$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e008b59a-09a9-3cd8-a0d2-701ff04092f2.roa File: e008b59a-09a9-3cd8-a0d2-701ff04092f2.roa (raw, json) Hash identifier: a43hJQjR6vzgDjJBgB4QRnjbeGZ8NVf2q9UEF1zVBP4= Subject key identifier: B4:25:6B:EA:16:5F:69:3D:6D:1A:8D:6D:48:30:BE:5A:AF:A2:CA:4B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA651FEEAB3C2C8C12EB308C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e008b59a-09a9-3cd8-a0d2-701ff04092f2.roa Signing time: Tue 28 Jul 2026 14:37:55 +0000 ROA not before: Tue 28 Jul 2026 14:37:55 +0000 ROA not after: Mon 26 Oct 2026 14:37:55 +0000 asID: 7029 IP address blocks: 198.14.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:51:fe:ea:b3:c2:c8:c1:2e:b3:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 28 14:37:55 2026 GMT Not After : Oct 26 14:37:55 2026 GMT Subject: CN=b6de12ae-4152-4368-ae88-d1d8075f8467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:d4:f8:24:d6:4d:99:3a:ea:8a:b7:1a:43: 0b:34:21:93:96:4e:b4:44:c5:21:16:35:93:14:a0: b9:40:f8:3d:c1:eb:66:d5:57:89:2d:84:20:f1:36: 3b:47:fa:16:6f:34:83:e8:e5:27:a3:46:1c:0a:41: 8f:a3:2f:76:77:11:17:53:a6:03:38:21:ac:eb:6b: d4:0b:5c:28:d6:b0:d6:db:42:b9:2a:40:a6:16:98: 93:97:5b:e9:e6:17:0f:65:c2:85:10:4f:d3:66:f7: 7e:a4:13:8b:be:37:bf:64:47:b7:b1:2a:6d:60:bc: 9a:f3:98:25:e1:63:c2:df:f0:2a:ba:5d:c0:18:0a: 28:16:cf:49:1e:00:3d:e6:89:b9:e1:a5:5a:38:e2: ec:a1:89:79:41:57:50:92:33:7b:e6:63:b2:09:76: ea:d3:de:61:dd:e0:10:1e:ac:54:c1:5a:a2:30:b3: 1d:72:f3:0e:fa:48:cf:99:f7:aa:63:74:64:2a:0b: 3e:24:76:1f:58:ae:e6:be:40:38:d9:eb:cb:b7:d1: 9f:07:08:6c:62:f7:c4:ab:a3:d6:55:9c:6b:f4:85: 3e:40:fe:97:3a:89:b2:2f:4c:1d:bb:ff:51:5e:33: 3e:e4:3e:de:b1:b5:d1:75:00:17:8c:06:c2:5c:7b: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:25:6B:EA:16:5F:69:3D:6D:1A:8D:6D:48:30:BE:5A:AF:A2:CA:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e008b59a-09a9-3cd8-a0d2-701ff04092f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.14.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:cf:cc:e0:3b:68:e3:59:83:01:a7:94:ca:1b:4e:17:28:03: f1:fc:af:b3:8b:3f:9b:96:8b:0e:15:53:ab:f2:dd:f7:ee:4b: 15:74:7f:2c:6f:82:ac:4d:f5:c9:8a:48:51:77:7c:e7:15:b5: b2:c4:48:00:cd:12:ba:6a:58:8c:b0:96:f6:f7:7a:c2:f3:80: 1a:00:ee:4f:ee:d8:6f:46:6f:33:4c:e3:1d:50:df:d3:da:05: d2:cc:55:d1:4f:9b:6c:5e:9e:68:03:0e:c9:f7:07:93:bf:45: 0e:3b:3a:59:1c:e8:b2:c7:ee:75:cf:3e:e2:84:17:af:15:b3: 8c:07:9b:3e:a3:77:c4:76:21:fa:6c:f5:41:54:36:02:a1:75: 4d:f2:0a:81:4a:75:6b:20:0f:24:ee:4e:22:b7:cf:e3:dd:37: fd:3e:fb:0f:f0:86:1d:66:1c:87:37:47:57:07:e9:c6:b7:8c: 4c:18:ea:da:da:0f:36:be:69:91:8e:7d:1e:1e:0a:40:17:6a: c5:21:1a:3d:a0:f7:8d:88:fb:0f:7d:72:50:2d:ce:61:f4:4c: 26:06:b4:51:bc:c0:d2:19:a1:e2:87:c1:cc:e6:00:44:46:f1: b7:e7:4d:d1:4b:d5:b5:12:8c:10:a7:89:8a:0b:00:b6:33:1c: f9:0b:dd:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6mUf7qs8LIwS6zCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyODE0Mzc1NVoXDTI2MTAyNjE0Mzc1NVowLzEtMCsGA1UEAxMk YjZkZTEyYWUtNDE1Mi00MzY4LWFlODgtZDFkODA3NWY4NDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWPU+CTWTZk66oq3GkMLNCGTlk60RMUhFjWT FKC5QPg9wetm1VeJLYQg8TY7R/oWbzSD6OUno0YcCkGPoy92dxEXU6YDOCGs62vU C1wo1rDW20K5KkCmFpiTl1vp5hcPZcKFEE/TZvd+pBOLvje/ZEe3sSptYLya85gl 4WPC3/Aqul3AGAooFs9JHgA95om54aVaOOLsoYl5QVdQkjN75mOyCXbq095h3eAQ HqxUwVqiMLMdcvMO+kjPmfeqY3RkKgs+JHYfWK7mvkA42evLt9GfBwhsYvfEq6PW VZxr9IU+QP6XOomyL0wdu/9RXjM+5D7esbXRdQAXjAbCXHtViwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQla+oWX2k9bRqNbUgwvlqvospLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTAwOGI1OWEtMDlhOS0z Y2Q4LWEwZDItNzAxZmYwNDA5MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg7PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/PzOA7aONZgwGnlMobThcoA/H8r7OLP5uWiw4VU6vy3ffuSxV0fyxv gqxN9cmKSFF3fOcVtbLESADNErpqWIywlvb3esLzgBoA7k/u2G9GbzNM4x1Q39Pa BdLMVdFPm2xenmgDDsn3B5O/RQ47Olkc6LLH7nXPPuKEF68Vs4wHmz6jd8R2Ifps 9UFUNgKhdU3yCoFKdWsgDyTuTiK3z+PdN/0++w/whh1mHIc3R1cH6ca3jEwY6tra Dza+aZGOfR4eCkAXasUhGj2g942I+w99clAtzmH0TCYGtFG8wNIZoeKHwczmAERG 8bfnTdFL1bUSjBCniYoLALYzHPkL3Ug= -----END CERTIFICATE-----Generated at Tue Jul 28 18:28:45 2026 by rpki-client