$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa File: 0b6db478-8531-3fa9-ad15-f50272ba9617.roa (raw, json) Hash identifier: ao70YyIDcmkxDyOlTLUYugVrKq6YQG4icG8YrR2IbQM= Subject key identifier: 9B:4C:7C:85:E7:EE:25:D5:40:43:AB:B9:26:CE:A5:DA:06:49:E9:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED9C761965B0F9E4663202680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 7029 IP address blocks: 98.20.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:61:96:5b:0f:9e:46:63:20:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=21a6267f-931c-4efd-9bd2-c76a1e6e173c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f9:3d:03:98:3c:2e:aa:84:49:43:09:74:65: c8:31:e3:82:30:7b:12:4c:c9:89:b8:49:bb:cb:a2: 81:6c:b9:86:39:5c:f4:c7:fb:f2:2d:e9:91:84:43: 6e:1d:c7:b9:c1:6e:11:48:e6:9a:00:46:88:b1:ad: 71:6a:8b:18:dc:6b:d9:c0:bb:df:7f:85:7c:d6:d3: 9e:8a:50:2f:cd:26:af:2c:c2:db:07:0d:ca:01:fa: 5e:b8:bf:2c:d9:4a:49:82:65:8d:f2:d0:8d:4d:f6: c7:57:5d:87:78:7f:d4:48:ec:ed:5c:3b:ca:1e:e0: 4e:2f:3c:94:43:cb:13:13:19:77:59:32:31:66:ce: 6c:3d:0c:a3:d9:94:96:af:20:d2:b1:bb:cd:85:c7: f8:54:c8:33:2f:e4:70:4e:35:a4:a1:8e:00:6e:0f: af:bb:e2:41:e7:82:cc:ad:d2:1b:f2:7c:e9:6b:a7: ac:1d:71:d5:c6:e2:66:42:3e:b5:03:85:15:a0:49: 13:95:f9:c0:2d:71:4f:14:17:ef:cc:7e:27:9f:d1: 06:22:94:23:7b:f1:87:45:66:1d:3d:ac:07:6f:22: 8a:3c:98:7a:5e:9d:1c:bd:c6:29:09:20:c7:61:82: bd:f7:d2:cc:ba:e8:ef:98:f5:c9:fd:01:db:38:e3: f9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4C:7C:85:E7:EE:25:D5:40:43:AB:B9:26:CE:A5:DA:06:49:E9:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:59:17:0c:83:4b:b9:86:f2:f4:1a:28:5e:1f:d4:64:bb:e8: 48:76:bd:f5:83:22:41:73:7a:47:0f:73:6a:a3:d6:06:5d:75: e0:4c:d7:af:6e:4e:c9:e5:8f:36:52:f2:3b:cf:da:ff:66:81: bd:ba:ec:74:ed:ff:82:be:d7:b5:a7:12:81:d2:6a:dc:53:3f: 15:fc:33:35:7e:b5:db:1f:b3:23:fc:98:be:8c:c5:65:be:20: 32:b5:9e:0a:ea:1c:53:e3:b6:2d:d0:17:a0:88:6c:3f:a0:74: 94:a6:a4:d6:74:fa:f5:3d:6d:84:bb:cc:82:6c:2c:26:3f:8a: ad:e4:69:fb:53:22:11:82:58:a3:d7:fe:b3:06:af:39:1d:b7: dd:c0:eb:46:98:e6:b3:fe:e6:ba:0b:c2:24:07:0d:51:a7:8c: 7c:33:01:7e:42:ec:db:f6:93:d6:ff:c8:1c:d4:78:6b:68:da: 56:95:01:29:09:28:47:3b:f7:36:d7:ed:f8:01:94:e1:42:25: 87:92:33:a6:78:10:fa:e8:73:92:c4:61:92:53:6a:58:12:16: c2:77:1e:35:ff:23:7f:c4:a1:cd:0c:c2:7d:07:79:3a:ac:9c: 51:fe:c2:5c:2c:08:ef:5e:85:5a:fb:06:e4:f0:4c:ce:4c:53: 43:07:f1:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2GWWw+eRmMgJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk MjFhNjI2N2YtOTMxYy00ZWZkLTliZDItYzc2YTFlNmUxNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfk9A5g8LqqESUMJdGXIMeOCMHsSTMmJuEm7 y6KBbLmGOVz0x/vyLemRhENuHce5wW4RSOaaAEaIsa1xaosY3GvZwLvff4V81tOe ilAvzSavLMLbBw3KAfpeuL8s2UpJgmWN8tCNTfbHV12HeH/USOztXDvKHuBOLzyU Q8sTExl3WTIxZs5sPQyj2ZSWryDSsbvNhcf4VMgzL+RwTjWkoY4Abg+vu+JB54LM rdIb8nzpa6esHXHVxuJmQj61A4UVoEkTlfnALXFPFBfvzH4nn9EGIpQje/GHRWYd PawHbyKKPJh6Xp0cvcYpCSDHYYK999LMuujvmPXJ/QHbOOP5hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtMfIXn7iXVQEOruSbOpdoGSekZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI2ZGI0NzgtODUzMS0z ZmE5LWFkMTUtZjUwMjcyYmE5NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxZFwyDS7mG8vQaKF4f1GS76Eh2vfWDIkFzekcPc2qj1gZddeBM169u TsnljzZS8jvP2v9mgb267HTt/4K+17WnEoHSatxTPxX8MzV+tdsfsyP8mL6MxWW+ IDK1ngrqHFPjti3QF6CIbD+gdJSmpNZ0+vU9bYS7zIJsLCY/iq3kaftTIhGCWKPX /rMGrzkdt93A60aY5rP+5roLwiQHDVGnjHwzAX5C7Nv2k9b/yBzUeGto2laVASkJ KEc79zbX7fgBlOFCJYeSM6Z4EProc5LEYZJTalgSFsJ3HjX/I3/Eoc0Mwn0HeTqs nFH+wlwsCO9ehVr7BuTwTM5MU0MH8XE= -----END CERTIFICATE-----Generated at Thu Aug 27 09:49:48 2026 by rpki-client