$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2068cd47-3a57-3295-861a-6fdc88f4999a.roa File: 2068cd47-3a57-3295-861a-6fdc88f4999a.roa (raw, json) Hash identifier: wXQKW+y/UpH1Pj7gZ0a0+iszAas/VDCuSxp5LSE2N5o= Subject key identifier: 55:FA:66:01:BD:32:8B:5B:39:2C:0F:90:CB:C7:7B:27:AC:9C:08:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E446BFF87C07CDD15C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2068cd47-3a57-3295-861a-6fdc88f4999a.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 74.8.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e4:46:bf:f8:7c:07:cd:d1:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=dc253b7e-fab4-4509-b12f-8d4bd6603b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bc:c4:87:76:88:68:94:ba:8c:9a:0d:3a:7a: 66:86:12:f1:6f:a0:cd:77:dc:0d:8d:58:00:3b:56: fe:3e:90:4b:7d:d8:b4:bf:88:dc:a6:6f:58:84:e1: db:0c:93:fa:7f:e1:5e:f7:ed:85:d2:55:68:63:e0: ce:88:65:d6:c4:99:52:fe:d1:eb:41:c0:13:20:13: 75:33:92:39:63:d8:a9:89:2a:b7:08:69:6f:f9:c9: 38:56:6d:5f:c3:5d:6c:3a:9e:00:21:2b:c7:7a:ea: 48:e7:b8:ce:22:64:d3:67:2c:1d:c3:1b:43:4c:93: 32:ba:22:65:fa:0a:68:06:62:e0:49:41:7d:2e:bc: 04:26:cb:a7:f2:5d:76:e8:95:1f:d2:f2:d9:45:61: f4:c9:ec:83:9b:ed:cd:85:54:36:ff:64:07:b5:50: 6f:d8:df:01:77:a2:78:e2:78:a0:89:5e:03:32:dc: 9c:30:e1:24:cb:07:fa:c2:0c:a5:17:d7:1b:b3:39: 9e:24:32:7f:87:25:68:b3:20:86:0d:c9:54:71:82: 31:f6:ed:58:41:f9:f9:53:4f:b6:29:f0:a5:4a:9b: 46:60:a5:f7:32:c8:45:90:87:1b:cf:a8:64:c7:18: 7b:18:42:84:c4:4c:46:a0:d9:27:96:71:21:86:5c: 8f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FA:66:01:BD:32:8B:5B:39:2C:0F:90:CB:C7:7B:27:AC:9C:08:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2068cd47-3a57-3295-861a-6fdc88f4999a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e4:84:39:1f:54:f0:7d:46:32:ea:f2:06:f6:59:c8:48:f2: 25:6f:0c:87:c0:d1:75:4f:f5:12:10:06:e4:52:8f:00:c4:9e: a0:99:f9:20:13:b1:95:41:70:e7:d3:02:58:36:bc:72:88:dd: 16:93:d7:47:4c:3d:05:e6:55:08:8c:5b:0b:08:bf:49:5c:78: 79:dc:9a:d8:b2:25:6f:f2:9c:47:fd:9d:a8:b8:37:99:2b:fd: 01:67:48:08:08:6a:52:4a:68:a8:de:4d:9e:46:e2:27:ce:d5: 93:6d:42:73:c1:ad:dd:2e:5f:7a:44:6c:fb:11:8e:47:0e:d6: 32:6e:89:89:15:e5:69:54:89:50:64:21:de:66:96:0a:84:7b: a7:80:67:fa:d1:30:4e:8c:e1:b9:8e:70:8c:03:f4:28:fa:b6: 3b:e0:a2:f8:68:2a:57:15:85:25:50:17:18:27:89:9d:2e:18: 54:61:96:f9:13:7f:28:d7:2b:2c:48:28:6e:28:3e:87:1f:f9: 8d:3f:04:f7:8f:09:87:f2:46:f9:32:f6:60:85:7f:0d:b9:2c: 04:2e:66:97:35:e0:46:ae:98:71:87:f9:da:c8:ac:61:c1:4b: db:12:18:91:a6:11:91:1d:e3:91:43:48:25:cf:c4:b5:09:74: b1:4b:08:70 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6yseRGv/h8B83RXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZGMyNTNiN2UtZmFiNC00NTA5LWIxMmYtOGQ0YmQ2NjAzYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLzEh3aIaJS6jJoNOnpmhhLxb6DNd9wNjVgA O1b+PpBLfdi0v4jcpm9YhOHbDJP6f+Fe9+2F0lVoY+DOiGXWxJlS/tHrQcATIBN1 M5I5Y9ipiSq3CGlv+ck4Vm1fw11sOp4AISvHeupI57jOImTTZywdwxtDTJMyuiJl +gpoBmLgSUF9LrwEJsun8l126JUf0vLZRWH0yeyDm+3NhVQ2/2QHtVBv2N8Bd6J4 4nigiV4DMtycMOEkywf6wgylF9cbszmeJDJ/hyVosyCGDclUcYIx9u1YQfn5U0+2 KfClSptGYKX3MshFkIcbz6hkxxh7GEKExExGoNknlnEhhlyPIQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFX6ZgG9MotbOSwPkMvHeyesnAhbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjA2OGNkNDctM2E1Ny0z Mjk1LTg2MWEtNmZkYzg4ZjQ5OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCSggwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANOSEOR9U8H1GMuryBvZZyEjyJW8Mh8DRdU/1EhAG5FKPAMSeoJn5IBOx lUFw59MCWDa8cojdFpPXR0w9BeZVCIxbCwi/SVx4edya2LIlb/KcR/2dqLg3mSv9 AWdICAhqUkpoqN5NnkbiJ87Vk21Cc8Gt3S5fekRs+xGORw7WMm6JiRXlaVSJUGQh 3maWCoR7p4Bn+tEwTozhuY5wjAP0KPq2O+Ci+GgqVxWFJVAXGCeJnS4YVGGW+RN/ KNcrLEgobig+hx/5jT8E948Jh/JG+TL2YIV/DbksBC5mlzXgRq6YcYf52sisYcFL 2xIYkaYRkR3jkUNIJc/EtQl0sUsIcA== -----END CERTIFICATE-----Generated at Thu Aug 27 12:35:05 2026 by rpki-client