$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21746d3b-b7f7-30d0-bb76-7e1a65618b4d.roa File: 21746d3b-b7f7-30d0-bb76-7e1a65618b4d.roa (raw, json) Hash identifier: hyML0RKESk9L/FgCIc34Jv7des7BZcDaCICZ7mQ5JDs= Subject key identifier: 3B:44:DD:14:D1:E4:B3:8A:91:91:C8:89:4D:10:22:0B:FC:22:F8:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED59727022621232E17514680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21746d3b-b7f7-30d0-bb76-7e1a65618b4d.roa Signing time: Fri 14 Aug 2026 13:00:12 +0000 ROA not before: Fri 14 Aug 2026 13:00:12 +0000 ROA not after: Thu 12 Nov 2026 14:00:12 +0000 asID: 7029 IP address blocks: 198.14.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d5:97:27:02:26:21:23:2e:17:51:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 13:00:12 2026 GMT Not After : Nov 12 14:00:12 2026 GMT Subject: CN=cf3f21b5-2f1d-47df-a860-ba34a5870d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:32:51:0b:bf:38:be:a4:90:6d:b7:19:97:1d: 11:ca:d3:f2:54:9f:3f:a3:37:59:1b:e3:82:f8:de: 20:76:66:00:82:85:27:80:0c:87:15:52:c1:12:ed: 67:2e:28:9a:1c:aa:48:10:5f:91:11:b2:2d:17:f2: 46:a9:a4:2d:fb:2b:4b:8d:76:89:73:13:57:bd:2a: 1c:97:f6:d3:e8:db:a3:78:3a:ac:58:52:97:bd:4b: 8e:1e:b8:cf:a1:99:8a:48:0c:4d:7d:f2:fc:5d:bc: 4c:93:d8:57:1b:73:05:60:25:b4:21:7a:89:66:2d: 7c:d1:18:3e:86:5a:6e:03:97:98:ee:b4:51:50:59: 93:6e:0a:46:6d:2a:45:b2:7a:18:f4:c1:91:d4:f6: 0c:95:51:69:c1:26:42:86:89:0e:b7:de:6f:13:d6: 5b:15:78:6a:7e:57:24:8c:7b:20:43:e3:16:c5:1a: 41:43:33:13:d7:4f:18:e5:0c:d8:45:20:18:31:c1: b2:1a:0d:d0:64:31:9d:f1:8e:77:63:ef:85:8c:f4: cf:52:cd:fc:a1:e2:91:ac:1a:07:15:5f:9a:e0:d2: 6f:f9:de:ee:59:54:a9:eb:4a:eb:3f:4b:60:fd:ba: 27:6f:87:fd:85:47:a1:cd:ed:e1:88:da:c8:61:48: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:44:DD:14:D1:E4:B3:8A:91:91:C8:89:4D:10:22:0B:FC:22:F8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21746d3b-b7f7-30d0-bb76-7e1a65618b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.14.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c1:90:40:e3:da:f3:4b:fb:5f:77:1e:4d:67:9c:59:94:3b: f9:5b:4d:8c:db:23:2f:db:b7:8a:9d:ba:1d:af:42:0d:1c:3d: be:6c:db:d9:0d:c2:87:42:fc:c7:74:60:11:c4:dd:99:6e:db: 54:67:d5:96:2a:ca:b8:55:c4:20:e7:b3:a5:05:c1:f9:bd:55: bf:b2:9f:ac:13:ab:32:0a:c6:29:1d:20:10:e9:44:53:65:02: 28:b8:08:29:fa:8c:59:7a:f4:fe:59:a5:23:18:47:e0:8f:d5: 96:2b:3f:32:87:92:5e:8f:98:bf:57:4b:aa:1b:f6:b0:35:25: 9e:04:8d:6d:d2:09:9c:7c:70:1a:25:5c:c8:9a:87:02:2a:c9: 86:34:46:30:f8:87:e3:2b:10:1d:ce:9b:cb:6f:a2:a8:9b:a4: fc:aa:bf:44:8f:f1:53:08:e5:30:5f:f0:f2:40:e1:34:1a:c7: 30:41:c5:b7:fc:d7:7d:d9:20:65:b0:2b:08:8f:3a:cc:4d:2f: 27:20:ea:54:c4:2e:d2:85:a5:94:8f:55:24:a3:8d:b2:00:a0: 7c:60:76:72:41:16:3c:ed:1f:e6:fa:70:73:87:e4:c2:1f:bc: cd:ce:22:c9:8f:20:a3:3a:61:72:3c:69:53:76:9d:c4:88:2a: b9:ee:e7:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7VlycCJiEjLhdRRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDEzMDAxMloXDTI2MTExMjE0MDAxMlowLzEtMCsGA1UEAxMk Y2YzZjIxYjUtMmYxZC00N2RmLWE4NjAtYmEzNGE1ODcwZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjJRC784vqSQbbcZlx0RytPyVJ8/ozdZG+OC +N4gdmYAgoUngAyHFVLBEu1nLiiaHKpIEF+REbItF/JGqaQt+ytLjXaJcxNXvSoc l/bT6NujeDqsWFKXvUuOHrjPoZmKSAxNffL8XbxMk9hXG3MFYCW0IXqJZi180Rg+ hlpuA5eY7rRRUFmTbgpGbSpFsnoY9MGR1PYMlVFpwSZChokOt95vE9ZbFXhqflck jHsgQ+MWxRpBQzMT108Y5QzYRSAYMcGyGg3QZDGd8Y53Y++FjPTPUs38oeKRrBoH FV+a4NJv+d7uWVSp60rrP0tg/bonb4f9hUehze3hiNrIYUg2MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtE3RTR5LOKkZHIiU0QIgv8IvjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE3NDZkM2ItYjdmNy0z MGQwLWJiNzYtN2UxYTY1NjE4YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjBkEDj2vNL+193Hk1nnFmUO/lbTYzbIy/bt4qduh2vQg0cPb5s29kN wodC/Md0YBHE3Zlu21Rn1ZYqyrhVxCDns6UFwfm9Vb+yn6wTqzIKxikdIBDpRFNl Aii4CCn6jFl69P5ZpSMYR+CP1ZYrPzKHkl6PmL9XS6ob9rA1JZ4EjW3SCZx8cBol XMiahwIqyYY0RjD4h+MrEB3Om8tvoqibpPyqv0SP8VMI5TBf8PJA4TQaxzBBxbf8 133ZIGWwKwiPOsxNLycg6lTELtKFpZSPVSSjjbIAoHxgdnJBFjztH+b6cHOH5MIf vM3OIsmPIKM6YXI8aVN2ncSIKrnu59s= -----END CERTIFICATE-----Generated at Thu Aug 27 14:17:24 2026 by rpki-client