$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85384b2-fc8f-3f52-8f12-9ccad266f344.roa File: d85384b2-fc8f-3f52-8f12-9ccad266f344.roa (raw, json) Hash identifier: I5qJ+QQ8s2K41cdPJnkz4b0K3XEk0VWK4OTh/cdRd44= Subject key identifier: E7:AE:E3:FA:D5:88:69:A8:91:A4:6E:37:CD:FB:62:80:79:1C:B5:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DE15079F5D2DDB24FD811D240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85384b2-fc8f-3f52-8f12-9ccad266f344.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 7029 IP address blocks: 198.14.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:79:f5:d2:dd:b2:4f:d8:11:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=d7b17cf1-27ff-4922-96f0-cd4be51a0342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:df:b1:c2:3b:42:32:1b:31:be:39:2f:32: 4b:22:e0:81:47:b3:56:2a:70:6b:5a:4c:a5:1b:3d: 46:0d:10:ad:f7:4d:a9:1a:b9:f4:ce:9f:07:c3:ea: 88:44:60:51:e5:8c:66:5c:36:cc:2c:1c:c5:19:9b: 57:94:11:8c:b9:19:63:3a:00:d3:c6:7f:7a:70:79: 30:a9:92:42:f9:a7:1e:d0:20:e6:fd:7e:61:f8:24: 71:9c:96:a5:c8:31:ad:e5:64:28:b2:40:e2:1e:8e: b4:e3:67:f9:de:4e:f3:5b:1e:7b:d4:95:76:36:c5: f8:c1:f6:69:69:52:48:aa:42:c9:54:f0:7f:27:bf: d8:f5:1b:fc:db:d7:1f:f6:0e:3a:76:be:26:cd:ce: df:ed:7f:c7:40:32:ea:2b:80:ef:27:0e:4a:3b:b2: f2:b0:d0:87:92:ad:0f:59:47:b4:47:7a:7b:58:69: 9d:05:de:53:22:cf:44:4b:2a:ad:a4:48:6e:48:35: 78:1a:a4:5d:bd:a8:cb:96:20:46:82:37:f3:2b:14: 28:e1:58:49:e1:c4:bd:47:81:c7:93:fe:bc:84:81: eb:ec:14:44:ea:91:b5:5a:1d:fe:bb:71:e1:61:25: bb:59:63:6b:71:16:df:c9:6d:fb:66:dc:f2:21:62: 38:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AE:E3:FA:D5:88:69:A8:91:A4:6E:37:CD:FB:62:80:79:1C:B5:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85384b2-fc8f-3f52-8f12-9ccad266f344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.14.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:bc:94:9c:5a:73:ee:08:dc:5c:03:92:61:b2:cf:07:30:17: 42:b9:3a:97:92:80:63:72:a7:5d:fd:a2:cb:08:9c:93:e2:e6: d4:2a:d1:d5:00:3d:fe:13:ec:1e:ae:37:1c:b1:cb:6e:8c:36: 6b:d4:f0:3c:00:7a:83:52:f3:0b:69:34:d6:ef:fb:74:97:4f: b8:95:27:c0:a2:82:f0:40:67:07:a1:33:66:77:72:78:f9:fc: 1a:07:cd:a4:a2:04:8d:35:77:a7:88:04:d4:6d:f5:cd:1f:92: 44:fd:97:b2:f3:b6:49:67:70:11:4e:3c:b9:09:40:b9:19:43: b8:b3:a0:e6:4c:ff:33:4d:8c:2f:12:02:53:87:91:f3:94:33: 87:9a:84:11:a3:db:1d:f6:11:68:02:b8:b0:af:2f:2e:15:e6: f9:ef:e4:bd:c3:1b:af:29:c2:8d:74:5e:05:52:4f:08:57:01: fa:97:00:c9:09:ae:71:a9:95:2e:d0:65:d1:a7:24:17:17:22: 93:13:7b:18:bb:4f:fa:84:15:dc:92:da:0a:ce:85:e6:f0:7f: fe:53:f3:92:80:e0:30:57:9d:a7:09:62:37:80:2b:4a:34:b7: d0:57:6c:c3:81:b1:ef:74:55:54:df:77:42:77:55:b1:ec:2c: 4c:bc:e6:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUHn10t2yT9gR0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZDdiMTdjZjEtMjdmZi00OTIyLTk2ZjAtY2Q0YmU1MWEwMzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk17fscI7QjIbMb45LzJLIuCBR7NWKnBrWkyl Gz1GDRCt902pGrn0zp8Hw+qIRGBR5YxmXDbMLBzFGZtXlBGMuRljOgDTxn96cHkw qZJC+ace0CDm/X5h+CRxnJalyDGt5WQoskDiHo6042f53k7zWx571JV2NsX4wfZp aVJIqkLJVPB/J7/Y9Rv829cf9g46dr4mzc7f7X/HQDLqK4DvJw5KO7LysNCHkq0P WUe0R3p7WGmdBd5TIs9ESyqtpEhuSDV4GqRdvajLliBGgjfzKxQo4VhJ4cS9R4HH k/68hIHr7BRE6pG1Wh3+u3HhYSW7WWNrcRbfyW37ZtzyIWI4WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeu4/rViGmokaRuN837YoB5HLVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDg1Mzg0YjItZmM4Zi0z ZjUyLThmMTItOWNjYWQyNjZmMzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExg7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA28lJxac+4I3FwDkmGyzwcwF0K5OpeSgGNyp139ossInJPi5tQq0dUA Pf4T7B6uNxyxy26MNmvU8DwAeoNS8wtpNNbv+3SXT7iVJ8CigvBAZwehM2Z3cnj5 /BoHzaSiBI01d6eIBNRt9c0fkkT9l7LztklncBFOPLkJQLkZQ7izoOZM/zNNjC8S AlOHkfOUM4eahBGj2x32EWgCuLCvLy4V5vnv5L3DG68pwo10XgVSTwhXAfqXAMkJ rnGplS7QZdGnJBcXIpMTexi7T/qEFdyS2grOhebwf/5T85KA4DBXnacJYjeAK0o0 t9BXbMOBse90VVTfd0J3VbHsLEy85pI= -----END CERTIFICATE-----Generated at Thu May 28 17:52:53 2026 by rpki-client