$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e008b59a-09a9-3cd8-a0d2-701ff04092f2.roa File: e008b59a-09a9-3cd8-a0d2-701ff04092f2.roa (raw, json) Hash identifier: fs4Ktz4pQUZQ2Z0ecqNi/68NpjVOwCzTGpLYZnTNQsY= Subject key identifier: 2C:63:5F:40:D6:BD:AD:59:37:6D:D4:B6:23:23:B6:A0:AD:C1:41:9B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49728AB1586AAE42056A5000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e008b59a-09a9-3cd8-a0d2-701ff04092f2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 198.14.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:8a:b1:58:6a:ae:42:05:6a:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e722948b-1af3-42c2-9370-a64a7e49558b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:2c:0c:81:36:5d:1c:58:12:33:21:37:4b: 78:d2:52:5b:96:1c:d5:17:d9:fb:42:6c:53:d8:95: ef:a1:f9:46:95:02:27:0f:49:02:2b:6d:e5:d4:dc: 45:3f:32:e9:2e:67:b6:cb:5f:bb:59:f4:e4:50:ba: a3:b0:91:52:04:76:a1:34:22:ce:7b:32:c4:a4:57: 2f:2f:13:38:2f:46:c5:d3:1c:53:0f:f4:81:ec:46: 5f:cd:58:18:e4:0b:a7:17:3d:f5:6e:81:31:1c:0b: 80:c1:bb:9b:01:7e:7e:46:38:99:88:1a:41:db:e0: 91:fe:28:48:73:66:b7:6c:8d:a1:a2:f7:48:11:5d: ff:4b:35:37:8c:0f:12:7f:d1:0c:7e:1e:b8:16:9d: 9e:52:96:dc:53:29:dd:8f:42:8e:99:89:76:2d:95: 70:63:f8:22:24:5a:c5:fd:34:d0:52:18:b6:7f:f7: 34:43:eb:d3:75:d6:65:46:10:96:77:14:12:46:3c: 4c:c7:fd:d9:1e:d0:67:ba:66:9a:22:38:91:41:0b: ae:80:16:b0:c8:a6:f3:17:7d:a4:94:57:59:6a:99: 53:55:13:82:d6:26:38:b9:d7:fb:e1:0d:a9:7a:94: 03:ca:92:d4:16:59:c5:48:85:ef:38:9a:01:a8:7b: 01:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:63:5F:40:D6:BD:AD:59:37:6D:D4:B6:23:23:B6:A0:AD:C1:41:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e008b59a-09a9-3cd8-a0d2-701ff04092f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.14.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:9a:8d:9a:67:06:a2:60:4a:9b:f8:a6:29:ff:5e:23:d6:37: a2:d7:2c:af:09:63:33:3e:e3:11:37:88:ec:a2:e2:d6:02:72: a6:55:a8:94:12:3c:33:82:e4:fc:f7:86:2b:5f:8e:99:55:c9: 4d:ca:2b:a3:73:a6:4a:c6:b9:0c:c2:1d:a3:6d:05:fe:ac:1f: c2:85:a2:b8:83:53:2f:19:ee:5a:b8:2e:a0:65:58:d3:ad:8c: da:ca:0f:e7:14:4e:18:43:58:72:a6:a6:83:7c:d8:a5:f6:78: ac:7c:40:a5:a2:6d:f2:00:6a:79:14:d0:ec:e2:31:ba:d0:cd: 36:32:0b:f3:1c:df:3b:85:18:b1:ef:90:eb:11:75:c5:05:8c: 0b:88:87:99:b3:b8:97:d4:08:e4:a8:9f:6f:26:88:45:17:9a: 84:ed:3e:5d:94:3c:f1:60:5d:c3:ee:1c:1f:12:3b:3d:1b:8a: fe:9a:bb:0e:e8:6c:55:41:f6:78:ca:99:f1:a2:00:ec:6d:90: c9:dd:51:55:4b:df:17:4a:98:9a:65:4f:b4:56:b4:80:e8:12: a5:7e:c2:1e:ef:c9:46:b0:d7:48:6a:8e:4f:81:5d:60:4c:36: af:da:9e:ad:43:9c:9f:b3:78:a3:23:c1:8d:2c:a0:78:15:f2: a0:5b:ed:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcoqxWGquQgVqUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTcyMjk0OGItMWFmMy00MmMyLTkzNzAtYTY0YTdlNDk1NThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6ksDIE2XRxYEjMhN0t40lJblhzVF9n7QmxT 2JXvoflGlQInD0kCK23l1NxFPzLpLme2y1+7WfTkULqjsJFSBHahNCLOezLEpFcv LxM4L0bF0xxTD/SB7EZfzVgY5AunFz31boExHAuAwbubAX5+RjiZiBpB2+CR/ihI c2a3bI2hovdIEV3/SzU3jA8Sf9EMfh64Fp2eUpbcUyndj0KOmYl2LZVwY/giJFrF /TTQUhi2f/c0Q+vTddZlRhCWdxQSRjxMx/3ZHtBnumaaIjiRQQuugBawyKbzF32k lFdZaplTVROC1iY4udf74Q2pepQDypLUFlnFSIXvOJoBqHsBEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxjX0DWva1ZN23UtiMjtqCtwUGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTAwOGI1OWEtMDlhOS0z Y2Q4LWEwZDItNzAxZmYwNDA5MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg7PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2ajZpnBqJgSpv4pin/XiPWN6LXLK8JYzM+4xE3iOyi4tYCcqZVqJQS PDOC5Pz3hitfjplVyU3KK6NzpkrGuQzCHaNtBf6sH8KForiDUy8Z7lq4LqBlWNOt jNrKD+cUThhDWHKmpoN82KX2eKx8QKWibfIAankU0OziMbrQzTYyC/Mc3zuFGLHv kOsRdcUFjAuIh5mzuJfUCOSon28miEUXmoTtPl2UPPFgXcPuHB8SOz0biv6auw7o bFVB9njKmfGiAOxtkMndUVVL3xdKmJplT7RWtIDoEqV+wh7vyUaw10hqjk+BXWBM Nq/anq1DnJ+zeKMjwY0soHgV8qBb7bk= -----END CERTIFICATE-----Generated at Tue Oct 13 17:38:44 2026 by rpki-client