$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44acb445-26d6-3fdf-8220-9a3adef4f394.roa File: 44acb445-26d6-3fdf-8220-9a3adef4f394.roa (raw, json) Hash identifier: 3J6GwFRKddO9uQ2GQjtOCklnG7AoXpRT55FXuX4UwQo= Subject key identifier: B5:6A:FB:04:20:23:BC:62:E4:7B:29:F9:F9:14:9E:25:E1:BC:95:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FC2E01CBD6AC4DCE3E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44acb445-26d6-3fdf-8220-9a3adef4f394.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.20.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:fc:2e:01:cb:d6:ac:4d:ce:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=4d60ac0a-92eb-4a52-92e9-df20bd80579f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:42:f2:16:52:c0:1c:7b:9e:73:1b:8c:ca:eb: 85:90:80:4c:5b:1b:98:62:10:77:65:f5:47:e7:87: 66:0b:1d:9b:e7:90:00:b5:b6:68:89:3b:60:40:fc: de:39:e9:82:32:a3:c6:4e:25:39:ae:f7:fa:35:ea: af:52:ce:70:d2:ca:3e:73:cc:83:1c:7f:e3:e7:2e: 5c:dd:60:b8:da:cc:d4:03:2a:d2:a9:74:c9:9e:7f: 46:d7:ed:6b:fc:99:56:04:ab:5c:1e:93:fa:93:1b: db:a0:32:a5:33:ed:5a:f7:54:a4:a6:7a:47:f1:0f: af:93:8f:58:4e:29:6b:08:ef:37:ad:41:e0:54:48: c3:ec:61:ef:d6:17:d6:5f:05:3c:99:87:db:14:c0: 18:94:41:40:d3:52:a0:57:fd:ed:2a:8a:ae:71:b3: a2:0a:96:01:39:c3:e4:59:33:c4:07:87:90:ec:8d: 71:f0:81:e8:1d:59:10:c0:62:fd:20:2d:8e:7a:43: d3:b4:f7:62:48:56:54:7c:f6:58:52:0a:17:dc:1f: b6:f5:ef:96:a2:2b:42:04:30:79:26:1b:b8:df:ed: e6:c6:d0:87:93:45:13:d7:94:f8:94:26:29:79:a1: 77:79:af:80:d1:82:0f:fd:06:b9:60:d4:51:d0:b1: 30:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6A:FB:04:20:23:BC:62:E4:7B:29:F9:F9:14:9E:25:E1:BC:95:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44acb445-26d6-3fdf-8220-9a3adef4f394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fb:54:18:66:7d:57:32:0d:44:b2:16:b7:ec:ae:14:63:1b: 36:37:57:14:f2:83:6f:92:41:95:01:86:a1:29:c6:7f:83:33: 93:f8:ff:31:1a:d1:3a:a7:58:fa:35:31:c1:4f:56:b7:24:15: 85:fb:b9:f6:f6:f8:91:26:23:aa:e3:c2:6b:44:59:38:14:e0: 53:28:eb:19:04:17:c6:4b:a6:a4:0f:4a:54:44:54:a6:80:bd: a7:06:1e:e1:3e:16:d0:2f:a6:0c:0a:10:f6:9e:31:a4:9d:51: a7:b1:e1:c4:65:6b:4d:46:83:5c:27:81:16:d3:e6:71:e4:75: 4a:cc:64:84:7d:55:96:d0:32:27:ca:2c:44:ce:7e:ce:69:9e: 10:71:d1:73:f6:89:e9:46:43:52:2b:52:87:69:65:9c:1b:b2: 4d:06:1c:bd:df:71:ac:35:e0:6a:a6:a2:cc:3d:df:70:73:05: 14:b0:32:2e:a0:79:c5:c1:73:ed:f3:61:66:53:48:fb:f9:d2: fe:d6:d5:c1:88:18:a3:81:ef:c5:e3:4a:ba:33:26:43:33:76: cd:9c:80:7f:61:b1:75:62:63:c2:49:60:3a:ca:c6:46:05:17: 4f:a5:34:95:c5:5f:60:d6:27:aa:b7:23:f3:c7:58:34:bd:14: 48:13:15:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vwuAcvWrE3OPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk NGQ2MGFjMGEtOTJlYi00YTUyLTkyZTktZGYyMGJkODA1NzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgELyFlLAHHuecxuMyuuFkIBMWxuYYhB3ZfVH 54dmCx2b55AAtbZoiTtgQPzeOemCMqPGTiU5rvf6NeqvUs5w0so+c8yDHH/j5y5c 3WC42szUAyrSqXTJnn9G1+1r/JlWBKtcHpP6kxvboDKlM+1a91SkpnpH8Q+vk49Y TilrCO83rUHgVEjD7GHv1hfWXwU8mYfbFMAYlEFA01KgV/3tKoqucbOiCpYBOcPk WTPEB4eQ7I1x8IHoHVkQwGL9IC2OekPTtPdiSFZUfPZYUgoX3B+29e+WoitCBDB5 Jhu43+3mxtCHk0UT15T4lCYpeaF3ea+A0YIP/Qa5YNRR0LEw9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVq+wQgI7xi5Hsp+fkUniXhvJUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDRhY2I0NDUtMjZkNi0z ZmRmLTgyMjAtOWEzYWRlZjRmMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT7VBhmfVcyDUSyFrfsrhRjGzY3VxTyg2+SQZUBhqEpxn+DM5P4/zEa 0TqnWPo1McFPVrckFYX7ufb2+JEmI6rjwmtEWTgU4FMo6xkEF8ZLpqQPSlREVKaA vacGHuE+FtAvpgwKEPaeMaSdUaex4cRla01Gg1wngRbT5nHkdUrMZIR9VZbQMifK LETOfs5pnhBx0XP2ielGQ1IrUodpZZwbsk0GHL3fcaw14Gqmosw933BzBRSwMi6g ecXBc+3zYWZTSPv50v7W1cGIGKOB78XjSrozJkMzds2cgH9hsXViY8JJYDrKxkYF F0+lNJXFX2DWJ6q3I/PHWDS9FEgTFak= -----END CERTIFICATE-----Generated at Thu Aug 27 12:31:55 2026 by rpki-client