$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2532e085-e8d5-3931-b788-c0515f773874.roa File: 2532e085-e8d5-3931-b788-c0515f773874.roa (raw, json) Hash identifier: g4GhoSfdv1fXh+cjpxy5ihKwX4Za71fMf9oMOA3qqS8= Subject key identifier: E4:6D:DF:8A:B2:30:BB:68:8A:23:9F:E3:71:EE:A9:0C:7D:F8:B0:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E6C6F65FA41BF8E0803AA2A50 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2532e085-e8d5-3931-b788-c0515f773874.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 7029 IP address blocks: 98.19.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:65:fa:41:bf:8e:08:03:aa:2a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=02673fab-4fb9-4ae5-8318-bb3809d5618e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:03:8a:60:76:41:83:7f:0e:a5:f7:ad:19:d0: ac:e4:bb:81:84:83:0f:83:ae:9b:f6:b9:2a:68:fe: bb:4e:63:f9:69:59:07:c0:07:57:27:03:e0:0a:38: ae:38:d6:22:27:51:01:b7:f3:53:fb:57:a8:2d:b9: 61:67:ed:ac:68:c8:4b:f0:64:71:f6:67:e8:3a:8b: 1f:3e:58:11:7c:4f:11:15:b4:69:70:3a:16:ea:81: da:16:4e:53:7b:fa:f2:1b:8b:cc:15:b4:6b:52:e9: db:5e:2c:01:26:4d:b4:b2:74:45:82:20:b7:2a:e2: 6c:3c:4a:8f:f0:f5:94:02:7c:19:fd:a0:a8:6a:4b: b9:f8:29:b2:7e:ad:5e:f2:0f:1c:98:d4:68:40:65: 96:9e:43:b9:cc:a4:c9:2f:8b:3b:32:54:c1:05:68: ac:2e:59:82:1a:b0:36:98:75:8f:6f:cb:f9:26:60: 94:39:7b:33:4d:67:af:3a:82:7f:ad:91:e1:4f:7e: 0d:cf:81:6c:9d:c6:67:95:3c:2c:60:e3:f0:26:c6: 40:f4:fc:f8:af:9b:d6:82:1e:b8:29:00:d5:9c:69: 11:4e:31:cd:8c:30:c4:dc:b9:b2:7b:e8:c5:ac:01: c6:a5:77:37:23:9d:b7:66:1e:aa:dc:ee:29:a6:32: 19:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6D:DF:8A:B2:30:BB:68:8A:23:9F:E3:71:EE:A9:0C:7D:F8:B0:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2532e085-e8d5-3931-b788-c0515f773874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:76:8b:10:11:45:8d:4d:49:56:ef:2b:b0:4f:9a:b3:99:2e: f1:17:da:f9:f0:3e:ec:dc:c1:46:69:84:da:e6:7c:ed:b4:92: 52:ad:ff:bb:4b:1f:db:77:12:fe:7b:4d:ee:4c:3e:4d:a8:a5: 18:55:f9:a2:d0:4e:34:f4:b7:94:20:22:e0:13:01:87:e5:2c: 8c:d4:a3:89:d8:29:1d:49:aa:7e:f5:ad:0d:7a:1f:7f:1a:3f: a9:e3:b1:76:c1:2f:e7:27:63:67:a1:ab:e5:fc:2f:32:92:f6: eb:f1:1e:11:a3:f6:1e:31:fc:a3:90:67:80:79:ae:6e:b6:3a: 4f:61:de:c9:19:df:a1:9d:69:a8:51:7b:a8:3d:be:68:27:fb: fe:17:c4:2c:93:16:98:77:3b:50:ef:fc:a4:18:a4:30:82:40: 88:ad:c3:49:0f:b1:3d:06:aa:81:64:25:d0:a4:03:90:e6:c0: 62:5e:09:11:2d:cd:bf:d6:b7:cf:19:df:af:79:ef:4e:44:3a: 07:6f:17:66:b9:34:23:3b:97:1e:9e:e1:e2:e8:27:3c:8e:eb: 09:1d:75:80:79:77:8d:88:bc:f2:34:da:6d:17:0a:10:9f:92: fe:c5:fe:5e:63:fc:49:ee:bd:c3:b8:57:72:26:99:c3:31:3f: e1:7a:a1:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2X6Qb+OCAOqKlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk MDI2NzNmYWItNGZiOS00YWU1LTgzMTgtYmIzODA5ZDU2MThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwOKYHZBg38OpfetGdCs5LuBhIMPg66b9rkq aP67TmP5aVkHwAdXJwPgCjiuONYiJ1EBt/NT+1eoLblhZ+2saMhL8GRx9mfoOosf PlgRfE8RFbRpcDoW6oHaFk5Te/ryG4vMFbRrUunbXiwBJk20snRFgiC3KuJsPEqP 8PWUAnwZ/aCoaku5+Cmyfq1e8g8cmNRoQGWWnkO5zKTJL4s7MlTBBWisLlmCGrA2 mHWPb8v5JmCUOXszTWevOoJ/rZHhT34Nz4FsncZnlTwsYOPwJsZA9Pz4r5vWgh64 KQDVnGkRTjHNjDDE3Lmye+jFrAHGpXc3I523Zh6q3O4ppjIZMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORt34qyMLtoiiOf43HuqQx9+LBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjUzMmUwODUtZThkNS0z OTMxLWI3ODgtYzA1MTVmNzczODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ2ixARRY1NSVbvK7BPmrOZLvEX2vnwPuzcwUZphNrmfO20klKt/7tL H9t3Ev57Te5MPk2opRhV+aLQTjT0t5QgIuATAYflLIzUo4nYKR1Jqn71rQ16H38a P6njsXbBL+cnY2ehq+X8LzKS9uvxHhGj9h4x/KOQZ4B5rm62Ok9h3skZ36GdaahR e6g9vmgn+/4XxCyTFph3O1Dv/KQYpDCCQIitw0kPsT0GqoFkJdCkA5DmwGJeCREt zb/Wt88Z3695705EOgdvF2a5NCM7lx6e4eLoJzyO6wkddYB5d42IvPI02m0XChCf kv7F/l5j/EnuvcO4V3ImmcMxP+F6oQA= -----END CERTIFICATE-----Generated at Mon Jul 13 05:53:51 2026 by rpki-client