$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa File: 8935d049-ac61-3720-adee-5caafdfdacfa.roa (raw, json) Hash identifier: nMRARinAxCMYLZbZQIxpe8tNWUq/fAHhjvr2v+Rej5c= Subject key identifier: 12:26:40:DD:21:2C:C6:2D:8B:40:B0:DA:54:C8:53:44:E8:21:9D:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA79AB6E50F92785A24E36E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.20.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:b6:e5:0f:92:78:5a:24:e3:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ea381709-4d60-43e0-8932-02c0f83f5573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:28:c0:42:a6:06:47:7c:12:2a:b5:f5:0b: f0:3e:ba:76:85:cf:dd:c1:62:df:4f:d9:0e:43:ec: dd:cb:5d:b7:77:09:71:eb:66:43:2e:31:11:3d:77: b9:91:04:66:15:5d:28:8b:09:17:0f:e8:bc:98:5c: f6:27:62:89:68:dc:bc:68:f6:8b:7e:c0:f1:25:a0: a1:f0:92:d2:0c:4d:bf:ba:11:93:36:48:f3:93:1a: e6:ab:ea:d8:4b:bf:bc:5e:92:7f:bc:e0:d9:ae:f4: 8f:04:b9:8b:7a:95:fe:d6:76:5f:56:70:01:dd:31: f2:a0:b7:58:89:ba:e6:b4:f9:43:60:60:80:c5:dc: d7:6e:1b:0b:5a:a8:cf:8f:58:3a:0f:4e:3b:85:24: 24:75:c9:bf:0c:a0:61:5f:29:66:0b:d4:0b:1f:6c: d1:fd:d2:cb:c9:bd:1e:55:1c:c7:72:fe:a5:54:e9: e3:de:07:38:fb:ad:ed:af:6f:90:29:5e:fe:ac:59: e0:04:44:b4:f2:44:b8:72:a7:f6:e6:89:b7:f3:72: a7:83:06:da:7d:af:c3:7e:25:41:b8:0d:2c:b2:2a: 7f:7d:5a:41:9e:ca:64:cf:f8:d2:ce:c5:56:ed:60: 44:76:b1:18:a3:50:24:7c:a8:fa:64:a2:79:15:88: 19:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:26:40:DD:21:2C:C6:2D:8B:40:B0:DA:54:C8:53:44:E8:21:9D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a1:31:b8:ba:22:0b:48:a6:48:4a:70:08:59:79:da:ad:b0: 65:02:48:0c:d7:78:80:82:1d:d1:25:36:07:94:b0:2f:22:31: 84:1c:3d:a0:fd:33:3c:f7:ef:0c:0c:8e:73:0f:1c:ec:89:4a: 29:b0:89:d0:89:1b:68:02:0a:ba:37:34:65:34:c8:55:77:3e: 29:40:73:0c:41:38:24:a5:b4:eb:21:f4:6b:69:b1:62:e5:a9: 4e:fd:b5:44:4e:d2:cb:b9:88:c3:8b:ea:b2:02:66:a3:a7:23: 49:a9:bd:30:4c:72:4e:20:1f:f9:63:6f:10:f5:67:fc:87:d9: ed:81:0c:5a:1c:5d:d0:ca:7e:55:8c:2c:13:c0:54:03:48:54: 51:f1:13:9e:a6:f9:45:a3:3a:fd:df:f3:87:8d:a7:9d:4b:74: 38:09:4a:5a:42:1e:7c:3c:1e:bd:fa:cc:d9:5c:cc:75:9e:59: ff:36:d2:72:ab:28:f7:16:52:e2:0f:17:53:b4:25:ad:39:13: 22:dd:78:b4:76:92:c2:75:7d:b0:57:70:9f:03:ed:ba:10:92: d3:ed:ce:0e:3e:58:09:7d:37:0a:ae:be:8a:d4:d7:6b:21:9b: 58:3a:37:6d:07:30:5b:5e:6b:46:d9:9b:9d:f5:8c:41:69:82: b7:44:da:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmrblD5J4WiTjboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWEzODE3MDktNGQ2MC00M2UwLTg5MzItMDJjMGY4M2Y1NTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrwowEKmBkd8Eiq19QvwPrp2hc/dwWLfT9kO Q+zdy123dwlx62ZDLjERPXe5kQRmFV0oiwkXD+i8mFz2J2KJaNy8aPaLfsDxJaCh 8JLSDE2/uhGTNkjzkxrmq+rYS7+8XpJ/vODZrvSPBLmLepX+1nZfVnAB3THyoLdY ibrmtPlDYGCAxdzXbhsLWqjPj1g6D047hSQkdcm/DKBhXylmC9QLH2zR/dLLyb0e VRzHcv6lVOnj3gc4+63tr2+QKV7+rFngBES08kS4cqf25om383Kngwbafa/DfiVB uA0ssip/fVpBnspkz/jSzsVW7WBEdrEYo1AkfKj6ZKJ5FYgZtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBImQN0hLMYti0Cw2lTIU0ToIZ0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODkzNWQwNDktYWM2MS0z NzIwLWFkZWUtNWNhYWZkZmRhY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABihMbi6IgtIpkhKcAhZedqtsGUCSAzXeICCHdElNgeUsC8iMYQcPaD9 Mzz37wwMjnMPHOyJSimwidCJG2gCCro3NGU0yFV3PilAcwxBOCSltOsh9GtpsWLl qU79tURO0su5iMOL6rICZqOnI0mpvTBMck4gH/ljbxD1Z/yH2e2BDFocXdDKflWM LBPAVANIVFHxE56m+UWjOv3f84eNp51LdDgJSlpCHnw8Hr36zNlczHWeWf820nKr KPcWUuIPF1O0Ja05EyLdeLR2ksJ1fbBXcJ8D7boQktPtzg4+WAl9NwquvorU12sh m1g6N20HMFtea0bZm531jEFpgrdE2kc= -----END CERTIFICATE-----Generated at Thu Aug 27 12:26:01 2026 by rpki-client