$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4814a9e0-3358-3815-8a3b-85e799e84ee3.roa File: 4814a9e0-3358-3815-8a3b-85e799e84ee3.roa (raw, json) Hash identifier: 3CH5BUZxGm6M1Tq7bdfO4DHKSSQp+gHrX0BgZonY4qI= Subject key identifier: 7D:DC:A0:24:CE:A8:14:B0:42:CA:6F:48:AB:4E:3F:97:79:77:DF:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA7874094D554CF22876A9880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4814a9e0-3358-3815-8a3b-85e799e84ee3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.16.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:40:94:d5:54:cf:22:87:6a:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cf99b33f-35c5-4e3c-992e-6ecdb0652fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:b8:34:96:bf:b5:94:6a:82:4b:13:5c:3d: f1:de:75:20:1a:59:02:61:81:25:fc:d5:53:08:23: 17:75:9e:06:e8:fa:d6:1c:00:f0:eb:0b:e5:28:7b: d7:a0:9e:c3:60:18:e1:cb:69:20:7c:9a:3a:4b:9a: 32:0d:1b:6f:54:51:45:02:86:ab:b9:9b:c0:71:6c: 81:f5:86:d6:ba:f6:d5:74:64:b6:37:ca:10:14:59: d4:ff:5e:e4:a3:3b:3d:47:b5:b6:6d:e7:e0:05:d3: fc:4e:c4:09:e1:4a:78:b9:30:40:b3:b4:6e:c5:23: 4c:b1:02:1f:f8:c4:fa:91:f8:82:fc:31:a4:56:a9: 4d:e0:50:a2:9b:a0:a9:68:13:3b:7b:8f:c5:ba:ca: 8e:b4:d1:9c:cb:35:d8:32:05:f8:cd:ff:02:d7:68: 50:49:85:b0:f6:a2:db:38:a9:4e:df:82:0a:e3:6b: cc:e4:b2:8d:4a:ad:3a:ac:2b:24:ec:72:1e:ff:fc: 1f:30:8d:da:c6:07:fb:4a:8c:3c:4a:2a:42:83:41: 39:e7:ad:a9:38:db:62:9a:b2:e4:60:c4:5a:ee:5e: c4:55:d5:93:33:78:c8:ed:88:76:0a:e6:86:92:86: 6e:87:76:d9:ac:fd:40:95:67:ba:f1:29:4a:f2:33: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DC:A0:24:CE:A8:14:B0:42:CA:6F:48:AB:4E:3F:97:79:77:DF:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4814a9e0-3358-3815-8a3b-85e799e84ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:75:10:02:07:b8:05:bd:0e:37:ad:58:1c:36:51:14:8d:28: c9:a7:80:b0:f1:dc:1d:65:47:39:88:ec:8e:e6:b1:8c:3f:85: 40:6f:ce:27:ab:ea:9f:a9:45:e0:79:70:a9:8e:b9:9d:55:92: f8:ef:d4:6d:cb:a2:19:ed:23:e1:25:4b:23:be:d1:ea:6a:59: 4a:a3:9a:9d:d4:5b:e9:b8:79:20:9c:cf:87:6f:b9:32:af:a4: b2:71:32:32:d2:a0:b0:88:c3:d1:5f:aa:14:f8:5c:84:21:e5: 77:82:74:a2:ec:6b:8a:27:26:cd:74:e3:3f:a9:db:c8:e7:00: ef:ab:37:7c:78:57:c2:6d:2d:bf:b4:6b:c2:03:2d:32:ca:41: 9e:de:98:71:96:dd:f5:f3:58:d9:89:1e:cb:c0:80:59:39:8a: 97:5a:1c:fe:a4:de:00:7b:0b:32:58:dd:74:eb:31:a4:f1:6c: 9b:24:2b:66:45:8b:ae:41:0d:03:c6:43:89:10:78:1f:16:58: d5:44:b7:b4:26:93:8c:8d:87:78:55:7e:e3:20:4c:8b:46:60: a2:aa:ca:7d:8d:18:93:84:22:77:6e:c8:ab:50:4d:88:14:8b: 94:09:c3:20:be:d5:dd:47:5d:bf:cc:3d:ab:d0:14:5b:ac:cc: dd:b1:00:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh0CU1VTPIodqmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2Y5OWIzM2YtMzVjNS00ZTNjLTk5MmUtNmVjZGIwNjUyZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tq4NJa/tZRqgksTXD3x3nUgGlkCYYEl/NVT CCMXdZ4G6PrWHADw6wvlKHvXoJ7DYBjhy2kgfJo6S5oyDRtvVFFFAoaruZvAcWyB 9YbWuvbVdGS2N8oQFFnU/17kozs9R7W2befgBdP8TsQJ4Up4uTBAs7RuxSNMsQIf +MT6kfiC/DGkVqlN4FCim6CpaBM7e4/FusqOtNGcyzXYMgX4zf8C12hQSYWw9qLb OKlO34IK42vM5LKNSq06rCsk7HIe//wfMI3axgf7Sow8SipCg0E5562pONtimrLk YMRa7l7EVdWTM3jI7Yh2CuaGkoZuh3bZrP1AlWe68SlK8jOOpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3coCTOqBSwQspvSKtOP5d5d985MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDgxNGE5ZTAtMzM1OC0z ODE1LThhM2ItODVlNzk5ZTg0ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp1EAIHuAW9DjetWBw2URSNKMmngLDx3B1lRzmI7I7msYw/hUBvzier 6p+pReB5cKmOuZ1Vkvjv1G3LohntI+ElSyO+0epqWUqjmp3UW+m4eSCcz4dvuTKv pLJxMjLSoLCIw9FfqhT4XIQh5XeCdKLsa4onJs104z+p28jnAO+rN3x4V8JtLb+0 a8IDLTLKQZ7emHGW3fXzWNmJHsvAgFk5ipdaHP6k3gB7CzJY3XTrMaTxbJskK2ZF i65BDQPGQ4kQeB8WWNVEt7Qmk4yNh3hVfuMgTItGYKKqyn2NGJOEInduyKtQTYgU i5QJwyC+1d1HXb/MPavQFFuszN2xAOA= -----END CERTIFICATE-----Generated at Thu Aug 27 16:09:39 2026 by rpki-client