:88:7e:f8:61:35:e7:fa:a0:0f:78:ae:da: 30:35:87:4b:cf:4a:db:15:05:b5:ee:0b:36:67:0e: a6:6f:c8:ce:75:13:a1:61:11:fe:8d:e5:ab:b1:3c: e3:5a:89:08:7a:66:07:4c:e9:b2:37:90:f4:f1:bb: 5f:f2:b9:32:f8:15:99:35:7b:ae:f0:54:c6:aa:1d: a5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:22:26:78:89:52:9C:7D:1D:AB:3B:A6:22:11:CB:58:10:DF:B3:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87b1a037-ef77-34de-9b75-f33eaabea7c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.138.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e8:29:85:88:57:85:fd:b5:7f:45:b9:06:45:ce:db:e2:00: 3b:a8:59:fd:6e:cf:d7:6c:d2:59:6a:54:08:b1:6d:7a:a7:dd: 8c:b9:db:73:12:41:da:89:8d:14:0b:b1:4a:3e:65:44:eb:a4: a0:65:ff:ac:49:d5:ab:17:cf:ed:66:69:a7:53:1c:de:0d:6e: 71:98:75:6e:7f:0a:08:4f:7e:46:20:b5:c7:a3:9d:df:61:03: 6e:8a:34:00:f0:78:89:88:e8:25:53:02:f3:8d:a4:a9:07:5a: fc:46:19:41:62:dd:bb:50:36:01:bf:60:09:fd:31:70:62:44: 44:96:40:71:81:ed:fa:18:80:ea:3e:6a:9e:64:31:68:a5:ca: 68:e6:58:17:dc:1b:6d:3d:56:ad:38:cc:ac:7f:96:01:1c:7e: 20:99:85:b8:7c:22:1b:55:1e:ec:1e:60:47:2e:cd:74:ef:4e: 99:0d:8b:4c:11:06:e0:15:01:cd:59:bf:dd:35:41:0f:80:17: 08:50:31:f3:09:3a:63:5a:56:31:44:9c:df:46:d8:30:5f:40: 6b:7e:f9:fd:ad:53:66:eb:37:ec:98:af:ea:14:43:f3:4e:95: 2c:0e:df:8b:9e:f0:30:8a:c9:4a:ac:f6:c6:63:7b:dc:1c:49: 51:50:76:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvUp0m07jn+3MsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NDg0YzdkMzktZWUzOC00MjUwLTk2NGEtZjI5NWZlMmJmZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHwXFBJGKg7onpDEigAx7xOGPO1hV3l1k5uw 7A9tuinx5CUhh0YAIdlW15yDJilBPQn7Os0aDpg84Dh7MabQwHQS0OU6ssB8p7dv MsPpGuzZ4+z8JyzA+RCRFDWv/Xhe1Fo9VbM5H5Qnfs57r1Payzr5i8OQCMSQR8Uy v/Mp6USFIg6qKsMA7rg/EMch6yE324EZQPAT01IRqf2iCFyfsAy/vlrbtpPzqdva eUekEMP5/nYlqBaIfvhhNef6oA94rtowNYdLz0rbFQW17gs2Zw6mb8jOdROhYRH+ jeWrsTzjWokIemYHTOmyN5D08btf8rky+BWZNXuu8FTGqh2lIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4iJniJUpx9Has7piIRy1gQ37M/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdiMWEwMzctZWY3Ny0z NGRlLTliNzUtZjMzZWFhYmVhN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4ogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzoKYWIV4X9tX9FuQZFztviADuoWf1uz9ds0llqVAixbXqn3Yy523MS QdqJjRQLsUo+ZUTrpKBl/6xJ1asXz+1maadTHN4NbnGYdW5/CghPfkYgtcejnd9h A26KNADweImI6CVTAvONpKkHWvxGGUFi3btQNgG/YAn9MXBiRESWQHGB7foYgOo+ ap5kMWilymjmWBfcG209Vq04zKx/lgEcfiCZhbh8IhtVHuweYEcuzXTvTpkNi0wR BuAVAc1Zv901QQ+AFwhQMfMJOmNaVjFEnN9G2DBfQGt++f2tU2brN+yYr+oUQ/NO lSwO34ue8DCKyUqs9sZje9wcSVFQdns= -----END CERTIFICATE-----Generated at Sat Jun 13 20:27:40 2026 by rpki-client