$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a1894d4-26e1-3bfd-9415-0a3a4a1a2eb6.roa File: 1a1894d4-26e1-3bfd-9415-0a3a4a1a2eb6.roa (raw, json) Hash identifier: XTgyAHMRabU4Y7W7Xv63N/3vcPnvgLLR8lWsCkW2ZUY= Subject key identifier: 4C:93:C2:DB:09:46:14:40:69:04:2F:BC:6E:FC:D0:0E:1D:2E:AD:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FF2353BAE26E76DC2880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a1894d4-26e1-3bfd-9415-0a3a4a1a2eb6.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.20.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:ff:23:53:ba:e2:6e:76:dc:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=a3a5ee40-8366-4af5-9b81-bf926f97d961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5a:39:62:1d:af:f0:7a:0a:76:de:e1:1f:7e: 7f:a1:b5:5a:09:c0:f7:bc:ef:a0:9c:6f:3e:1e:99: b2:97:c9:09:06:48:61:f4:61:fa:77:56:dd:97:aa: df:ce:8c:97:ae:8e:af:99:f3:70:18:3d:db:ea:15: fc:c9:91:6e:27:35:f0:ae:7e:ec:04:6b:f4:73:1c: c8:59:65:40:6f:09:20:33:79:d4:42:7d:4f:12:28: 39:ee:49:08:1b:94:8a:3b:e7:17:92:1d:b9:45:80: 56:16:b3:24:ff:9d:45:d6:1a:2c:79:b7:ea:30:27: 8e:cf:14:b4:2d:d2:3e:71:15:dd:62:27:dd:46:df: b2:0e:d0:31:73:e7:86:48:91:68:6a:b5:e6:39:3d: b7:f5:d2:39:fa:57:17:26:6e:41:1c:29:2d:ae:51: c3:53:f5:ac:ec:a4:64:f9:5f:97:eb:0a:17:cd:9a: 9c:7f:1d:a7:2f:ed:7a:99:1a:32:2d:3e:6d:20:86: cd:ef:48:c3:c9:b4:71:1f:71:5a:72:ab:cd:3c:a3: 88:9e:5a:da:bd:d6:f2:79:76:3d:9c:d9:16:fa:12: b4:05:91:84:17:05:87:76:6d:2b:6b:df:e2:11:fe: ee:7a:82:4e:c0:8e:38:c3:75:89:74:9c:bc:7d:cb: 06:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:93:C2:DB:09:46:14:40:69:04:2F:BC:6E:FC:D0:0E:1D:2E:AD:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a1894d4-26e1-3bfd-9415-0a3a4a1a2eb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2c:5e:e5:00:5b:9d:e3:25:b7:bb:64:a4:a7:25:22:24:be: d3:23:52:cf:74:93:54:41:b2:00:3d:ad:55:b5:29:4a:e8:2d: 66:2d:b0:f8:29:b7:ad:6d:dc:7d:1a:b1:9e:17:f3:bd:d2:07: 30:13:32:dc:27:8d:f6:48:7e:42:5d:41:c3:5d:8b:0b:12:66: 20:29:ae:10:84:21:cf:7f:df:35:1e:85:14:11:e6:9c:27:a7: 97:5a:a1:b1:b8:66:cb:26:b6:d1:6f:8b:d6:5c:63:f1:b3:78: 0d:ae:1e:1c:98:ea:6e:be:67:a0:be:3c:39:63:04:b9:8e:35: 81:c2:66:47:90:8a:32:f3:07:51:35:60:bb:a6:79:46:6f:b6: 18:7d:c2:55:4d:c5:53:d5:4c:4d:fe:b8:3a:f1:46:da:a7:42: cb:c1:0d:7d:f9:57:88:0c:28:ce:b8:8d:6b:bd:d0:98:f8:f8: 13:e6:9f:d2:bf:00:80:34:bb:35:f2:14:29:bc:a2:80:97:4f: cc:47:b2:a2:c2:e8:7b:58:37:77:f4:36:77:5c:f9:59:57:b7: bd:8e:0d:1e:3c:b4:c8:c3:6d:61:34:31:2f:93:61:a0:ee:3a: 9b:8e:91:0f:0e:00:82:4d:f5:93:07:ba:c0:33:61:d5:0a:0a: 64:5a:70:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5v8jU7ribnbcKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk YTNhNWVlNDAtODM2Ni00YWY1LTliODEtYmY5MjZmOTdkOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFo5Yh2v8HoKdt7hH35/obVaCcD3vO+gnG8+ Hpmyl8kJBkhh9GH6d1bdl6rfzoyXro6vmfNwGD3b6hX8yZFuJzXwrn7sBGv0cxzI WWVAbwkgM3nUQn1PEig57kkIG5SKO+cXkh25RYBWFrMk/51F1hosebfqMCeOzxS0 LdI+cRXdYifdRt+yDtAxc+eGSJFoarXmOT239dI5+lcXJm5BHCktrlHDU/Ws7KRk +V+X6woXzZqcfx2nL+16mRoyLT5tIIbN70jDybRxH3FacqvNPKOInlravdbyeXY9 nNkW+hK0BZGEFwWHdm0ra9/iEf7ueoJOwI44w3WJdJy8fcsGHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyTwtsJRhRAaQQvvG780A4dLq16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWExODk0ZDQtMjZlMS0z YmZkLTk0MTUtMGEzYTRhMWEyZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0sXuUAW53jJbe7ZKSnJSIkvtMjUs90k1RBsgA9rVW1KUroLWYtsPgp t61t3H0asZ4X873SBzATMtwnjfZIfkJdQcNdiwsSZiAprhCEIc9/3zUehRQR5pwn p5daobG4ZssmttFvi9ZcY/GzeA2uHhyY6m6+Z6C+PDljBLmONYHCZkeQijLzB1E1 YLumeUZvthh9wlVNxVPVTE3+uDrxRtqnQsvBDX35V4gMKM64jWu90Jj4+BPmn9K/ AIA0uzXyFCm8ooCXT8xHsqLC6HtYN3f0Nndc+VlXt72ODR48tMjDbWE0MS+TYaDu OpuOkQ8OAIJN9ZMHusAzYdUKCmRacMU= -----END CERTIFICATE-----Generated at Thu Aug 27 16:09:09 2026 by rpki-client