$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa File: 37e2a1fd-6045-3704-9912-f89b40158f53.roa (raw, json) Hash identifier: yRoh8r5vMgSYlTddVXmtZ1y5WbLJmE4NxFKIlVZRcE0= Subject key identifier: D3:6F:5A:20:78:6A:FE:95:D5:A8:17:57:B2:35:CD:76:C3:8B:05:4E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA7874118000164E27E3FCF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.20.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:41:18:00:01:64:e2:7e:3f:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a6fb37bc-d23a-40ef-8b11-c7df82681d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:58:9d:dd:14:c2:0c:a4:e6:36:58:67:66: 63:b4:ca:5c:a1:00:8f:09:2f:bd:09:78:27:8a:92: b3:12:ad:15:2c:b0:6e:f1:fe:a1:c5:45:80:db:9d: c0:0b:64:e0:e1:be:37:2c:cb:4c:34:7c:91:39:41: 4d:ab:9d:54:3f:00:37:5c:ec:5a:d2:de:fa:e3:04: 5b:38:80:f6:a2:e7:f0:45:db:9e:15:e3:ee:93:29: 03:c4:d7:1f:f1:fb:da:74:47:a6:21:d5:a2:35:ce: e7:8b:c2:95:c3:21:31:19:2f:be:d8:0c:a4:35:d3: 0a:08:4f:b9:09:a6:6d:89:8f:41:93:bd:e0:76:e8: dd:da:e8:11:51:e2:15:9e:cd:9f:49:28:ca:c7:74: bd:f0:bb:59:1d:58:86:fd:ab:6c:26:60:02:71:f7: 76:2b:1a:9f:52:8d:13:15:dc:f4:1a:dc:cf:3d:43: fd:6e:40:6f:64:2f:43:e3:3e:2a:29:71:33:51:05: a7:68:1e:76:60:0d:de:7c:a7:ea:d9:a7:4a:19:33: 22:d7:f2:90:8f:4e:3c:e9:26:8a:b9:1d:a0:a7:ea: 2a:db:f7:f3:e7:ef:f0:01:05:88:01:01:d5:9b:57: cb:16:7c:92:ec:f1:65:3c:e1:c6:9e:58:85:b1:5c: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6F:5A:20:78:6A:FE:95:D5:A8:17:57:B2:35:CD:76:C3:8B:05:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:98:41:b9:37:e0:b4:b1:0b:f7:96:ac:d7:c1:41:46:66:25: 25:47:7d:50:5d:7e:eb:3a:b3:ec:e5:2a:ce:3d:70:f4:35:83: 50:c2:8f:c3:45:a4:a9:10:69:cf:2d:9f:41:32:5f:b6:7f:1b: 21:98:1a:81:65:58:53:84:32:64:d2:db:73:a8:84:82:dd:d6: 79:87:14:27:5f:d9:58:72:54:47:19:c9:85:f6:02:8a:3b:97: 72:5d:90:f9:6d:9e:73:13:e3:33:ee:ea:2d:c3:e2:67:68:ab: 70:59:7a:fc:c4:9e:b7:3e:68:24:61:0a:a8:25:6a:e4:53:78: 08:08:48:79:29:2c:89:e7:58:88:1d:c2:de:97:1e:bd:38:4a: 2c:71:92:0f:6e:37:47:01:25:04:c1:f2:4d:77:63:fd:44:6d: e0:e1:2a:af:b6:5e:03:d8:2c:80:e0:b6:a4:c2:af:e1:9a:82: 6a:5e:79:99:06:2f:d0:51:34:c3:f0:58:29:55:7c:88:ef:e9: d6:ed:0e:72:b1:f1:3b:37:0e:d4:9e:5e:c6:dd:7d:82:60:4d: 93:9f:e0:f5:aa:72:3a:a3:99:35:e1:51:bb:09:dd:b9:8f:a2: 03:60:a3:b5:4c:12:3a:ca:83:b5:24:83:12:c3:3c:35:1c:cd: e9:2f:10:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh0EYAAFk4n4/zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTZmYjM3YmMtZDIzYS00MGVmLThiMTEtYzdkZjgyNjgxZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl11Ynd0Uwgyk5jZYZ2ZjtMpcoQCPCS+9CXgn ipKzEq0VLLBu8f6hxUWA253AC2Tg4b43LMtMNHyROUFNq51UPwA3XOxa0t764wRb OID2oufwRdueFePukykDxNcf8fvadEemIdWiNc7ni8KVwyExGS++2AykNdMKCE+5 CaZtiY9Bk73gdujd2ugRUeIVns2fSSjKx3S98LtZHViG/atsJmACcfd2KxqfUo0T Fdz0GtzPPUP9bkBvZC9D4z4qKXEzUQWnaB52YA3efKfq2adKGTMi1/KQj0486SaK uR2gp+oq2/fz5+/wAQWIAQHVm1fLFnyS7PFlPOHGnliFsVyElQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNvWiB4av6V1agXV7I1zXbDiwVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdlMmExZmQtNjA0NS0z NzA0LTk5MTItZjg5YjQwMTU4ZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKYQbk34LSxC/eWrNfBQUZmJSVHfVBdfus6s+zlKs49cPQ1g1DCj8NF pKkQac8tn0EyX7Z/GyGYGoFlWFOEMmTS23OohILd1nmHFCdf2VhyVEcZyYX2Aoo7 l3JdkPltnnMT4zPu6i3D4mdoq3BZevzEnrc+aCRhCqglauRTeAgISHkpLInnWIgd wt6XHr04Sixxkg9uN0cBJQTB8k13Y/1EbeDhKq+2XgPYLIDgtqTCr+GagmpeeZkG L9BRNMPwWClVfIjv6dbtDnKx8Ts3DtSeXsbdfYJgTZOf4PWqcjqjmTXhUbsJ3bmP ogNgo7VMEjrKg7UkgxLDPDUczekvENY= -----END CERTIFICATE-----Generated at Thu Aug 27 09:49:52 2026 by rpki-client