$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/752baa26-2a71-34df-82d7-547a2a8ddd96.roa File: 752baa26-2a71-34df-82d7-547a2a8ddd96.roa (raw, json) Hash identifier: I0Y9h5iW5pfQ6W1IN74wn/hHTZ5LPn5rXnnAI+cb/5E= Subject key identifier: 09:D3:10:A7:79:69:3A:2C:DA:18:BB:22:BD:E9:E1:CD:8D:8C:16:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E557F67429C90AA7E480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/752baa26-2a71-34df-82d7-547a2a8ddd96.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 98.20.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e5:57:f6:74:29:c9:0a:a7:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=d24c505b-e4ba-4dfe-9026-4b3efb1049a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:25:c1:1b:61:1f:26:9b:b3:68:bc:1d:b2: 85:6d:73:54:61:14:fa:f3:9a:0a:37:e4:01:56:68: 89:c8:e9:39:93:b1:bd:ee:0e:5b:d2:fd:48:74:51: 99:d6:a0:1a:94:53:4f:29:b5:09:48:a2:55:2d:6d: 5f:08:4f:2a:db:14:47:a3:f0:fa:47:3a:c8:ff:ff: 64:4d:46:e6:dd:a4:fb:93:38:f7:c3:92:8c:81:7b: 81:9c:de:9d:ea:6b:40:97:f0:26:77:7a:7b:d2:2a: be:50:87:04:7c:f1:72:bc:3a:00:9c:0b:9b:d3:5e: c8:b8:fa:d1:ad:98:48:ab:41:0e:6f:36:58:04:bd: a4:16:48:5d:cd:13:0e:cf:7a:f7:91:cb:a4:16:2d: b8:74:4f:68:0b:ee:44:b0:50:3f:7f:7c:8f:17:94: 1a:58:fe:8d:d0:fa:84:4a:e9:20:e0:87:15:5a:44: d5:79:39:9b:3f:d7:06:f5:4a:49:b5:0d:31:57:00: f3:4b:a9:51:6a:7d:0e:c6:f1:41:16:70:25:02:98: 54:07:0a:74:d4:2a:0e:06:4f:68:50:d8:1c:61:74: 8c:c0:8f:c9:92:46:e3:09:f9:b1:7f:0c:b9:52:d7: 98:50:84:aa:ac:c8:c5:58:71:15:95:ac:f3:91:97: 99:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D3:10:A7:79:69:3A:2C:DA:18:BB:22:BD:E9:E1:CD:8D:8C:16:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/752baa26-2a71-34df-82d7-547a2a8ddd96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:85:d0:fa:fb:6b:97:12:92:8b:17:b3:80:6f:75:72:a7:95: 52:48:e2:d9:9a:aa:6f:e8:b4:f2:30:c2:6d:67:7c:32:29:22: c6:83:93:21:06:34:26:a5:44:58:27:60:b1:f6:ee:f9:95:17: 62:c7:8b:bb:3e:61:ae:4c:21:63:fc:47:19:3b:e0:45:90:7b: a4:37:de:2d:cb:82:e2:f4:cc:6e:fc:11:26:95:65:19:c3:8a: 5b:58:5a:8c:9d:50:2e:9a:c5:82:e8:83:b7:5d:d1:82:23:65: 15:89:16:bc:1e:57:b2:60:c3:37:01:09:72:69:7c:e5:af:53: 56:67:31:77:eb:9d:e1:d5:a2:3e:73:ca:68:13:82:61:07:c2: 97:bc:61:89:1a:8c:51:c6:df:03:df:4d:02:7a:16:c4:24:af: 5d:8a:d7:5e:63:ec:c4:04:3e:30:0e:67:e2:0d:42:8d:50:a7: 07:59:ad:65:9c:02:a3:d7:ac:c9:ae:45:34:2d:a9:04:97:1d: de:59:21:b7:2e:db:5b:a9:d0:bd:17:73:15:86:f6:0a:54:15: 66:0f:03:a0:8e:f7:64:7e:2b:2e:82:d2:87:4d:87:7d:50:53: c2:6d:86:6b:03:27:98:40:db:19:ca:6b:90:e8:77:1f:cc:eb: 01:4e:91:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseVX9nQpyQqn5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZDI0YzUwNWItZTRiYS00ZGZlLTkwMjYtNGIzZWZiMTA0OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP8lwRthHyabs2i8HbKFbXNUYRT685oKN+QB VmiJyOk5k7G97g5b0v1IdFGZ1qAalFNPKbUJSKJVLW1fCE8q2xRHo/D6RzrI//9k TUbm3aT7kzj3w5KMgXuBnN6d6mtAl/Amd3p70iq+UIcEfPFyvDoAnAub017IuPrR rZhIq0EObzZYBL2kFkhdzRMOz3r3kcukFi24dE9oC+5EsFA/f3yPF5QaWP6N0PqE Sukg4IcVWkTVeTmbP9cG9UpJtQ0xVwDzS6lRan0OxvFBFnAlAphUBwp01CoOBk9o UNgcYXSMwI/JkkbjCfmxfwy5UteYUISqrMjFWHEVlazzkZeZAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnTEKd5aTos2hi7Ir3p4c2NjBb8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzUyYmFhMjYtMmE3MS0z NGRmLTgyZDctNTQ3YTJhOGRkZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2F0Pr7a5cSkosXs4BvdXKnlVJI4tmaqm/otPIwwm1nfDIpIsaDkyEG NCalRFgnYLH27vmVF2LHi7s+Ya5MIWP8Rxk74EWQe6Q33i3LguL0zG78ESaVZRnD iltYWoydUC6axYLog7dd0YIjZRWJFrweV7JgwzcBCXJpfOWvU1ZnMXfrneHVoj5z ymgTgmEHwpe8YYkajFHG3wPfTQJ6FsQkr12K115j7MQEPjAOZ+INQo1QpwdZrWWc AqPXrMmuRTQtqQSXHd5ZIbcu21up0L0XcxWG9gpUFWYPA6CO92R+Ky6C0odNh31Q U8JthmsDJ5hA2xnKa5Dodx/M6wFOkSI= -----END CERTIFICATE-----Generated at Thu Aug 27 15:17:32 2026 by rpki-client