$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/256306ed-07ad-387c-9937-97eaa8093c5d.roa File: 256306ed-07ad-387c-9937-97eaa8093c5d.roa (raw, json) Hash identifier: dZcT3B1H50tv3ybnOj0pQAh47M18LZ54JEqWyLcmhDc= Subject key identifier: A7:7D:3C:CF:1E:C2:CD:9F:1B:AB:1A:AA:E8:9C:5B:4C:0A:D1:D9:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED86495686ED6237E559208C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/256306ed-07ad-387c-9937-97eaa8093c5d.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 98.20.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:95:68:6e:d6:23:7e:55:92:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=f385acad-e07c-48c8-8e75-c5b2d6895943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:5b:e7:6d:ad:be:58:a1:a4:3c:29:ce:d0: 35:e2:94:64:9f:ff:61:2a:59:58:07:16:55:50:97: 88:36:c3:91:94:48:95:6b:7b:2b:6a:58:05:5b:b9: 8d:a9:d9:df:cb:d4:67:19:b3:3a:0a:1a:f5:a0:16: f6:81:ed:26:66:48:8c:4b:c8:24:73:f8:92:4a:31: c3:65:75:4f:89:6e:50:1c:30:5e:3f:f0:03:e4:8a: ee:5c:05:d1:4f:dc:81:10:bb:30:e5:03:4e:f6:44: 00:85:ed:2b:da:a6:ce:e3:82:f5:6b:74:62:ff:de: 18:1b:92:84:bf:d9:11:a2:a4:4d:a9:e6:19:c9:e1: d1:b5:d3:1f:3e:47:86:42:29:77:de:5a:67:8a:bf: f0:9a:46:8a:fb:1d:b5:02:5a:39:d6:d4:fc:b9:26: 71:2f:be:ef:b1:f2:f2:19:ea:27:af:ce:c9:c6:c5: 4f:1e:c1:b9:4e:35:90:86:1b:8d:e6:ae:30:3b:06: 5e:b6:ac:bf:c0:8e:fa:03:07:54:d5:c6:9a:c2:10: a6:da:33:f8:d1:de:7d:3d:59:42:79:ac:e9:c4:62: f5:d3:8d:c2:65:b1:8f:a0:24:4a:b4:b3:00:62:d6: 2f:06:28:4f:e0:bd:65:46:10:8b:9c:ef:05:ef:56: fd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7D:3C:CF:1E:C2:CD:9F:1B:AB:1A:AA:E8:9C:5B:4C:0A:D1:D9:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/256306ed-07ad-387c-9937-97eaa8093c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:17:55:29:27:7b:72:b8:d7:e8:24:8c:58:84:fc:ba:05:36: f6:24:4c:18:46:53:c4:f5:60:ef:53:8f:b2:52:b0:79:13:ea: 87:22:ab:87:af:ec:c1:52:de:6f:ef:64:da:28:9b:04:f4:ca: 23:94:50:64:9c:01:c3:34:d7:df:2e:e9:56:0f:e9:d6:a8:91: 44:21:79:db:71:9b:af:be:83:cc:0f:8a:3f:44:a7:eb:15:5a: ae:b6:f3:24:47:ae:99:b3:e6:4b:31:86:98:f0:65:44:1a:d3: 1b:53:2f:38:f7:2f:56:a2:50:17:53:6b:63:5c:1c:da:69:92: 78:1f:c3:ab:27:4f:62:51:01:60:c9:85:15:4c:2b:6c:77:cc: b1:72:50:eb:09:66:b0:03:c5:d4:f4:09:2f:9b:e3:36:3a:d1: bf:e1:2c:47:57:bd:65:fb:e2:a6:26:fc:1d:48:38:43:10:6b: f9:03:14:2d:49:27:0f:4e:67:8b:f5:08:13:f9:cb:f6:cc:0a: 67:66:d7:86:10:a2:c9:71:c2:79:e0:64:e1:36:eb:35:46:3b: 34:bc:7c:c9:de:8b:a8:7e:55:ed:b4:46:59:b3:d5:13:ef:23: e0:f1:83:f9:fe:e9:a9:0a:e1:c7:89:f5:be:1f:57:3d:70:e4: eb:64:be:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZJVobtYjflWSCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZjM4NWFjYWQtZTA3Yy00OGM4LThlNzUtYzViMmQ2ODk1OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn5b522tvlihpDwpztA14pRkn/9hKllYBxZV UJeINsORlEiVa3sralgFW7mNqdnfy9RnGbM6Chr1oBb2ge0mZkiMS8gkc/iSSjHD ZXVPiW5QHDBeP/AD5IruXAXRT9yBELsw5QNO9kQAhe0r2qbO44L1a3Ri/94YG5KE v9kRoqRNqeYZyeHRtdMfPkeGQil33lpnir/wmkaK+x21Alo51tT8uSZxL77vsfLy Geonr87JxsVPHsG5TjWQhhuN5q4wOwZetqy/wI76AwdU1caawhCm2jP40d59PVlC eazpxGL1043CZbGPoCRKtLMAYtYvBihP4L1lRhCLnO8F71b9sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd9PM8ews2fG6saquicW0wK0dmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjU2MzA2ZWQtMDdhZC0z ODdjLTk5MzctOTdlYWE4MDkzYzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8XVSkne3K41+gkjFiE/LoFNvYkTBhGU8T1YO9Tj7JSsHkT6ociq4ev 7MFS3m/vZNoomwT0yiOUUGScAcM0198u6VYP6daokUQhedtxm6++g8wPij9Ep+sV Wq628yRHrpmz5ksxhpjwZUQa0xtTLzj3L1aiUBdTa2NcHNppkngfw6snT2JRAWDJ hRVMK2x3zLFyUOsJZrADxdT0CS+b4zY60b/hLEdXvWX74qYm/B1IOEMQa/kDFC1J Jw9OZ4v1CBP5y/bMCmdm14YQoslxwnngZOE26zVGOzS8fMnei6h+Ve20Rlmz1RPv I+Dxg/n+6akK4ceJ9b4fVz1w5OtkvjM= -----END CERTIFICATE-----Generated at Thu Aug 27 11:38:07 2026 by rpki-client