$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/258abf80-6ac4-39f3-8bfc-5a7ef7e3d54b.roa File: 258abf80-6ac4-39f3-8bfc-5a7ef7e3d54b.roa (raw, json) Hash identifier: oQyrKW6JboCTRkgBf+fNikO5Q0k+924YB34becq1ri0= Subject key identifier: 4C:39:41:BE:EB:E2:1F:CA:40:E3:3B:91:E1:E8:61:32:5D:6A:23:9A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED4325621ECFC586DD3F5BC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/258abf80-6ac4-39f3-8bfc-5a7ef7e3d54b.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 63.255.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:56:21:ec:fc:58:6d:d3:f5:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=f27ed7ac-5287-4724-84ed-75664d960a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0c:10:a6:6e:99:54:c8:da:df:a1:38:b9:c6: b6:5d:33:c8:a4:4a:68:77:da:0b:03:f5:34:a6:22: d3:5b:f0:e3:85:b1:7f:07:3f:d0:7f:de:39:8b:3a: d6:cd:15:84:c6:7d:d2:39:62:4f:6f:60:2d:ed:dc: e6:48:e2:7d:6d:46:2b:3b:24:3a:28:ed:c9:8f:ce: b4:8e:43:94:dc:14:cc:62:7d:68:ca:53:13:2d:8d: 4e:8a:9e:bf:c1:d1:4d:8e:f6:13:15:a6:5c:52:2d: fe:f1:a6:62:41:e8:55:78:c5:3a:11:da:75:ae:d6: 69:24:7a:e3:84:5d:45:40:8e:92:8b:1b:aa:53:52: 05:ab:59:6f:30:6d:38:d0:ad:64:eb:3a:69:63:32: 8a:61:9b:1f:8d:a3:cf:57:8f:3d:92:49:36:33:e6: 14:c3:6f:39:10:13:fe:29:3b:29:aa:ff:d2:c5:98: 96:b5:b1:9a:16:c9:a0:ad:f4:27:db:e7:ca:f1:f3: c7:aa:b7:f9:0a:9d:04:5c:88:5c:92:af:2b:05:0d: dc:dc:32:7e:ac:0d:21:0e:a9:5c:12:31:b0:41:97: 20:fc:cc:44:60:a5:2f:82:ee:ab:6f:64:1a:41:9b: ef:69:58:ae:25:ab:13:d8:67:38:ff:51:67:22:aa: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:39:41:BE:EB:E2:1F:CA:40:E3:3B:91:E1:E8:61:32:5D:6A:23:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/258abf80-6ac4-39f3-8bfc-5a7ef7e3d54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.255.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:54:99:5f:8c:b5:0a:79:36:3c:5f:f6:a1:1e:e0:9b:25:6c: 09:3f:84:eb:4d:19:f5:a4:5b:e5:32:c2:3a:d7:b3:44:9e:24: d2:3c:8f:d1:ee:01:3c:bb:8b:7b:c9:9d:a7:e3:b2:1c:15:ec: 24:b9:80:6e:4d:74:eb:65:0e:39:11:e1:a6:7b:3a:7b:b8:08: 0e:9d:e8:39:cb:a1:36:45:40:71:cf:21:6e:25:64:99:b9:2c: e8:6b:4c:cf:5b:fd:96:9f:37:c7:97:e1:89:16:49:5b:5e:d5: 77:b8:dc:19:32:7a:6c:e9:cb:38:4b:53:36:f6:c4:aa:84:0c: 97:fc:f0:21:da:69:66:8e:03:ff:29:9d:f5:bd:a3:40:44:c3: ae:af:9a:62:d9:99:d5:b8:1e:45:e6:8d:9d:48:48:12:ac:b7: 9b:e4:4d:4a:ab:97:42:6d:42:72:f8:d2:7a:07:90:62:8e:97: ea:7f:84:b7:c3:b7:b8:d5:76:27:f3:8e:25:7d:93:06:ba:2a: fa:f4:39:7f:0d:29:57:65:43:df:d3:c1:22:92:89:68:69:3f: 3a:21:94:17:95:ff:b8:08:d7:70:9b:3f:67:5b:71:3b:26:77: 48:4a:89:1c:0b:3b:79:17:9a:b2:80:5f:e9:af:42:00:68:57: 0d:c8:81:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlYh7PxYbdP1vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjI3ZWQ3YWMtNTI4Ny00NzI0LTg0ZWQtNzU2NjRkOTYwYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQwQpm6ZVMja36E4uca2XTPIpEpod9oLA/U0 piLTW/DjhbF/Bz/Qf945izrWzRWExn3SOWJPb2At7dzmSOJ9bUYrOyQ6KO3Jj860 jkOU3BTMYn1oylMTLY1Oip6/wdFNjvYTFaZcUi3+8aZiQehVeMU6Edp1rtZpJHrj hF1FQI6SixuqU1IFq1lvMG040K1k6zppYzKKYZsfjaPPV489kkk2M+YUw285EBP+ KTspqv/SxZiWtbGaFsmgrfQn2+fK8fPHqrf5Cp0EXIhckq8rBQ3c3DJ+rA0hDqlc EjGwQZcg/MxEYKUvgu6rb2QaQZvvaViuJasT2Gc4/1FnIqpnAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEw5Qb7r4h/KQOM7keHoYTJdaiOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjU4YWJmODAtNmFjNC0z OWYzLThiZmMtNWE3ZWY3ZTNkNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP//1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJUmV+MtQp5Njxf9qEe4JslbAk/hOtNGfWkW+UywjrXs0SeJNI8j9Hu ATy7i3vJnafjshwV7CS5gG5NdOtlDjkR4aZ7Onu4CA6d6DnLoTZFQHHPIW4lZJm5 LOhrTM9b/ZafN8eX4YkWSVte1Xe43BkyemzpyzhLUzb2xKqEDJf88CHaaWaOA/8p nfW9o0BEw66vmmLZmdW4HkXmjZ1ISBKst5vkTUqrl0JtQnL40noHkGKOl+p/hLfD t7jVdifzjiV9kwa6Kvr0OX8NKVdlQ9/TwSKSiWhpPzohlBeV/7gI13CbP2dbcTsm d0hKiRwLO3kXmrKAX+mvQgBoVw3IgZQ= -----END CERTIFICATE-----Generated at Thu Aug 27 09:49:10 2026 by rpki-client