$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cd0b59c-6aa7-306d-a704-5429b41ddc02.roa File: 4cd0b59c-6aa7-306d-a704-5429b41ddc02.roa (raw, json) Hash identifier: a6A0rAgNcibd8LCczxnEuKZxwA2NGfnzf9/Tw2qfn84= Subject key identifier: AF:74:52:FB:99:B8:7D:14:81:EA:F5:11:94:CE:68:D3:C1:D6:18:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA8A4AC36C858EC9480D110EA Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cd0b59c-6aa7-306d-a704-5429b41ddc02.roa Signing time: Wed 29 Jul 2026 10:36:07 +0000 ROA not before: Wed 29 Jul 2026 10:36:07 +0000 ROA not after: Tue 27 Oct 2026 10:36:07 +0000 asID: 7029 IP address blocks: 98.18.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:a4:ac:36:c8:58:ec:94:80:d1:10:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 10:36:07 2026 GMT Not After : Oct 27 10:36:07 2026 GMT Subject: CN=ad677a24-d417-4d15-802c-6146ec317686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:3f:db:db:9e:b6:a9:1f:56:52:9d:86:1c: 1c:3b:7d:bf:c5:98:cc:eb:2a:e6:d9:a5:53:af:b1: 27:4d:3e:6c:a7:d4:37:64:29:8a:1e:83:da:36:d5: 8f:e0:a1:89:c0:89:6b:0f:52:e0:69:d8:55:38:97: 1d:2a:59:79:68:5d:7e:f5:52:cd:bc:d4:89:6e:52: 55:7f:69:48:6c:57:33:3f:97:c9:7f:1e:35:b7:d5: 05:39:ec:ec:5c:38:ec:f9:5e:67:be:d8:a2:6b:a9: d9:21:4d:b1:18:24:ed:e9:20:7c:ff:fe:9b:8e:8d: bf:9f:56:ba:1f:f9:19:45:ca:dc:df:b3:6b:fc:85: 92:ac:39:f5:c1:d0:71:9e:e6:0c:4c:c0:4b:61:c0: 04:7f:47:f2:93:09:d5:0d:53:5c:b7:af:1c:42:08: 60:b4:06:4b:31:24:8a:4e:ce:6d:00:65:f0:09:88: de:2a:bb:8a:75:b6:7e:3d:25:1a:1f:1f:42:61:e3: 84:6a:49:6b:51:5f:6e:59:85:38:4d:31:01:72:04: 4d:64:dd:e2:9a:6a:bf:83:9f:36:6f:4e:a5:61:ba: 53:2c:e9:04:1d:f3:7a:c8:59:33:34:9f:1e:bb:a9: a6:50:1c:c6:6d:6e:a0:bd:cd:da:cd:f6:53:e5:0c: 37:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:74:52:FB:99:B8:7D:14:81:EA:F5:11:94:CE:68:D3:C1:D6:18:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cd0b59c-6aa7-306d-a704-5429b41ddc02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:02:88:86:16:f6:c1:ec:6d:8b:27:88:21:2b:91:80:f8:54: 1c:ac:f3:58:4f:70:bc:08:fb:b9:75:80:a0:6c:fa:f9:b1:7e: 35:8c:28:e0:6c:7c:f8:8f:31:08:9a:58:8a:80:3e:62:f8:9d: 61:dc:ec:ef:57:d4:a4:bb:54:cb:75:8b:d6:69:4c:59:e0:0b: e5:d2:49:ec:fe:0d:f9:61:d3:4e:e4:a8:8c:fb:f8:ba:8c:7d: ea:f0:ec:25:b7:a0:07:c1:e5:df:86:57:4c:4d:7b:09:f8:d5: d2:9d:cf:cd:c3:14:2f:9d:9f:04:ab:14:fd:d0:c5:67:20:cb: 7b:c8:da:f8:c9:c6:35:6d:70:45:16:de:2c:be:86:de:ca:b1: d2:94:7c:03:0f:02:66:f4:15:bf:44:89:0e:09:a7:f9:6a:37: 07:8f:10:b8:12:b4:b8:59:7f:54:3f:c3:25:03:33:04:05:15: c6:57:b4:45:5d:9b:ab:eb:d5:47:48:96:41:fb:c3:0d:f9:62: 2e:69:3a:67:c3:29:b6:ad:c4:53:37:84:88:74:ca:4b:b4:c8: 0e:ae:64:ae:ef:c7:89:aa:fc:4b:42:86:8f:7f:c2:28:19:74: ae:f9:a6:69:10:70:44:d7:5e:73:29:ca:93:c7:20:08:a8:ef: 44:2d:5a:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6opKw2yFjslIDREOowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTEwMzYwN1oXDTI2MTAyNzEwMzYwN1owLzEtMCsGA1UEAxMk YWQ2NzdhMjQtZDQxNy00ZDE1LTgwMmMtNjE0NmVjMzE3Njg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8Q/29uetqkfVlKdhhwcO32/xZjM6yrm2aVT r7EnTT5sp9Q3ZCmKHoPaNtWP4KGJwIlrD1LgadhVOJcdKll5aF1+9VLNvNSJblJV f2lIbFczP5fJfx41t9UFOezsXDjs+V5nvtiia6nZIU2xGCTt6SB8//6bjo2/n1a6 H/kZRcrc37Nr/IWSrDn1wdBxnuYMTMBLYcAEf0fykwnVDVNct68cQghgtAZLMSSK Ts5tAGXwCYjeKruKdbZ+PSUaHx9CYeOEaklrUV9uWYU4TTEBcgRNZN3immq/g582 b06lYbpTLOkEHfN6yFkzNJ8eu6mmUBzGbW6gvc3azfZT5Qw3+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK90UvuZuH0Uger1EZTOaNPB1hiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGNkMGI1OWMtNmFhNy0z MDZkLWE3MDQtNTQyOWI0MWRkYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8CiIYW9sHsbYsniCErkYD4VBys81hPcLwI+7l1gKBs+vmxfjWMKOBs fPiPMQiaWIqAPmL4nWHc7O9X1KS7VMt1i9ZpTFngC+XSSez+Dflh007kqIz7+LqM ferw7CW3oAfB5d+GV0xNewn41dKdz83DFC+dnwSrFP3QxWcgy3vI2vjJxjVtcEUW 3iy+ht7KsdKUfAMPAmb0Fb9EiQ4Jp/lqNwePELgStLhZf1Q/wyUDMwQFFcZXtEVd m6vr1UdIlkH7ww35Yi5pOmfDKbatxFM3hIh0yku0yA6uZK7vx4mq/EtCho9/wigZ dK75pmkQcETXXnMpypPHIAio70QtWhQ= -----END CERTIFICATE-----Generated at Thu Aug 27 09:46:43 2026 by rpki-client