$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c00ee32-7cf1-3b20-9a9f-257687840587.roa File: 0c00ee32-7cf1-3b20-9a9f-257687840587.roa (raw, json) Hash identifier: 0aQv5tf4l+ssys0r2AFm3PyZW9NTn3RyxVBJK1SZNu4= Subject key identifier: 64:F8:94:81:27:E1:D9:C7:76:5E:F4:F8:D5:61:7B:36:93:03:5C:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78F5E79DEE45217CEBF5A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c00ee32-7cf1-3b20-9a9f-257687840587.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.21.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:5e:79:de:e4:52:17:ce:bf:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=502314d5-c690-4fbb-8996-86c30fb03b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:7a:98:a4:5a:06:e1:fa:3c:6a:e4:50:cf: 32:e1:65:ac:76:18:d4:35:80:85:a2:74:ef:9e:44: e7:ac:84:61:56:8d:6a:31:2c:af:f3:4b:7e:54:04: 93:ba:1e:bf:ac:e5:e2:70:cc:b3:1f:03:da:ad:23: 40:88:8c:13:25:d2:c4:9d:8d:49:e7:55:71:e8:24: c8:19:9f:52:36:af:63:19:b6:17:23:80:70:b3:22: cd:42:71:97:70:15:4d:69:4d:09:18:bb:25:ce:4a: b6:1d:05:3b:ff:89:b5:8e:27:80:98:96:17:37:44: 16:07:f0:9d:65:bb:d1:05:0d:9e:20:5d:15:82:93: 97:31:9e:0a:19:13:b5:cd:09:07:d0:77:69:ef:02: c5:b7:9f:0f:a2:00:04:61:97:bc:d4:42:bc:3b:8b: dd:56:95:d6:22:c1:be:69:0f:14:66:ca:90:e1:29: 16:6b:f7:41:42:4f:d7:d1:6f:e3:38:17:5c:df:1c: 16:10:d9:f3:f8:19:30:0b:dc:93:31:8c:94:27:4f: 67:d3:7a:34:99:78:bc:c6:e1:20:42:74:04:84:78: 65:81:1a:0c:27:0e:a4:68:13:ee:71:a3:a4:4f:eb: 7b:2d:b3:09:58:ec:6b:a4:5a:c1:ce:07:86:b9:f9: e1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F8:94:81:27:E1:D9:C7:76:5E:F4:F8:D5:61:7B:36:93:03:5C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c00ee32-7cf1-3b20-9a9f-257687840587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f1:40:ba:0b:c0:26:56:7b:39:ce:68:75:ba:4c:2a:24:fc: 92:fe:39:f3:eb:eb:d0:92:ea:39:47:6d:66:13:ba:92:b3:21: 40:5b:17:8d:fa:f4:ed:d9:56:f5:54:09:a4:2a:e7:75:e8:ca: 1b:c6:0c:7c:67:0a:7a:3e:70:09:d6:da:a7:90:37:94:ee:fa: 31:15:8a:59:c4:60:56:d2:16:c9:9e:3f:9b:b3:f2:ff:e8:d6: 9e:80:b5:26:2f:6f:8b:2d:9f:59:ce:c8:a7:0f:fc:a3:ae:5b: 33:b3:51:e9:b9:26:61:05:ee:9f:f0:47:65:b1:18:6c:3a:83: b3:46:b2:f7:64:96:3a:09:f8:27:fa:b4:4e:0c:95:39:16:09: 4b:ec:2d:fc:10:bf:30:c3:fa:67:0e:47:e6:b1:50:0c:84:47: b1:f7:95:5e:39:22:4c:f4:57:32:23:08:1a:09:6f:a3:7c:f5: a3:eb:02:17:06:3d:56:23:8e:b0:fa:b1:52:2d:de:d7:7b:21: 8b:6c:df:1e:9f:95:86:fb:71:8e:ff:e9:f5:c5:0d:26:39:2f: cc:1a:2c:c3:d9:fa:74:f7:3c:12:28:1a:db:23:fe:1c:a4:db: 11:09:2c:2a:f6:72:63:92:9d:07:49:d3:21:65:a2:bd:43:83: 0a:ae:35:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj1553uRSF86/WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTAyMzE0ZDUtYzY5MC00ZmJiLTg5OTYtODZjMzBmYjAzYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnF6mKRaBuH6PGrkUM8y4WWsdhjUNYCFonTv nkTnrIRhVo1qMSyv80t+VASTuh6/rOXicMyzHwParSNAiIwTJdLEnY1J51Vx6CTI GZ9SNq9jGbYXI4BwsyLNQnGXcBVNaU0JGLslzkq2HQU7/4m1jieAmJYXN0QWB/Cd ZbvRBQ2eIF0VgpOXMZ4KGRO1zQkH0Hdp7wLFt58PogAEYZe81EK8O4vdVpXWIsG+ aQ8UZsqQ4SkWa/dBQk/X0W/jOBdc3xwWENnz+BkwC9yTMYyUJ09n03o0mXi8xuEg QnQEhHhlgRoMJw6kaBPucaOkT+t7LbMJWOxrpFrBzgeGufnhOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT4lIEn4dnHdl70+NVhezaTA1wkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGMwMGVlMzItN2NmMS0z YjIwLTlhOWYtMjU3Njg3ODQwNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfxQLoLwCZWeznOaHW6TCok/JL+OfPr69CS6jlHbWYTupKzIUBbF436 9O3ZVvVUCaQq53XoyhvGDHxnCno+cAnW2qeQN5Tu+jEVilnEYFbSFsmeP5uz8v/o 1p6AtSYvb4stn1nOyKcP/KOuWzOzUem5JmEF7p/wR2WxGGw6g7NGsvdkljoJ+Cf6 tE4MlTkWCUvsLfwQvzDD+mcOR+axUAyER7H3lV45Ikz0VzIjCBoJb6N89aPrAhcG PVYjjrD6sVIt3td7IYts3x6flYb7cY7/6fXFDSY5L8waLMPZ+nT3PBIoGtsj/hyk 2xEJLCr2cmOSnQdJ0yFlor1DgwquNQg= -----END CERTIFICATE-----Generated at Thu Aug 27 11:37:52 2026 by rpki-client