$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa File: 40e0b31e-01f2-317f-a8d0-77ce927a2303.roa (raw, json) Hash identifier: gPL8xdLOh32kBr5GaHcH/gXUQ9Sm3LsELEInT+e7gg4= Subject key identifier: C0:3D:3B:B3:71:98:87:2E:29:94:DA:97:5F:73:5A:35:32:8C:2C:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E5084A7D05821A49338446100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 98.20.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:a7:d0:58:21:a4:93:38:44:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=4d36b41d-7c9c-4541-ab74-51ff552d75d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:bb:e1:5f:08:20:ff:a9:3c:03:ca:3c:b4: c8:03:de:50:30:ac:d2:c8:0e:fd:79:0a:6a:ce:8e: 00:2c:11:3b:a5:16:b7:00:e9:00:a2:8f:f7:1a:1a: d7:29:ed:29:d7:fe:36:12:67:fa:c5:84:3c:e5:41: 23:63:84:b1:37:72:90:18:35:70:e9:1b:27:87:76: 0c:7d:f0:4d:ad:4e:d6:52:07:a6:32:92:0f:e3:a0: 7b:e4:f5:8a:c8:32:9f:94:0b:23:2f:b8:66:c9:97: b6:dc:a5:c8:fc:17:18:09:21:a3:57:33:7e:6b:6c: fd:57:87:5e:1a:99:10:21:b1:bb:76:e8:c7:37:48: 87:5e:3a:dc:cf:39:23:72:6c:24:a9:cc:61:2d:d4: 80:a6:63:90:10:6a:7c:b1:da:c9:bb:e5:a0:6a:49: 73:f2:be:31:25:86:ba:79:7c:43:86:e8:b5:cd:00: 83:e8:39:d1:7e:9f:9d:14:78:13:2f:63:cf:44:00: 55:c4:07:8f:c6:2f:62:0c:7f:55:ff:d2:69:c5:d7: 29:32:4e:8f:90:c0:3a:08:d4:4d:26:0e:6f:0b:2e: e5:30:bc:c1:63:c3:3a:3c:e4:70:fa:ba:91:8a:9b: 3c:8b:80:6d:db:44:c5:5e:c6:ef:d4:1e:c5:c4:82: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3D:3B:B3:71:98:87:2E:29:94:DA:97:5F:73:5A:35:32:8C:2C:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d9:c9:22:43:f2:7c:5d:0b:28:5d:de:9d:82:1b:4e:ea:0f: 1d:12:50:7f:a5:22:34:71:10:c3:db:2b:b8:06:9c:53:ef:d8: 47:9f:73:9c:1d:42:58:85:8c:69:5d:16:91:a0:f4:45:b5:bf: 14:6a:2f:0d:4a:2a:87:cc:6f:fb:39:1b:b6:1b:10:96:84:f3: 4f:c6:ff:4f:51:d9:53:33:56:0b:fd:19:4f:1e:76:1c:b4:21: 61:8b:e8:46:52:ed:99:8f:a4:b0:06:bb:2b:dd:ee:52:89:19: e7:f5:d0:47:2e:b5:0a:a9:48:a8:aa:c2:76:46:9d:10:2e:5b: bb:a5:a9:3f:a8:c5:43:fc:50:03:94:41:2b:7f:30:5a:71:7d: 27:15:22:68:07:74:a5:23:60:72:aa:70:dd:d2:cf:f3:db:3f: af:15:aa:9e:cf:d5:cc:d0:c7:ed:ec:7b:58:3d:35:b7:95:28: 5e:e2:f7:14:5d:90:3d:47:27:79:8f:14:bc:c5:fa:02:8f:78: 35:0c:38:e2:3f:37:9e:47:f1:1b:cf:bf:4d:ac:02:ec:11:a2: c1:4b:2a:15:79:9c:95:7f:25:a7:26:d8:79:00:06:d8:2e:32: ad:ef:04:3f:11:43:ae:d4:ce:c6:b0:92:fa:a6:cf:17:2f:98: c2:25:73:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhKfQWCGkkzhEYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk NGQzNmI0MWQtN2M5Yy00NTQxLWFiNzQtNTFmZjU1MmQ3NWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWu74V8IIP+pPAPKPLTIA95QMKzSyA79eQpq zo4ALBE7pRa3AOkAoo/3GhrXKe0p1/42Emf6xYQ85UEjY4SxN3KQGDVw6Rsnh3YM ffBNrU7WUgemMpIP46B75PWKyDKflAsjL7hmyZe23KXI/BcYCSGjVzN+a2z9V4de GpkQIbG7dujHN0iHXjrczzkjcmwkqcxhLdSApmOQEGp8sdrJu+Wgaklz8r4xJYa6 eXxDhui1zQCD6DnRfp+dFHgTL2PPRABVxAePxi9iDH9V/9JpxdcpMk6PkMA6CNRN Jg5vCy7lMLzBY8M6PORw+rqRips8i4Bt20TFXsbv1B7FxIJVFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMA9O7NxmIcuKZTal19zWjUyjCzeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDBlMGIzMWUtMDFmMi0z MTdmLWE4ZDAtNzdjZTkyN2EyMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhT2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzZySJD8nxdCyhd3p2CG07qDx0SUH+lIjRxEMPbK7gGnFPv2Eefc5wd QliFjGldFpGg9EW1vxRqLw1KKofMb/s5G7YbEJaE80/G/09R2VMzVgv9GU8edhy0 IWGL6EZS7ZmPpLAGuyvd7lKJGef10EcutQqpSKiqwnZGnRAuW7ulqT+oxUP8UAOU QSt/MFpxfScVImgHdKUjYHKqcN3Sz/PbP68Vqp7P1czQx+3se1g9NbeVKF7i9xRd kD1HJ3mPFLzF+gKPeDUMOOI/N55H8RvPv02sAuwRosFLKhV5nJV/Jacm2HkABtgu Mq3vBD8RQ67UzsawkvqmzxcvmMIlc5o= -----END CERTIFICATE-----Generated at Mon Jul 13 07:21:34 2026 by rpki-client