$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa File: 3195ad33-c3b1-3618-884d-17725318a065.roa (raw, json) Hash identifier: pa1g7hmVagT+ykQzhhdwxe7YrvG31lhtWOeW40JSG0c= Subject key identifier: E2:58:E4:83:92:ED:30:3B:56:6F:21:69:E0:5F:77:7D:7E:09:6C:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FF3CCA0C5CDC7E000740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.20.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:ff:3c:ca:0c:5c:dc:7e:00:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=2b692e56-1949-40bf-ba46-cd5602894cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:fb:5f:06:ed:90:9a:a3:64:d2:6b:b0:d9: 01:ba:cb:f8:7d:30:12:15:4b:ec:18:44:85:85:42: bd:35:09:82:af:b6:fd:b6:a4:56:9b:e3:44:fb:5a: f6:04:1f:c4:30:14:e6:44:ba:be:67:97:99:c5:0c: 6e:5b:36:0b:00:99:fb:7f:b3:84:2d:f5:b0:6c:c2: 0f:2b:ab:a0:81:8a:af:3e:9c:85:da:16:ff:a6:a2: 17:c4:79:54:c9:92:c8:01:c8:97:65:7c:3c:1f:9c: e0:b9:b1:e1:55:97:b9:ae:e0:8e:2f:17:a6:46:2d: 13:5e:a1:8a:bd:66:97:b6:3a:ee:4b:71:76:25:d1: e7:4e:67:86:6b:0c:e7:7b:79:bd:36:b1:e1:01:ec: 76:dc:35:68:c1:da:89:33:72:2f:12:ce:ea:9d:a7: c1:95:08:7d:0e:02:28:c6:3e:f8:7d:ca:65:06:b4: 96:66:53:42:c3:2e:2d:31:e1:f8:6a:90:10:fa:6c: 94:d9:a9:f8:07:a3:d8:a5:db:c1:96:f4:5c:51:d1: 88:da:6e:09:f0:62:d4:bd:eb:a8:97:59:d2:90:f8: 3b:56:b6:a3:67:e4:9d:da:d0:d8:51:4a:a1:b2:28: c4:41:7e:78:dc:f9:4c:a4:37:5e:9b:ac:73:7b:11: 29:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:58:E4:83:92:ED:30:3B:56:6F:21:69:E0:5F:77:7D:7E:09:6C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:01:c6:2d:32:6a:70:cb:36:72:dd:80:19:e9:28:b1:4e:66: 76:37:6c:29:c1:d2:5d:a8:87:e1:6a:ca:81:77:9f:1f:0f:f1: e4:c3:2c:92:2c:0d:3a:b2:9b:3c:ab:af:be:34:e4:54:2f:59: 09:0a:7e:6d:90:39:f8:f8:8c:ee:fb:1a:41:6a:0e:cf:78:70: 4c:1d:10:4e:a4:44:c5:21:7b:4e:50:79:a0:91:e4:d1:3e:68: 0d:25:23:af:a0:67:84:d0:88:42:e3:1e:86:07:e5:26:15:f3: 99:4b:fd:9b:bb:63:b0:e2:8f:2a:f9:c0:0c:f6:40:8a:5d:d8: 5e:ee:fa:6f:d4:f5:f7:db:5f:c0:12:13:c0:1d:4f:2f:c6:b9: 96:93:46:79:40:73:fc:a5:35:22:f4:d6:7a:6c:69:b8:54:54: ba:45:90:94:c5:2c:ec:10:69:a4:c0:a7:22:02:b6:e1:e4:e4: a9:2d:75:e9:d1:c5:f6:af:d6:a5:f4:8c:69:63:ca:e4:97:d9: 8d:66:99:d9:7b:c2:29:4f:11:20:6d:40:f4:68:3a:3e:67:96: 73:06:8f:90:da:39:58:90:be:a0:7f:69:87:f3:6a:a5:a4:3d: 1a:20:aa:79:9d:6f:17:bf:5d:e3:03:d5:2c:d8:e2:dc:c0:88: ab:85:85:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5v88ygxc3H4AB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MmI2OTJlNTYtMTk0OS00MGJmLWJhNDYtY2Q1NjAyODk0Y2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurv7XwbtkJqjZNJrsNkBusv4fTASFUvsGESF hUK9NQmCr7b9tqRWm+NE+1r2BB/EMBTmRLq+Z5eZxQxuWzYLAJn7f7OELfWwbMIP K6uggYqvPpyF2hb/pqIXxHlUyZLIAciXZXw8H5zgubHhVZe5ruCOLxemRi0TXqGK vWaXtjruS3F2JdHnTmeGawzne3m9NrHhAex23DVowdqJM3IvEs7qnafBlQh9DgIo xj74fcplBrSWZlNCwy4tMeH4apAQ+myU2an4B6PYpdvBlvRcUdGI2m4J8GLUveuo l1nSkPg7VrajZ+Sd2tDYUUqhsijEQX543PlMpDdem6xzexEpBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJY5IOS7TA7Vm8haeBfd31+CWyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzE5NWFkMzMtYzNiMS0z NjE4LTg4NGQtMTc3MjUzMThhMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsBxi0yanDLNnLdgBnpKLFOZnY3bCnB0l2oh+FqyoF3nx8P8eTDLJIs DTqymzyrr7405FQvWQkKfm2QOfj4jO77GkFqDs94cEwdEE6kRMUhe05QeaCR5NE+ aA0lI6+gZ4TQiELjHoYH5SYV85lL/Zu7Y7Dijyr5wAz2QIpd2F7u+m/U9ffbX8AS E8AdTy/GuZaTRnlAc/ylNSL01npsabhUVLpFkJTFLOwQaaTApyICtuHk5KktdenR xfav1qX0jGljyuSX2Y1mmdl7wilPESBtQPRoOj5nlnMGj5DaOViQvqB/aYfzaqWk PRogqnmdbxe/XeMD1SzY4tzAiKuFhdE= -----END CERTIFICATE-----Generated at Thu Aug 27 09:49:57 2026 by rpki-client