$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb24c45e-120b-3357-a95a-bd20723db3f5.roa File: cb24c45e-120b-3357-a95a-bd20723db3f5.roa (raw, json) Hash identifier: K6Ck+qUTif7ihM1XsO58VdDdybovXXIUkBECoY4tWJU= Subject key identifier: A5:16:A9:BE:EE:E6:BC:3D:5A:D6:23:6F:91:59:3E:2A:E3:E5:B8:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F130231673CD657F449BBEE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb24c45e-120b-3357-a95a-bd20723db3f5.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 207.155.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:31:67:3c:d6:57:f4:49:bb:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=0d601f7f-e4ce-43cd-92a3-a0b57cf8ad18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:87:4d:db:94:cb:9e:d5:d1:40:6a:a5:87: e3:db:b5:b0:6e:49:00:e6:c7:1c:83:b5:cc:16:cf: c7:e5:71:40:ab:25:46:e4:03:88:8e:fc:63:fb:83: cf:7c:3e:2d:ab:8e:83:96:0b:d6:e4:9f:a9:2b:bc: 91:11:52:11:54:e2:cc:a9:5f:32:47:72:c7:8c:05: e0:5a:2c:08:94:54:d5:ba:b1:79:be:c6:cf:6c:a3: a9:18:cf:c8:15:e0:2e:b2:45:3e:c4:65:98:ee:b7: ab:42:de:0b:e0:52:d9:7d:f9:b1:6c:ff:b2:97:1f: 12:f0:1e:63:76:c4:a1:f7:3e:8c:53:e6:2c:1c:ef: 63:40:9b:08:ed:04:3e:a5:67:1d:c0:c6:c1:10:c8: b2:33:ae:7a:7b:3c:cb:be:5e:0b:cd:fa:7f:3d:36: ec:c8:f7:10:c6:51:8e:d4:a5:94:2c:db:d9:df:f0: 2d:18:d0:5e:6a:50:a1:3a:7e:eb:a0:1c:8b:14:14: 31:c0:5d:ff:06:7a:6e:13:2d:3d:18:5c:90:3b:85: de:b8:b1:74:bf:d8:ee:70:42:b3:93:f4:6b:87:87: b1:73:b2:34:2b:92:72:f4:bf:21:cb:04:4b:d1:c4: 8d:cc:3c:f2:f3:7f:e8:cd:d3:aa:6d:58:7c:f2:4f: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:16:A9:BE:EE:E6:BC:3D:5A:D6:23:6F:91:59:3E:2A:E3:E5:B8:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb24c45e-120b-3357-a95a-bd20723db3f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.155.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:66:47:8d:9a:0f:a8:3d:bd:17:d5:78:27:89:b3:fa:52:29: ef:f0:26:0e:80:88:da:81:73:32:fe:0e:75:a8:9f:da:d1:7b: cb:7e:86:8a:a4:13:39:ea:c5:f5:84:d1:83:a1:73:50:92:14: 58:58:8f:cc:ce:84:59:de:72:dc:40:2f:7a:22:6b:92:ad:79: c9:b1:26:c2:1f:78:5e:d3:7a:a8:26:46:d3:02:22:05:04:63: 83:77:23:2b:6b:8e:b9:99:d8:85:6a:38:30:e3:45:bb:2a:d3: e4:01:c5:2e:66:c0:c6:40:f1:e9:92:3c:fd:d0:cd:03:ca:4d: 03:8f:28:da:16:23:dc:c2:6c:1e:5d:76:b4:fa:d9:b4:17:f0: ac:2d:1c:05:c9:5b:f4:18:d4:33:27:95:77:13:70:d8:67:91: 27:97:2d:21:15:63:81:af:da:56:2e:03:c8:3b:cb:83:f7:28: a2:e5:88:cb:7f:fe:75:bb:b8:d9:88:e4:f8:30:5f:52:b1:ce: 4d:f6:cc:c9:99:ec:4a:95:52:05:0a:8b:d5:21:fe:ef:b1:c3: 4c:ce:a5:82:fb:52:ce:b4:c2:a7:64:7d:f6:89:7d:04:9c:91: c9:08:d4:4e:c1:c7:e6:36:84:c2:94:7b:56:a6:ff:18:b5:17: a4:f6:d8:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjFnPNZX9Em77oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk MGQ2MDFmN2YtZTRjZS00M2NkLTkyYTMtYTBiNTdjZjhhZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndOHTduUy57V0UBqpYfj27WwbkkA5sccg7XM Fs/H5XFAqyVG5AOIjvxj+4PPfD4tq46DlgvW5J+pK7yREVIRVOLMqV8yR3LHjAXg WiwIlFTVurF5vsbPbKOpGM/IFeAuskU+xGWY7rerQt4L4FLZffmxbP+ylx8S8B5j dsSh9z6MU+YsHO9jQJsI7QQ+pWcdwMbBEMiyM656ezzLvl4Lzfp/PTbsyPcQxlGO 1KWULNvZ3/AtGNBealChOn7roByLFBQxwF3/BnpuEy09GFyQO4XeuLF0v9jucEKz k/Rrh4exc7I0K5Jy9L8hywRL0cSNzDzy83/ozdOqbVh88k81mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUWqb7u5rw9WtYjb5FZPirj5bjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2IyNGM0NWUtMTIwYi0z MzU3LWE5NWEtYmQyMDcyM2RiM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz5tsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdmR42aD6g9vRfVeCeJs/pSKe/wJg6AiNqBczL+DnWon9rRe8t+hoqk EznqxfWE0YOhc1CSFFhYj8zOhFnectxAL3oia5KtecmxJsIfeF7TeqgmRtMCIgUE Y4N3IytrjrmZ2IVqODDjRbsq0+QBxS5mwMZA8emSPP3QzQPKTQOPKNoWI9zCbB5d drT62bQX8KwtHAXJW/QY1DMnlXcTcNhnkSeXLSEVY4Gv2lYuA8g7y4P3KKLliMt/ /nW7uNmI5PgwX1Kxzk32zMmZ7EqVUgUKi9Uh/u+xw0zOpYL7Us60wqdkffaJfQSc kckI1E7Bx+Y2hMKUe1am/xi1F6T22L0= -----END CERTIFICATE-----Generated at Mon Sep 21 13:00:22 2026 by rpki-client