$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3291ce7e-1c70-365c-8047-a30a9edf18a4.roa File: 3291ce7e-1c70-365c-8047-a30a9edf18a4.roa (raw, json) Hash identifier: 93I/WSpW6oFMW45paUTJASXY1XlI0sC2qdd3jolyIJY= Subject key identifier: 08:4E:95:CA:48:6B:7B:33:16:54:0D:7A:81:F7:37:FC:85:46:1E:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78FC87F370289202F3AA500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3291ce7e-1c70-365c-8047-a30a9edf18a4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.22.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:c8:7f:37:02:89:20:2f:3a:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1b3d7582-6e06-4e18-b0f8-b5d9f87ff842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:f4:66:c2:37:93:13:f1:23:ba:67:bf:f8: 63:93:3f:e0:31:ba:53:97:bd:40:d9:7d:67:2a:5a: f8:33:3d:f5:29:29:09:75:58:66:c6:fd:e1:93:38: f1:6d:ec:6a:e0:af:be:41:85:82:4f:29:83:f7:f2: 80:a4:4b:91:28:cb:99:01:c8:c1:20:cc:55:60:60: 3b:3c:ac:c7:28:02:a5:04:f2:2d:28:1e:8b:5b:02: c4:d9:e4:b3:59:6d:6f:fa:e6:01:0d:37:d2:d6:1c: 51:da:2f:fe:87:54:ce:a5:92:b4:23:84:0f:b5:dc: d8:30:46:3e:9b:8e:78:7f:b2:74:be:d9:44:dc:f9: cb:de:8b:b7:30:57:80:7f:9b:a8:2d:42:84:7d:51: d3:6f:0c:f4:d6:2a:4c:02:a6:3e:7e:45:48:ef:16: 52:16:84:bf:01:69:62:91:7d:e6:e0:c3:6b:97:4e: 3e:96:4b:1d:40:c4:71:90:ed:77:43:91:1a:7f:55: 2e:a9:28:1d:86:91:1f:82:be:cd:65:c7:52:7c:c7: 77:e3:b9:f4:23:0a:27:fc:03:31:cb:21:11:63:31: fc:81:41:49:02:f2:5c:1c:59:b6:eb:56:9a:4e:b6: 26:4d:5a:cd:95:79:02:d3:83:c3:d7:ed:59:43:38: 46:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4E:95:CA:48:6B:7B:33:16:54:0D:7A:81:F7:37:FC:85:46:1E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3291ce7e-1c70-365c-8047-a30a9edf18a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:50:57:39:49:0f:21:39:34:0c:c8:53:c4:9d:70:39:dc:65: ee:b8:aa:12:64:c1:b1:ac:4c:f6:24:8d:c1:8f:46:72:3c:dc: 1d:6a:39:d1:75:61:68:62:69:b7:7f:98:38:cf:3f:91:b1:3a: ce:c9:52:a0:ba:37:44:74:dc:0d:59:64:4c:3a:f7:97:25:2a: 3c:b6:21:29:2e:2f:86:5b:21:96:ca:42:21:0d:c9:38:d0:d0: 87:64:e2:17:8c:f3:86:70:5d:01:7b:cb:7f:da:d5:31:da:af: 8e:f1:0b:59:98:07:79:01:67:cb:aa:0b:b2:f3:81:de:c1:e1: e7:10:72:da:33:4a:5b:a8:9b:76:a8:98:47:b1:32:26:91:16: d1:cc:6b:3c:df:0a:db:46:a4:ff:f1:2e:97:50:90:c7:52:4d: 94:ec:ad:88:13:9b:77:bf:88:58:45:7c:4d:ed:14:8a:c8:93: c9:68:63:b7:88:75:4b:a6:e8:1e:d7:29:e8:f5:c6:98:ec:41: 6a:d1:0e:d3:c0:d6:37:68:70:76:bb:bb:fc:02:2e:7e:b5:2f: e8:e6:2d:52:ca:95:d1:e1:0b:9d:e9:70:25:cf:02:91:a1:d1: 2b:3f:f1:d2:4c:3b:7a:0d:cf:8c:dd:63:e9:28:34:99:66:a2: b7:d6:1f:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj8h/NwKJIC86pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWIzZDc1ODItNmUwNi00ZTE4LWIwZjgtYjVkOWY4N2ZmODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoD0ZsI3kxPxI7pnv/hjkz/gMbpTl71A2X1n Klr4Mz31KSkJdVhmxv3hkzjxbexq4K++QYWCTymD9/KApEuRKMuZAcjBIMxVYGA7 PKzHKAKlBPItKB6LWwLE2eSzWW1v+uYBDTfS1hxR2i/+h1TOpZK0I4QPtdzYMEY+ m454f7J0vtlE3PnL3ou3MFeAf5uoLUKEfVHTbwz01ipMAqY+fkVI7xZSFoS/AWli kX3m4MNrl04+lksdQMRxkO13Q5Eaf1UuqSgdhpEfgr7NZcdSfMd347n0Iwon/AMx yyERYzH8gUFJAvJcHFm261aaTrYmTVrNlXkC04PD1+1ZQzhGzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhOlcpIa3szFlQNeoH3N/yFRh64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzI5MWNlN2UtMWM3MC0z NjVjLTgwNDctYTMwYTllZGYxOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpQVzlJDyE5NAzIU8SdcDncZe64qhJkwbGsTPYkjcGPRnI83B1qOdF1 YWhiabd/mDjPP5GxOs7JUqC6N0R03A1ZZEw695clKjy2ISkuL4ZbIZbKQiENyTjQ 0Idk4heM84ZwXQF7y3/a1THar47xC1mYB3kBZ8uqC7Lzgd7B4ecQctozSluom3ao mEexMiaRFtHMazzfCttGpP/xLpdQkMdSTZTsrYgTm3e/iFhFfE3tFIrIk8loY7eI dUum6B7XKej1xpjsQWrRDtPA1jdocHa7u/wCLn61L+jmLVLKldHhC53pcCXPApGh 0Ss/8dJMO3oNz4zdY+koNJlmorfWHxA= -----END CERTIFICATE-----Generated at Thu Aug 27 11:37:32 2026 by rpki-client