$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec852182-1392-3f2f-be7a-1888f10b4017.roa File: ec852182-1392-3f2f-be7a-1888f10b4017.roa (raw, json) Hash identifier: T8oaZjK3L4fuqjjMAfQpxETL3Gff7dNLYS4Exk/hULI= Subject key identifier: 88:2B:FB:DA:93:5B:F2:1D:A2:57:91:67:AA:9F:D2:C2:65:8D:E4:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D72E0F6CE7891EDB81880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec852182-1392-3f2f-be7a-1888f10b4017.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 63.138.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:72:e0:f6:ce:78:91:ed:b8:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=1924e994-9328-482f-b29f-0ef85ec911f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:91:2e:83:c6:21:3d:61:ed:f0:0e:86:5b:7b: 59:32:a1:f1:1e:01:61:e9:41:a0:c6:cf:e2:ca:80: 7d:52:e5:4e:a3:9e:12:55:c7:7b:49:1c:a9:27:b4: 17:17:98:c2:17:62:bf:15:69:c5:0f:75:8d:d5:0f: 93:5b:b3:d9:85:a3:7b:39:9d:c6:14:58:fa:31:3d: f1:74:a5:ec:68:2f:83:19:7f:90:c8:89:d9:cd:b4: 44:b4:1c:ad:4e:29:0a:b7:de:03:e5:90:f0:a4:ff: b8:ff:37:af:c1:8f:07:57:74:16:05:9c:4f:3d:4e: 53:3e:6c:de:ba:c8:aa:af:84:a7:ed:33:06:36:c0: d1:d8:7c:04:c1:ba:1b:c9:99:07:aa:aa:5b:f1:af: 24:d6:41:5e:63:15:56:d5:f4:a9:fe:fc:11:a6:d5: 8d:29:cf:95:fa:29:96:d5:6c:64:06:32:29:3d:84: 2e:bf:47:9f:3e:8f:a8:64:69:e3:d3:62:5f:7a:55: 57:68:50:ff:cc:bd:7f:d4:78:84:85:19:01:bb:20: c7:a2:4c:ca:a6:f1:98:e9:42:83:c8:f4:26:6e:88: 2b:29:d4:dd:33:85:83:48:54:66:82:0c:0e:cf:7c: 1b:45:11:d7:79:b8:aa:2b:7d:e5:0e:1f:a6:e7:35: ea:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2B:FB:DA:93:5B:F2:1D:A2:57:91:67:AA:9F:D2:C2:65:8D:E4:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec852182-1392-3f2f-be7a-1888f10b4017.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.138.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:4e:e1:eb:a9:cc:8b:57:2d:45:3c:fc:44:04:3d:cf:5a:96: ba:f8:f8:cb:a0:97:33:fa:28:e2:d7:e9:c7:e3:e8:76:7f:02: 33:22:aa:ee:36:94:98:32:60:ff:5d:0e:10:26:10:2a:3e:8c: 65:97:db:70:44:fe:45:5e:e2:0b:91:8d:82:24:a4:d4:c4:14: a8:0a:ff:dd:bf:18:9b:fc:4a:f0:33:82:1a:8d:e3:4e:bd:ea: c3:b7:c4:c9:7f:57:6f:7d:15:eb:c9:a6:b2:d5:ab:71:9b:6e: 19:29:57:00:93:e1:25:cd:3b:ea:93:65:b9:f0:32:73:11:43: c0:04:5f:fd:a6:99:9b:b5:3b:d2:53:02:d0:94:b1:74:36:b5: 95:73:c2:7d:aa:a7:7e:13:c3:b1:75:5b:a4:d3:08:34:38:ba: 67:df:83:fb:bb:64:47:20:88:7a:69:ff:d0:08:22:3d:64:2f: 2f:a7:38:b8:85:f1:d3:ee:c1:91:2d:cd:ad:4a:4d:07:b7:b8: c2:e5:e6:a3:f0:b2:0b:dd:6a:e7:ba:5c:7f:c5:b7:8a:09:a6: a7:5c:1f:46:1e:58:f3:85:49:1a:c7:76:1d:80:24:54:72:ff: f2:ad:81:98:8e:4c:dc:de:03:a4:4a:e8:6a:bc:60:70:cc:c0: 90:7d:8d:5a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9UnXLg9s54ke24GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MTkyNGU5OTQtOTMyOC00ODJmLWIyOWYtMGVmODVlYzkxMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5Eug8YhPWHt8A6GW3tZMqHxHgFh6UGgxs/i yoB9UuVOo54SVcd7SRypJ7QXF5jCF2K/FWnFD3WN1Q+TW7PZhaN7OZ3GFFj6MT3x dKXsaC+DGX+QyInZzbREtBytTikKt94D5ZDwpP+4/zevwY8HV3QWBZxPPU5TPmze usiqr4Sn7TMGNsDR2HwEwbobyZkHqqpb8a8k1kFeYxVW1fSp/vwRptWNKc+V+imW 1WxkBjIpPYQuv0efPo+oZGnj02JfelVXaFD/zL1/1HiEhRkBuyDHokzKpvGY6UKD yPQmbogrKdTdM4WDSFRmggwOz3wbRRHXebiqK33lDh+m5zXquwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIgr+9qTW/IdoleRZ6qf0sJljeS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWM4NTIxODItMTM5Mi0z ZjJmLWJlN2EtMTg4OGYxMGI0MDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBP4owVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADE7h66nMi1ctRTz8RAQ9z1qWuvj4y6CXM/oo4tfpx+Podn8CMyKq7jaU mDJg/10OECYQKj6MZZfbcET+RV7iC5GNgiSk1MQUqAr/3b8Ym/xK8DOCGo3jTr3q w7fEyX9Xb30V68mmstWrcZtuGSlXAJPhJc076pNlufAycxFDwARf/aaZm7U70lMC 0JSxdDa1lXPCfaqnfhPDsXVbpNMINDi6Z9+D+7tkRyCIemn/0AgiPWQvL6c4uIXx 0+7BkS3NrUpNB7e4wuXmo/CyC91q57pcf8W3igmmp1wfRh5Y84VJGsd2HYAkVHL/ 8q2BmI5M3N4DpEroarxgcMzAkH2NWg== -----END CERTIFICATE-----Generated at Tue Oct 13 09:12:55 2026 by rpki-client