$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd7b5f78-3e59-3b46-bd42-e9580534e712.roa File: bd7b5f78-3e59-3b46-bd42-e9580534e712.roa (raw, json) Hash identifier: 2xmYNpXcCQuwPEzmIKlVmfetYtlo0BNeHbXHkh9AM4c= Subject key identifier: 4E:55:E4:D7:C9:CC:61:74:2B:41:DB:A5:63:30:31:B5:BA:D5:8C:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104F0305DB3822FC4E12CFAC Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd7b5f78-3e59-3b46-bd42-e9580534e712.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 53610 IP address blocks: 63.252.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:03:05:db:38:22:fc:4e:12:cf:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=b320a259-9687-4b0d-bccc-3e00a773f4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:c3:1d:bc:34:a5:45:fa:02:9d:e3:08:68: 51:ae:90:ef:b6:3d:ef:9c:50:94:ad:23:9d:f1:3d: da:73:fd:f9:45:81:f1:5e:2c:1d:3b:ac:f5:f4:b8: d0:01:39:21:51:c2:72:5c:31:8d:5c:86:ae:07:10: 71:dc:9a:ad:4f:42:ef:90:78:d6:24:94:54:4f:17: 8a:55:45:f8:4b:c0:e7:b0:20:d6:a0:e9:2d:4b:f5: a8:59:4f:b5:c3:dd:54:10:7f:13:e0:64:68:8e:80: 03:e3:a7:e6:27:76:bd:5b:4e:64:0f:68:0e:a1:4e: b9:57:ac:2e:36:7a:ac:de:a0:7c:e9:85:e7:e9:5f: 6d:93:7b:20:11:cc:97:7a:6e:97:eb:a1:e1:42:47: cf:2f:1d:5a:32:ca:94:3b:5c:3a:c6:a6:37:06:c8: 30:52:05:7f:c6:ad:c6:f3:68:09:8b:49:4e:91:2c: 67:56:6a:dd:db:41:b8:39:31:ad:bd:45:47:83:7e: 76:42:1c:60:e5:a8:0b:a8:63:ac:5c:ce:ab:f2:b1: bb:65:de:54:20:09:a6:5d:ef:9c:ed:d6:9e:ea:82: c5:73:d7:da:78:19:a7:4e:7f:28:c6:44:fc:6e:9d: e9:2b:ab:c6:a0:1e:18:5e:40:9e:d5:68:12:50:ab: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:55:E4:D7:C9:CC:61:74:2B:41:DB:A5:63:30:31:B5:BA:D5:8C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd7b5f78-3e59-3b46-bd42-e9580534e712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.252.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c8:9e:ca:34:25:86:f4:a8:97:0c:6f:aa:6d:23:a5:6f:26: 17:c2:11:8f:4b:1f:a0:42:4a:20:cc:5d:68:5a:db:37:c8:6f: f3:44:18:44:bc:aa:80:f0:5e:71:5e:4c:d6:0e:74:23:26:a9: 75:88:0e:49:89:bf:62:d2:c3:37:9a:11:44:54:15:09:e9:2e: d7:7b:da:8a:da:b7:58:eb:1b:34:65:be:0f:9c:5b:5e:d5:85: 2c:a6:e5:55:d5:03:1c:c4:67:09:0f:0d:a0:8b:b6:b1:b6:1e: d2:32:3c:ea:9b:bd:63:0c:a8:7b:56:3d:6e:8f:a9:69:ce:bb: 50:8c:9d:80:fd:50:62:78:40:cb:1c:33:da:bc:2e:f9:3d:bf: 55:17:18:4a:03:c5:ee:05:0a:aa:df:59:37:f2:03:ce:55:36: cd:38:3e:ff:7c:da:bc:0e:5b:63:18:9c:92:34:c5:b1:ba:50: 13:39:ec:aa:7a:c3:25:8c:47:4c:c7:db:77:91:a9:62:7c:b3: 1e:18:b8:35:51:ee:2e:59:85:f3:61:89:d3:56:b6:d8:9f:01: 93:3b:88:ad:5f:a9:2d:e5:2a:b0:e4:0e:96:c2:6c:30:4d:99: 9f:0f:fe:6a:6a:f1:4f:85:47:67:06:1e:d5:bd:5b:c0:9c:67: 8e:16:88:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwMF2zgi/E4Sz6wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk YjMyMGEyNTktOTY4Ny00YjBkLWJjY2MtM2UwMGE3NzNmNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusrDHbw0pUX6Ap3jCGhRrpDvtj3vnFCUrSOd 8T3ac/35RYHxXiwdO6z19LjQATkhUcJyXDGNXIauBxBx3JqtT0LvkHjWJJRUTxeK VUX4S8DnsCDWoOktS/WoWU+1w91UEH8T4GRojoAD46fmJ3a9W05kD2gOoU65V6wu Nnqs3qB86YXn6V9tk3sgEcyXem6X66HhQkfPLx1aMsqUO1w6xqY3BsgwUgV/xq3G 82gJi0lOkSxnVmrd20G4OTGtvUVHg352Qhxg5agLqGOsXM6r8rG7Zd5UIAmmXe+c 7dae6oLFc9faeBmnTn8oxkT8bp3pK6vGoB4YXkCe1WgSUKvcOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5V5NfJzGF0K0HbpWMwMbW61YwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQ3YjVmNzgtM2U1OS0z YjQ2LWJkNDItZTk1ODA1MzRlNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP/zoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7Inso0JYb0qJcMb6ptI6VvJhfCEY9LH6BCSiDMXWha2zfIb/NEGES8 qoDwXnFeTNYOdCMmqXWIDkmJv2LSwzeaEURUFQnpLtd72orat1jrGzRlvg+cW17V hSym5VXVAxzEZwkPDaCLtrG2HtIyPOqbvWMMqHtWPW6PqWnOu1CMnYD9UGJ4QMsc M9q8Lvk9v1UXGEoDxe4FCqrfWTfyA85VNs04Pv982rwOW2MYnJI0xbG6UBM57Kp6 wyWMR0zH23eRqWJ8sx4YuDVR7i5ZhfNhidNWttifAZM7iK1fqS3lKrDkDpbCbDBN mZ8P/mpq8U+FR2cGHtW9W8CcZ44WiMk= -----END CERTIFICATE-----Generated at Sat Jun 13 14:43:03 2026 by rpki-client