$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa File: 4c5f2c02-022b-371a-8966-9ae694c3b539.roa (raw, json) Hash identifier: wFKxev3yx8HpXYn2dyMDBqN9YdFrJ/FFRHxIUOw5nhc= Subject key identifier: 9D:73:07:FF:C8:83:ED:A7:53:D4:E4:D9:23:94:D7:F4:0B:62:EA:63 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78741025465C5CDE4561600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.20.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:41:02:54:65:c5:cd:e4:56:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e37b3608-8039-457b-930e-57858bca9ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:d1:9d:94:9c:b3:b3:22:6e:96:e7:47:48: 90:9e:8f:c5:93:a9:c3:8a:e7:fd:1e:a6:0b:cb:a4: 03:bf:39:04:75:e4:e2:d8:0e:81:e0:33:38:80:95: f8:21:a7:aa:be:e4:5c:ce:f5:65:87:2e:87:74:58: c4:7b:16:44:1b:db:cc:4e:54:59:d0:a9:b3:ab:a2: 88:30:58:c4:37:c2:49:bd:54:2d:ff:af:97:14:da: 4a:9f:24:3d:cc:4c:94:2f:9d:08:02:d3:57:44:54: 89:e2:6c:b5:6e:b4:66:d2:4f:e9:62:7d:b1:3d:ea: 58:85:44:a4:2d:dc:25:3c:9d:20:3b:4a:b1:b1:73: 49:e1:af:64:fc:1b:cd:3d:a1:3c:80:76:fe:21:44: f5:f0:b4:2e:56:a1:f7:f3:bd:0e:bd:c9:b9:bc:25: 22:38:44:79:dd:24:f8:70:9b:1a:94:de:30:6b:c1: 95:87:d1:11:f2:7f:dc:0c:7e:eb:6b:4b:99:ab:4e: 2b:bc:e7:2f:d8:9a:7c:7e:35:57:7a:55:15:0b:a1: d4:65:31:ef:e0:14:f7:2f:90:74:f6:87:90:73:cc: 19:ec:b1:c9:f2:0f:16:aa:a8:8f:a7:08:f4:83:c7: 4a:61:ce:a9:0b:23:8a:21:1f:79:cc:95:58:c3:f1: 51:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:73:07:FF:C8:83:ED:A7:53:D4:E4:D9:23:94:D7:F4:0B:62:EA:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:44:4b:24:e0:37:98:49:4e:fa:ed:dd:85:21:7f:77:0f:f1: bf:71:5e:5a:10:bb:f7:b3:5a:f6:c4:25:ba:fa:e1:12:6c:82: 22:42:8d:4a:e7:a0:ca:08:e1:83:99:e4:6d:a2:42:f1:79:2c: c3:3a:f6:7a:1a:cb:84:2d:81:c2:a4:49:52:ae:46:91:1e:f8: 94:26:75:ad:fd:ab:d3:31:c9:21:81:37:36:89:0a:7e:6f:0a: e4:3b:6e:ca:d7:dd:52:f6:a1:fb:45:7f:15:7b:ba:15:09:c2: 76:a2:e2:49:e5:2d:5b:5e:37:44:83:d6:2e:3f:41:4c:37:95: e2:1e:6b:5d:cf:f8:6f:84:35:12:aa:20:d4:3f:b2:50:9b:b6: 45:29:a2:a6:03:10:15:fc:f4:04:b7:47:e5:53:e2:24:5f:c7: 25:b3:d0:3d:fb:b2:57:af:35:6f:bb:ad:04:3f:7c:05:88:aa: b7:be:97:69:6f:17:e3:44:fb:85:b3:fd:78:83:97:42:8d:b8: 95:25:a1:b0:7f:de:48:f0:fc:16:bd:1a:ae:c9:6b:38:88:ea: b4:9a:3b:9c:b1:1e:55:1a:f2:01:d0:5e:9e:07:59:b8:6a:59: ca:28:da:f9:44:49:d9:ae:c1:9d:a3:3e:f0:04:ff:24:00:8f: 23:f9:82:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh0ECVGXFzeRWFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTM3YjM2MDgtODAzOS00NTdiLTkzMGUtNTc4NThiY2E5YWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngTRnZScs7MibpbnR0iQno/Fk6nDiuf9HqYL y6QDvzkEdeTi2A6B4DM4gJX4IaeqvuRczvVlhy6HdFjEexZEG9vMTlRZ0Kmzq6KI MFjEN8JJvVQt/6+XFNpKnyQ9zEyUL50IAtNXRFSJ4my1brRm0k/pYn2xPepYhUSk LdwlPJ0gO0qxsXNJ4a9k/BvNPaE8gHb+IUT18LQuVqH3870Ovcm5vCUiOER53ST4 cJsalN4wa8GVh9ER8n/cDH7ra0uZq04rvOcv2Jp8fjVXelUVC6HUZTHv4BT3L5B0 9oeQc8wZ7LHJ8g8WqqiPpwj0g8dKYc6pCyOKIR95zJVYw/FRzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1zB//Ig+2nU9Tk2SOU1/QLYupjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM1ZjJjMDItMDIyYi0z NzFhLTg5NjYtOWFlNjk0YzNiNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhThMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtESyTgN5hJTvrt3YUhf3cP8b9xXloQu/ezWvbEJbr64RJsgiJCjUrn oMoI4YOZ5G2iQvF5LMM69noay4QtgcKkSVKuRpEe+JQmda39q9MxySGBNzaJCn5v CuQ7bsrX3VL2oftFfxV7uhUJwnai4knlLVteN0SD1i4/QUw3leIea13P+G+ENRKq INQ/slCbtkUpoqYDEBX89AS3R+VT4iRfxyWz0D37slevNW+7rQQ/fAWIqre+l2lv F+NE+4Wz/XiDl0KNuJUlobB/3kjw/Ba9Gq7JaziI6rSaO5yxHlUa8gHQXp4HWbhq Wcoo2vlESdmuwZ2jPvAE/yQAjyP5gvE= -----END CERTIFICATE-----Generated at Thu Aug 27 11:38:40 2026 by rpki-client