$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5947db6-5446-34ea-9e1a-7ece02026e01.roa File: b5947db6-5446-34ea-9e1a-7ece02026e01.roa (raw, json) Hash identifier: p/u7pi4FJc+PSfzsoWgX28emj1adXCfdobFPVDNg5qg= Subject key identifier: 83:2B:7C:ED:9D:9E:F9:D6:3B:46:B5:35:D1:96:34:B2:E3:40:C3:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F78E836C93B97EA3A9D8F6900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5947db6-5446-34ea-9e1a-7ece02026e01.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 198.14.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:36:c9:3b:97:ea:3a:9d:8f:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=201c9556-9b06-4471-b2ec-a7d6f50b3718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:03:1c:c4:cb:81:5f:3a:9d:d1:00:f8:c4: 2b:50:14:e0:6a:b6:9a:2f:57:ba:6f:3a:7f:43:43: 24:49:aa:07:d5:81:81:30:a1:73:97:95:2d:59:46: f4:d6:01:7a:56:ac:e6:1d:a1:a6:3a:00:96:99:44: c9:81:37:4a:69:da:36:a2:bb:38:3b:20:38:8e:3e: e9:75:7b:eb:25:cd:82:21:22:a3:fc:81:42:07:6a: 4f:08:48:32:ed:f3:00:2e:1e:9e:e0:a4:0a:22:6c: f3:f0:b6:5e:4e:4d:e8:fc:db:74:96:e0:1f:77:60: 81:18:80:b4:52:3b:a9:29:92:21:4e:72:41:45:ea: 55:f3:a4:60:45:2f:39:10:51:4a:83:c6:2b:51:0c: ca:55:12:97:0f:2b:ca:71:ff:70:b6:7f:e9:ca:10: d3:23:cd:ba:d7:3a:e6:55:89:18:9b:eb:58:ee:32: 47:3e:65:c1:a6:23:b2:84:1c:19:79:ab:54:c6:1c: 47:32:05:21:31:87:76:56:8b:ec:45:f2:78:71:5f: 0f:5d:f5:ca:a1:6f:47:ca:79:31:36:62:80:c0:6d: 87:fd:db:78:48:71:2b:27:4e:31:fe:3c:2b:7c:1c: b5:da:25:98:95:8c:17:37:f3:b9:21:9f:bd:65:c4: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2B:7C:ED:9D:9E:F9:D6:3B:46:B5:35:D1:96:34:B2:E3:40:C3:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5947db6-5446-34ea-9e1a-7ece02026e01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.14.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:55:97:c2:16:fc:f1:9b:92:f8:22:12:32:11:d7:77:ed:2f: 04:dd:93:ec:08:cc:e6:c3:a5:70:03:91:a6:f9:92:e1:99:e2: 5a:f9:31:fe:7c:7a:a1:53:18:51:87:e9:d4:20:e8:d2:fc:c9: 0c:88:81:87:00:01:23:29:6b:55:bb:c1:b6:1c:03:ff:0d:b5: 38:b2:27:14:6a:84:32:dc:07:7c:23:fc:db:6c:6f:06:20:47: 4f:9d:4a:ff:28:fe:89:79:b7:c2:a8:47:fc:74:d4:47:ec:0d: 6e:2f:19:ed:bb:20:1f:76:f6:ff:b1:7f:75:00:30:b2:87:48: f0:14:b7:f3:f6:91:af:da:96:f8:ad:de:b9:1d:55:bd:06:4b: 02:b1:2a:af:06:6a:64:4a:84:d2:c2:b4:dd:89:50:d1:b5:ee: 4e:28:a3:b5:62:da:34:cc:40:03:d1:61:7c:3e:a7:39:d6:34: d4:88:35:f5:76:8d:dd:61:69:61:11:d7:60:bd:44:bb:30:97: 7b:0a:4e:84:2f:32:13:29:5a:55:dd:12:71:7c:1b:27:d5:9c: 7a:87:56:38:b3:a2:5f:b7:a0:8a:58:8f:f3:92:b3:4d:07:12: 53:51:5b:37:c6:91:fd:63:fc:32:be:38:c6:e5:e8:7a:36:8a: 23:a7:fb:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DbJO5fqOp2PaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk MjAxYzk1NTYtOWIwNi00NDcxLWIyZWMtYTdkNmY1MGIzNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQADHMTLgV86ndEA+MQrUBTgaraaL1e6bzp/ Q0MkSaoH1YGBMKFzl5UtWUb01gF6VqzmHaGmOgCWmUTJgTdKado2ors4OyA4jj7p dXvrJc2CISKj/IFCB2pPCEgy7fMALh6e4KQKImzz8LZeTk3o/Nt0luAfd2CBGIC0 UjupKZIhTnJBRepV86RgRS85EFFKg8YrUQzKVRKXDyvKcf9wtn/pyhDTI8261zrm VYkYm+tY7jJHPmXBpiOyhBwZeatUxhxHMgUhMYd2VovsRfJ4cV8PXfXKoW9Hynkx NmKAwG2H/dt4SHErJ04x/jwrfBy12iWYlYwXN/O5IZ+9ZcQ0rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMrfO2dnvnWO0a1NdGWNLLjQMPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjU5NDdkYjYtNTQ0Ni0z NGVhLTllMWEtN2VjZTAyMDI2ZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg7iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1Vl8IW/PGbkvgiEjIR13ftLwTdk+wIzObDpXADkab5kuGZ4lr5Mf58 eqFTGFGH6dQg6NL8yQyIgYcAASMpa1W7wbYcA/8NtTiyJxRqhDLcB3wj/NtsbwYg R0+dSv8o/ol5t8KoR/x01EfsDW4vGe27IB929v+xf3UAMLKHSPAUt/P2ka/alvit 3rkdVb0GSwKxKq8GamRKhNLCtN2JUNG17k4oo7Vi2jTMQAPRYXw+pznWNNSINfV2 jd1haWER12C9RLswl3sKToQvMhMpWlXdEnF8GyfVnHqHVjizol+3oIpYj/OSs00H ElNRWzfGkf1j/DK+OMbl6Ho2iiOn+wo= -----END CERTIFICATE-----Generated at Tue Oct 13 17:38:55 2026 by rpki-client