$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a67f0313-0d29-39cb-8397-b9d4a32a6171.roa File: a67f0313-0d29-39cb-8397-b9d4a32a6171.roa (raw, json) Hash identifier: eQuOo0g2+QZZj3L5SG1jklXULJfpmKr9ZPnVMQJpX0E= Subject key identifier: 60:D1:29:3C:3D:2A:93:63:39:52:C7:8D:44:60:87:3D:00:7A:A6:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E5FDF6DB201E6D7AB24BEE980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a67f0313-0d29-39cb-8397-b9d4a32a6171.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 98.16.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:6d:b2:01:e6:d7:ab:24:be:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=8dbebfc1-7302-4ca2-a079-9a0b03e99868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f2:72:10:da:04:e1:b2:7e:29:1c:29:9c:77: 06:f0:30:fb:ef:1b:7d:3d:e3:e6:4e:0b:58:33:ad: 4d:bb:59:33:0f:c0:49:94:63:25:93:1a:37:70:eb: 7b:85:46:b4:23:c4:96:cf:63:0b:98:17:93:8f:b0: 1c:76:e1:ef:26:53:18:47:e2:68:0c:8d:df:71:23: 30:f7:15:42:0d:e3:93:d1:6a:a5:d7:14:91:e2:45: d6:17:3d:81:60:72:03:f5:50:63:a9:9c:83:f4:6a: 9f:cf:f0:55:c4:b5:06:ca:65:3f:a3:57:f0:e7:ae: b0:24:92:8a:26:6a:70:30:07:7b:e1:54:64:e4:6d: fe:f9:28:3d:53:ae:e4:2a:a9:d7:69:ff:0d:be:c4: c4:d2:35:a5:b1:ac:5a:d5:87:00:54:aa:aa:e0:71: 66:90:01:dc:77:c8:da:e2:39:57:ba:ec:22:6e:03: 13:34:5a:62:ef:25:24:7c:96:a7:36:b3:f8:8d:68: 64:df:ef:c8:e0:17:c1:15:1e:8d:e1:c7:36:10:6f: be:89:97:d7:f9:04:00:fc:9a:d0:f3:cc:e4:86:cd: f6:ca:65:76:18:0b:e2:67:91:1b:54:c1:9d:94:18: c5:d4:00:21:3c:7b:38:06:dc:34:85:a9:72:c2:7f: 0b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:29:3C:3D:2A:93:63:39:52:C7:8D:44:60:87:3D:00:7A:A6:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a67f0313-0d29-39cb-8397-b9d4a32a6171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:75:d8:d1:3d:04:4f:9d:87:7f:c1:3d:eb:6c:4c:44:f2:a9: f9:48:3a:bf:9d:4e:fb:ac:30:17:8a:5c:90:81:f4:af:13:8a: 8f:f2:8b:61:03:26:22:82:fc:3d:38:44:1a:ce:dc:fb:56:dc: 0f:6d:5e:19:75:41:de:77:56:d0:d2:ce:54:e5:f1:f5:bf:60: c6:93:df:81:33:3b:88:8a:55:93:bc:fe:85:aa:b6:aa:20:0b: 9c:b9:70:e8:76:1f:a9:87:9e:b9:a3:b3:23:9b:3b:7c:23:5a: 19:87:e3:c0:88:43:f0:2a:00:e1:54:eb:60:f6:2d:a8:bf:ad: 0c:83:75:b4:84:5f:78:9b:56:36:df:89:8e:ad:ed:8a:7c:26: 4c:8b:d1:12:a0:75:44:48:72:fd:d6:a8:a1:7e:57:6f:c0:e6: 2b:0b:47:b8:6f:30:fe:ff:01:d9:2f:bc:a6:85:e9:a6:20:18: ab:da:3a:69:76:75:a6:ce:2c:85:13:fd:52:8d:be:77:de:46: 29:39:a1:09:6f:3a:25:26:94:ef:63:44:74:ee:00:09:70:58: e1:89:eb:b1:d7:ea:6a:b9:78:88:d9:44:17:47:e0:75:c5:4c: 31:83:41:48:5e:9c:b2:f3:3e:d4:4e:7c:33:ec:d1:96:b2:ef: b2:55:63:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f322yAebXqyS+6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk OGRiZWJmYzEtNzMwMi00Y2EyLWEwNzktOWEwYjAzZTk5ODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifJyENoE4bJ+KRwpnHcG8DD77xt9PePmTgtY M61Nu1kzD8BJlGMlkxo3cOt7hUa0I8SWz2MLmBeTj7AcduHvJlMYR+JoDI3fcSMw 9xVCDeOT0Wql1xSR4kXWFz2BYHID9VBjqZyD9Gqfz/BVxLUGymU/o1fw566wJJKK JmpwMAd74VRk5G3++Sg9U67kKqnXaf8NvsTE0jWlsaxa1YcAVKqq4HFmkAHcd8ja 4jlXuuwibgMTNFpi7yUkfJanNrP4jWhk3+/I4BfBFR6N4cc2EG++iZfX+QQA/JrQ 88zkhs32ymV2GAviZ5EbVMGdlBjF1AAhPHs4Btw0halywn8LBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDRKTw9KpNjOVLHjURghz0AeqZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY3ZjAzMTMtMGQyOS0z OWNiLTgzOTctYjlkNGEzMmE2MTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF12NE9BE+dh3/BPetsTETyqflIOr+dTvusMBeKXJCB9K8Tio/yi2ED JiKC/D04RBrO3PtW3A9tXhl1Qd53VtDSzlTl8fW/YMaT34EzO4iKVZO8/oWqtqog C5y5cOh2H6mHnrmjsyObO3wjWhmH48CIQ/AqAOFU62D2Lai/rQyDdbSEX3ibVjbf iY6t7Yp8JkyL0RKgdURIcv3WqKF+V2/A5isLR7hvMP7/AdkvvKaF6aYgGKvaOml2 dabOLIUT/VKNvnfeRik5oQlvOiUmlO9jRHTuAAlwWOGJ67HX6mq5eIjZRBdH4HXF TDGDQUhenLLzPtROfDPs0Zay77JVY64= -----END CERTIFICATE-----Generated at Mon Jul 13 05:54:20 2026 by rpki-client