$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b607dc-2978-3b44-84fa-7abdd10b450a.roa File: 99b607dc-2978-3b44-84fa-7abdd10b450a.roa (raw, json) Hash identifier: kOAQBoZbOQsZY7l7MnmIwajnWClglse+c+md+ynhugo= Subject key identifier: 6A:6F:CF:A8:AE:7B:C9:67:5D:92:B7:5C:FA:AD:D5:9C:9C:47:AF:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E5FDF6DF30A91B2E4FF0A7BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b607dc-2978-3b44-84fa-7abdd10b450a.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 98.21.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:6d:f3:0a:91:b2:e4:ff:0a:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=6918f36f-fbb7-4c3c-89ce-caedb5d464c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:0c:e3:08:d6:b5:72:87:6c:9b:4b:3c:46: 0d:83:b3:ef:2d:5a:59:29:7d:20:d4:c7:11:e7:41: af:c6:ed:96:fe:c6:58:f7:81:7a:3d:6a:07:1d:e5: 90:37:e7:6a:2c:a9:75:49:c8:b6:f2:97:f5:16:13: c8:f6:5f:a6:4a:8e:a8:f1:f7:26:d7:13:56:b4:0f: 77:bb:59:4b:dc:5f:13:9f:94:1f:c9:5b:68:b8:e8: bc:a0:89:98:59:2e:d2:0c:ab:80:75:ce:5e:35:9c: f1:52:25:23:aa:fb:93:2e:ac:7f:f3:3a:e6:86:7f: 9b:ad:b1:1b:ab:fe:13:73:f0:5c:b6:f3:74:bf:92: a6:25:58:f4:d1:15:67:8e:18:b3:85:39:1f:ff:ec: ae:ad:bb:24:66:40:f4:c7:c0:48:e1:d3:22:08:be: a7:51:82:d7:bc:a3:c7:e6:a3:ab:ff:cb:1c:46:20: 97:71:c0:ab:8b:27:7e:a8:aa:ee:f4:dd:a8:e5:1e: f8:d0:24:98:c9:c7:00:1c:dd:ee:63:92:63:f1:42: 4e:9a:0f:82:47:bd:54:01:fd:dd:50:66:9f:2a:f9: 09:2a:1b:38:47:0c:1d:14:00:b1:83:e4:a2:a3:34: 57:8b:63:df:38:0b:1d:03:2c:00:10:1d:f9:8f:0d: 22:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6F:CF:A8:AE:7B:C9:67:5D:92:B7:5C:FA:AD:D5:9C:9C:47:AF:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99b607dc-2978-3b44-84fa-7abdd10b450a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:96:3a:ce:f5:2f:8c:e5:b0:36:63:7a:f7:7b:64:49:f6:6d: d7:d2:95:7a:4a:47:72:01:f0:d5:2d:69:74:1d:9d:db:77:b8: 15:fe:6b:63:58:af:aa:ef:fd:70:71:2b:b3:cf:bf:a6:1e:16: e5:a9:f6:84:d9:15:c5:26:4b:e2:6b:bb:16:8c:ff:91:12:99: 29:6d:b0:a7:82:86:bc:91:69:f9:8b:6c:3e:fb:dc:ac:69:12: bc:f6:36:54:3a:38:1a:1e:b3:18:7d:82:41:e3:d8:82:e2:6f: cd:5d:20:eb:8d:c1:7f:ae:26:51:39:38:89:dc:46:47:b8:34: c9:73:89:dc:69:74:77:35:78:3b:29:bf:4e:87:ce:a2:27:8a: 0a:59:5f:39:d9:97:3b:cf:a8:28:fd:2d:49:fe:48:6e:96:ff: c4:21:aa:10:15:96:1b:85:5a:52:52:21:88:51:e9:6a:f4:44: 6f:6e:6e:8a:62:c1:c3:92:9f:5f:f2:95:66:f2:a1:ae:ee:d2: 2c:76:be:fd:15:c9:2b:d7:c4:5b:c2:bf:5c:76:7f:d7:1a:f6: aa:60:95:8e:17:59:22:4f:74:7f:4f:e9:d2:c8:65:4e:99:9d: cd:78:2a:9b:8f:f2:23:45:b1:0d:3f:16:24:3e:f3:57:62:25: 4f:59:1a:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f323zCpGy5P8Ke8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk NjkxOGYzNmYtZmJiNy00YzNjLTg5Y2UtY2FlZGI1ZDQ2NGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww0M4wjWtXKHbJtLPEYNg7PvLVpZKX0g1McR 50Gvxu2W/sZY94F6PWoHHeWQN+dqLKl1Sci28pf1FhPI9l+mSo6o8fcm1xNWtA93 u1lL3F8Tn5QfyVtouOi8oImYWS7SDKuAdc5eNZzxUiUjqvuTLqx/8zrmhn+brbEb q/4Tc/BctvN0v5KmJVj00RVnjhizhTkf/+yurbskZkD0x8BI4dMiCL6nUYLXvKPH 5qOr/8scRiCXccCriyd+qKru9N2o5R740CSYyccAHN3uY5Jj8UJOmg+CR71UAf3d UGafKvkJKhs4RwwdFACxg+SiozRXi2PfOAsdAywAEB35jw0iRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpvz6iue8lnXZK3XPqt1ZycR6/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTliNjA3ZGMtMjk3OC0z YjQ0LTg0ZmEtN2FiZGQxMGI0NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+WOs71L4zlsDZjevd7ZEn2bdfSlXpKR3IB8NUtaXQdndt3uBX+a2NY r6rv/XBxK7PPv6YeFuWp9oTZFcUmS+JruxaM/5ESmSltsKeChryRafmLbD773Kxp Erz2NlQ6OBoesxh9gkHj2ILib81dIOuNwX+uJlE5OIncRke4NMlzidxpdHc1eDsp v06HzqInigpZXznZlzvPqCj9LUn+SG6W/8QhqhAVlhuFWlJSIYhR6Wr0RG9ubopi wcOSn1/ylWbyoa7u0ix2vv0VySvXxFvCv1x2f9ca9qpglY4XWSJPdH9P6dLIZU6Z nc14KpuP8iNFsQ0/FiQ+81diJU9ZGs8= -----END CERTIFICATE-----Generated at Mon Jul 13 05:54:30 2026 by rpki-client