$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa File: 201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa (raw, json) Hash identifier: f7opmBVlYAikdzX9SBAjHISThsBnt9fTB90yQ41Jfk4= Subject key identifier: 65:CD:4F:24:3D:6B:A0:08:07:5B:99:D3:57:62:9D:DF:CA:96:56:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED43255C6E18935D78228A100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 98.22.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:55:c6:e1:89:35:d7:82:28:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=44c2274a-2131-43c5-8392-fd282476fa76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:29:4a:54:6b:b4:87:a3:ca:f1:95:89:51:94: 96:65:8e:82:77:8b:dc:84:e8:53:94:5e:e4:f4:11: bf:03:80:4a:93:95:f9:a3:93:db:0e:cc:25:94:0d: 05:45:60:f4:73:0a:49:c4:03:d3:af:f4:10:0d:a1: 66:bf:3f:77:39:99:c7:a6:24:98:d2:db:b0:e5:8b: a5:6a:39:cb:5a:69:d4:f4:c9:a9:aa:05:5e:dc:9a: f4:87:fd:84:90:a3:d5:43:11:c1:be:a7:99:34:28: 9b:93:b3:86:d1:7b:73:bb:24:5c:cc:bf:49:30:4f: dc:bd:22:b3:d5:5d:5d:d0:23:95:c1:f1:50:3a:31: ed:64:55:39:b3:74:38:75:9a:3e:0d:f3:dd:bb:69: 29:e9:90:19:1e:23:4c:9c:b9:d5:41:dc:25:54:8b: b8:53:a4:f4:3d:b9:1d:b2:94:76:93:0d:8a:23:60: 17:54:ea:bc:77:25:77:49:2b:20:8d:29:fa:53:ee: 15:1a:f3:f2:68:a0:c9:72:6b:ab:ce:9e:e1:04:eb: 59:39:3c:b4:a5:31:d1:05:22:9a:14:b2:25:c6:76: 50:eb:a6:23:11:8f:20:f3:81:39:73:0b:ad:95:4e: 90:19:b4:b9:a0:de:80:57:9e:bf:2b:46:93:d0:2c: ee:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CD:4F:24:3D:6B:A0:08:07:5B:99:D3:57:62:9D:DF:CA:96:56:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d9:b6:33:12:a0:b7:5d:73:5f:42:bf:61:f3:4c:0f:24:07: 15:0c:d5:3d:fd:e3:25:5c:e5:1d:e5:1b:a8:92:80:a4:bf:27: 2d:0d:93:d6:82:ee:23:be:39:95:29:30:ec:dd:f6:4c:6e:a9: 80:16:b7:91:e6:c6:c0:f1:e8:6f:7d:24:08:d0:ef:a6:28:50: 03:bd:7d:09:ab:cd:6f:8d:82:46:99:3f:30:40:b1:16:12:d7: 22:9c:e7:67:2e:ad:95:24:d0:7e:06:2c:9a:56:b4:35:41:3f: d0:68:06:21:d5:a6:b0:0a:98:49:88:7a:db:91:cc:2a:43:8a: 43:95:d6:88:9a:20:88:18:29:07:5d:b7:90:3b:1d:79:4a:0c: e6:2e:c3:ae:fe:36:0f:52:93:2f:56:7f:df:dd:5e:10:b0:c9: 91:bb:16:88:eb:9c:4b:31:b5:51:64:62:90:a9:ce:e3:1f:dc: 77:ca:3a:df:18:b3:c6:5a:32:28:5a:2d:a0:ea:68:73:0a:1b: 6e:e9:16:88:03:b6:be:1b:3c:d7:3d:89:ae:ec:cf:52:27:63: 98:9b:e0:d0:bc:2e:18:e7:de:75:79:71:fe:a4:37:2a:3d:6c: 0e:ba:0f:f9:a4:81:cf:b1:03:06:70:14:af:8a:8a:4b:05:75: df:e3:21:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlXG4Yk114IooQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NDRjMjI3NGEtMjEzMS00M2M1LTgzOTItZmQyODI0NzZmYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApClKVGu0h6PK8ZWJUZSWZY6Cd4vchOhTlF7k 9BG/A4BKk5X5o5PbDswllA0FRWD0cwpJxAPTr/QQDaFmvz93OZnHpiSY0tuw5Yul ajnLWmnU9MmpqgVe3Jr0h/2EkKPVQxHBvqeZNCibk7OG0XtzuyRczL9JME/cvSKz 1V1d0COVwfFQOjHtZFU5s3Q4dZo+DfPdu2kp6ZAZHiNMnLnVQdwlVIu4U6T0Pbkd spR2kw2KI2AXVOq8dyV3SSsgjSn6U+4VGvPyaKDJcmurzp7hBOtZOTy0pTHRBSKa FLIlxnZQ66YjEY8g84E5cwutlU6QGbS5oN6AV56/K0aT0CzuLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXNTyQ9a6AIB1uZ01dind/KllbxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjAxYmM1OGYtNzA0ZC0z OGJiLTk3MzEtMGY0Y2E0YjBkMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfZtjMSoLddc19Cv2HzTA8kBxUM1T394yVc5R3lG6iSgKS/Jy0Nk9aC 7iO+OZUpMOzd9kxuqYAWt5HmxsDx6G99JAjQ76YoUAO9fQmrzW+NgkaZPzBAsRYS 1yKc52curZUk0H4GLJpWtDVBP9BoBiHVprAKmEmIetuRzCpDikOV1oiaIIgYKQdd t5A7HXlKDOYuw67+Ng9Sky9Wf9/dXhCwyZG7FojrnEsxtVFkYpCpzuMf3HfKOt8Y s8ZaMihaLaDqaHMKG27pFogDtr4bPNc9ia7sz1InY5ib4NC8Lhjn3nV5cf6kNyo9 bA66D/mkgc+xAwZwFK+KiksFdd/jIdY= -----END CERTIFICATE-----Generated at Thu Aug 27 09:47:30 2026 by rpki-client