$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa File: 2df1ec2d-c15c-37ee-9be8-f210775488b5.roa (raw, json) Hash identifier: gm+Qfbs7/BvuPQ9dQ5cXBfz5SwhoOCMhYYzJgPiVBzk= Subject key identifier: 72:CF:77:80:F8:DB:43:B9:CF:22:43:36:ED:5B:A9:17:E4:BD:3D:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EC0A757D4FDC587F3719D8AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.17.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:57:d4:fd:c5:87:f3:71:9d:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=ca7f5bca-8287-4526-bc4e-8d95eb2bd4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b0:5b:fe:34:fc:6d:c4:92:66:9a:5d:4e:93: ca:ef:35:49:af:76:dd:26:85:8c:a3:37:80:2d:de: 87:e1:ec:4f:b9:4c:27:2c:3f:b4:5c:17:06:31:7b: 05:11:a3:b9:4a:f4:bd:f5:11:60:a6:f7:83:8c:07: 91:b9:bd:d9:2c:9c:27:64:7f:c8:b0:34:c7:65:10: d1:e0:3b:ad:c0:d5:bc:6b:8a:a8:8a:97:f8:e6:0c: a0:bc:db:d4:cb:21:b3:43:3e:5b:72:18:2e:21:76: ff:f8:54:fb:6f:d4:56:ab:25:9f:73:f0:24:55:5d: a4:cb:c2:ed:42:e1:f3:9c:ab:66:bf:fa:07:eb:4d: 8c:56:98:f1:d3:65:a3:b2:68:5d:9f:95:3e:b9:a6: 0c:b5:8f:8f:7b:6c:6a:76:70:57:73:e3:0f:4c:14: f3:72:69:0e:1e:ab:e2:55:5b:3c:1f:01:a7:54:f6: cb:7e:22:be:2d:f8:ee:d9:23:cf:66:c0:dd:de:20: 04:34:d2:9d:d8:05:c3:15:d9:4d:c7:04:2e:18:e7: c5:82:9c:2f:36:c1:73:24:04:08:87:4a:78:a3:2e: 72:b4:9c:08:3c:65:24:0a:25:ab:77:2f:93:90:a7: 01:3c:71:a2:d4:30:61:c3:42:0f:20:79:e4:20:13: 87:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CF:77:80:F8:DB:43:B9:CF:22:43:36:ED:5B:A9:17:E4:BD:3D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e1:f2:44:8b:41:91:e2:8a:58:62:5a:dd:b9:a5:e0:6d:d3: 19:5f:fd:e3:3b:ac:8b:e6:3a:47:db:e6:ed:ff:f2:2c:22:7a: a7:7d:ee:52:6d:75:23:ae:f0:13:8a:f9:11:e8:22:49:ad:f9: 73:ad:fb:e4:75:84:e5:a9:d1:bd:03:6f:22:41:c2:7e:4b:51: a1:0b:c6:55:d7:95:3f:f2:cc:76:dd:05:61:d3:9e:bd:6a:fd: b7:f3:55:13:17:e7:89:34:5f:ff:9f:f0:92:8f:66:f1:ad:76: 87:e3:8d:91:d0:8f:8e:08:d5:81:d3:63:78:e7:45:c4:b0:25: 6a:7d:83:48:9c:7f:ad:0c:5a:7a:b3:bd:94:dd:d4:1d:28:19: 16:5e:28:68:0b:d2:3c:f7:1f:87:ef:e8:9d:dc:59:72:18:e3: 5d:90:ee:9c:95:d8:2d:bd:98:89:ab:b8:42:f9:74:da:32:19: 6d:9d:a7:2e:d0:51:2a:05:ea:f3:06:0c:43:c9:31:b7:86:bf: 06:4e:00:8f:f7:af:1c:8c:f2:e4:f6:85:a9:9d:b5:0b:83:28: 65:e9:9e:1a:17:3e:90:cb:c8:08:c8:37:5b:f1:9e:fd:4d:22: 87:02:03:3f:b1:82:5a:d5:22:d8:3d:e9:3f:e1:05:37:5a:f1: 1e:76:10:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap1fU/cWH83GdisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk Y2E3ZjViY2EtODI4Ny00NTI2LWJjNGUtOGQ5NWViMmJkNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLBb/jT8bcSSZppdTpPK7zVJr3bdJoWMozeA Ld6H4exPuUwnLD+0XBcGMXsFEaO5SvS99RFgpveDjAeRub3ZLJwnZH/IsDTHZRDR 4DutwNW8a4qoipf45gygvNvUyyGzQz5bchguIXb/+FT7b9RWqyWfc/AkVV2ky8Lt QuHznKtmv/oH602MVpjx02Wjsmhdn5U+uaYMtY+Pe2xqdnBXc+MPTBTzcmkOHqvi VVs8HwGnVPbLfiK+Lfju2SPPZsDd3iAENNKd2AXDFdlNxwQuGOfFgpwvNsFzJAQI h0p4oy5ytJwIPGUkCiWrdy+TkKcBPHGi1DBhw0IPIHnkIBOHIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLPd4D420O5zyJDNu1bqRfkvT2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRmMWVjMmQtYzE1Yy0z N2VlLTliZTgtZjIxMDc3NTQ4OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfh8kSLQZHiilhiWt25peBt0xlf/eM7rIvmOkfb5u3/8iwieqd97lJt dSOu8BOK+RHoIkmt+XOt++R1hOWp0b0DbyJBwn5LUaELxlXXlT/yzHbdBWHTnr1q /bfzVRMX54k0X/+f8JKPZvGtdofjjZHQj44I1YHTY3jnRcSwJWp9g0icf60MWnqz vZTd1B0oGRZeKGgL0jz3H4fv6J3cWXIY412Q7pyV2C29mImruEL5dNoyGW2dpy7Q USoF6vMGDEPJMbeGvwZOAI/3rxyM8uT2hamdtQuDKGXpnhoXPpDLyAjIN1vxnv1N IocCAz+xglrVItg96T/hBTda8R52EEQ= -----END CERTIFICATE-----Generated at Thu Aug 27 12:30:12 2026 by rpki-client