$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa File: a76862bc-99e6-3f16-a88d-6b07293a09d3.roa (raw, json) Hash identifier: 36tU8Z1z6/zVlzGd1u5CDiCA5Qyd1+Ov7N/6IvAv+/s= Subject key identifier: 8B:DE:84:40:0F:6A:BE:F2:FD:AC:C8:E0:FF:0C:89:8E:3A:EA:CB:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FF54AC75252AA3135E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.23.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:ff:54:ac:75:25:2a:a3:13:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=0bb51c70-a5ff-4081-a1db-401f37546dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:c8:1e:05:62:ea:59:5c:2c:1f:8b:61:e1: db:b9:b7:ba:36:4b:0b:34:cb:12:1a:07:f0:3c:28: 79:6a:1c:03:f6:98:23:83:b1:4c:e5:c9:0b:43:0f: 44:8d:0b:d3:7c:1c:c4:37:be:38:b7:80:9b:10:7d: 9b:1c:94:9a:96:f0:fa:05:32:16:c8:0f:8a:96:55: 7a:9a:2f:a0:18:b3:44:65:18:3c:58:19:9a:14:df: b2:ca:a0:c9:47:8c:fe:6c:dc:f3:eb:e4:43:e1:11: 3d:c3:22:82:3b:7a:5c:ef:0b:3a:dd:cf:91:43:44: 0b:11:53:62:81:f4:f3:84:82:84:b8:2c:21:f1:01: b6:40:22:b8:85:5f:7d:20:74:0c:61:80:c3:7c:c2: bc:2a:41:cb:24:5b:dd:a8:8e:f1:ba:51:b4:1c:be: df:c7:3a:4e:1b:8a:72:56:9c:a6:3f:b1:f9:22:4a: 7d:13:27:b0:e3:5a:8e:62:5b:16:5a:ac:42:2a:25: 39:44:71:af:d0:7a:b8:f2:75:a7:52:42:f8:e2:d2: 91:14:ef:72:e3:30:84:38:3f:da:62:a8:7c:e3:b1: 7a:96:96:87:9c:b4:db:c0:82:36:92:17:62:49:ca: 93:b2:d3:5b:92:0c:58:62:7a:59:1b:5b:a2:96:af: 14:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DE:84:40:0F:6A:BE:F2:FD:AC:C8:E0:FF:0C:89:8E:3A:EA:CB:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:70:81:95:2c:17:3a:dc:88:a7:0c:61:30:ee:09:74:90:80: 57:fb:cc:0a:0e:14:92:20:5a:cd:4a:22:ad:4e:f1:39:8e:ba: 43:1f:b6:77:d3:ea:a6:c6:7d:ad:ad:28:04:a2:d8:91:53:79: 3a:37:0a:38:e1:63:94:ad:6b:31:ef:39:9c:7e:c3:54:8a:a2: 57:4d:9d:16:a0:69:cc:6e:ee:f5:c9:34:ec:98:c7:45:48:a9: 87:e4:09:4f:76:3f:4f:73:86:01:e3:34:43:2d:79:31:34:ea: 4e:9e:a3:d8:b2:c7:31:cd:19:e3:04:3c:c9:65:98:20:53:59: 9f:16:93:71:1a:a0:c7:86:35:c9:37:04:77:a8:3c:a3:18:2e: 8b:b9:0e:f9:ed:54:aa:80:40:f8:85:fe:4c:f2:bf:e1:ae:29: 1c:dc:9e:b4:09:e8:82:7a:0c:d7:6f:39:62:7a:cf:77:94:c3: bf:f3:4e:32:7c:9d:87:cb:6d:6b:14:74:0f:04:5c:91:bf:61: ce:f3:8e:90:98:f6:5e:c6:21:18:c0:dd:60:69:70:5c:26:6a: dd:7c:16:f0:64:1d:00:3a:ef:61:94:db:8e:ca:93:08:67:52: 4b:a9:58:df:9e:fe:b4:3e:3b:09:cb:92:f2:76:66:cd:91:a0: 79:2d:1d:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5v9UrHUlKqMTXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MGJiNTFjNzAtYTVmZi00MDgxLWExZGItNDAxZjM3NTQ2ZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1LIHgVi6llcLB+LYeHbube6NksLNMsSGgfw PCh5ahwD9pgjg7FM5ckLQw9EjQvTfBzEN744t4CbEH2bHJSalvD6BTIWyA+KllV6 mi+gGLNEZRg8WBmaFN+yyqDJR4z+bNzz6+RD4RE9wyKCO3pc7ws63c+RQ0QLEVNi gfTzhIKEuCwh8QG2QCK4hV99IHQMYYDDfMK8KkHLJFvdqI7xulG0HL7fxzpOG4py VpymP7H5Ikp9Eyew41qOYlsWWqxCKiU5RHGv0Hq48nWnUkL44tKRFO9y4zCEOD/a Yqh847F6lpaHnLTbwII2khdiScqTstNbkgxYYnpZG1uilq8UoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvehEAPar7y/azI4P8MiY466sv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTc2ODYyYmMtOTllNi0z ZjE2LWE4OGQtNmIwNzI5M2EwOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5wgZUsFzrciKcMYTDuCXSQgFf7zAoOFJIgWs1KIq1O8TmOukMftnfT 6qbGfa2tKASi2JFTeTo3CjjhY5StazHvOZx+w1SKoldNnRagacxu7vXJNOyYx0VI qYfkCU92P09zhgHjNEMteTE06k6eo9iyxzHNGeMEPMllmCBTWZ8Wk3EaoMeGNck3 BHeoPKMYLou5DvntVKqAQPiF/kzyv+GuKRzcnrQJ6IJ6DNdvOWJ6z3eUw7/zTjJ8 nYfLbWsUdA8EXJG/Yc7zjpCY9l7GIRjA3WBpcFwmat18FvBkHQA672GU247Kkwhn UkupWN+e/rQ+OwnLkvJ2Zs2RoHktHdw= -----END CERTIFICATE-----Generated at Thu Aug 27 12:32:32 2026 by rpki-client