$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa File: a900db9d-6c9c-3739-b1a1-9441dc45040e.roa (raw, json) Hash identifier: 1smlVFoBSmqopDhEyZ/5MBr4j0a1fRRzUP67nPtsUzw= Subject key identifier: E2:9B:20:6F:5B:5E:B4:D4:F7:1D:93:4E:9C:20:74:DB:DD:80:41:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78F4B7BB7DB0A02C5E8F188 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.19.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:4b:7b:b7:db:0a:02:c5:e8:f1:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=583c54a8-5f1f-4ada-bad8-312271f1f3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:eb:63:00:6f:49:75:8b:0e:85:89:fa:a8:80: 43:d7:af:7b:35:f3:61:2b:25:af:2c:9f:bf:92:29: 18:90:3c:fb:58:36:f3:e2:fa:bb:d1:02:2b:90:c4: b0:c5:c5:d3:1c:95:a5:d3:9e:1c:4b:75:f2:39:56: cf:0d:8a:69:8e:f7:e4:4d:4f:90:cc:d1:3d:70:ba: b2:58:d5:ec:f4:5d:fc:6d:a9:dd:6d:99:33:01:aa: 4f:fd:bb:92:7d:cd:e5:39:4d:b4:42:4b:2c:ce:0f: f8:37:73:9d:01:ee:40:ca:43:0d:e8:c3:89:25:cd: 35:8b:61:19:7f:a6:27:8f:9c:57:9c:f4:dd:7b:44: f3:6d:61:46:2b:e2:35:db:c2:99:04:5c:ad:4d:32: 28:ef:e5:9b:03:c9:47:30:3c:ee:eb:53:e6:7f:58: fb:87:91:dc:25:e2:87:72:1d:30:6f:c9:1d:ae:95: 6c:b5:f3:d1:7f:c3:b7:d7:dc:0b:e3:f4:28:98:70: 5e:91:5a:dc:e9:33:ae:81:6a:44:fa:58:57:88:36: 8d:0e:17:a9:94:8c:c5:ea:ff:48:be:66:f3:35:9c: 2e:e1:d1:d2:47:a9:e0:55:cb:65:cf:6a:be:c5:aa: 8f:94:a1:d8:63:12:26:3c:16:78:ad:11:03:f3:8b: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9B:20:6F:5B:5E:B4:D4:F7:1D:93:4E:9C:20:74:DB:DD:80:41:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:bb:f2:a3:ad:7f:f8:78:69:4b:4d:d6:a9:14:38:be:5a:71: 78:52:b6:9c:41:c7:f8:45:e5:66:4a:79:31:f6:4e:89:0b:88: ce:ba:c7:a8:66:ee:f5:33:b0:68:76:a0:e1:92:ed:94:4c:5c: 71:68:9b:29:85:c6:b0:48:31:59:9b:ac:eb:8f:b0:89:00:fb: b7:ea:0a:ad:d6:a2:32:32:68:5a:91:0f:2c:83:64:18:5b:5b: ba:74:8e:22:3a:06:8f:1b:23:54:c5:15:1c:96:9f:c4:50:88: 39:9f:9f:dd:32:5d:46:d4:d7:cc:b3:32:6d:39:06:e6:a5:ed: a8:a5:0f:bd:9c:91:aa:b2:ac:4d:57:1f:e7:b6:a0:a6:23:9d: cd:96:67:6f:dd:3f:0e:60:ca:8d:f2:f5:0d:18:a4:26:86:c4: 60:d8:e3:bf:5d:22:c1:6c:2d:a1:26:52:ca:d0:9d:db:78:b1: fd:e1:c8:58:e1:fc:d8:6f:29:ff:99:ce:80:4c:24:35:3f:54: 7f:b5:57:56:5e:bb:5b:36:aa:97:61:e8:f1:16:48:b0:ae:31: 98:b2:60:eb:e1:f4:ae:88:e7:3b:6a:0a:78:2b:4a:52:ca:18: 61:cb:b0:30:59:54:7b:d4:c9:3a:22:62:35:a3:ea:b8:e3:df: a1:45:2e:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj0t7t9sKAsXo8YgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTgzYzU0YTgtNWYxZi00YWRhLWJhZDgtMzEyMjcxZjFmM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkutjAG9JdYsOhYn6qIBD1697NfNhKyWvLJ+/ kikYkDz7WDbz4vq70QIrkMSwxcXTHJWl054cS3XyOVbPDYppjvfkTU+QzNE9cLqy WNXs9F38bandbZkzAapP/buSfc3lOU20Qksszg/4N3OdAe5AykMN6MOJJc01i2EZ f6Ynj5xXnPTde0TzbWFGK+I128KZBFytTTIo7+WbA8lHMDzu61Pmf1j7h5HcJeKH ch0wb8kdrpVstfPRf8O319wL4/QomHBekVrc6TOugWpE+lhXiDaNDheplIzF6v9I vmbzNZwu4dHSR6ngVctlz2q+xaqPlKHYYxImPBZ4rRED84vxgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKbIG9bXrTU9x2TTpwgdNvdgEHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTkwMGRiOWQtNmM5Yy0z NzM5LWIxYTEtOTQ0MWRjNDUwNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq78qOtf/h4aUtN1qkUOL5acXhStpxBx/hF5WZKeTH2TokLiM66x6hm 7vUzsGh2oOGS7ZRMXHFomymFxrBIMVmbrOuPsIkA+7fqCq3WojIyaFqRDyyDZBhb W7p0jiI6Bo8bI1TFFRyWn8RQiDmfn90yXUbU18yzMm05Bual7ailD72ckaqyrE1X H+e2oKYjnc2WZ2/dPw5gyo3y9Q0YpCaGxGDY479dIsFsLaEmUsrQndt4sf3hyFjh /NhvKf+ZzoBMJDU/VH+1V1Zeu1s2qpdh6PEWSLCuMZiyYOvh9K6I5ztqCngrSlLK GGHLsDBZVHvUyToiYjWj6rjj36FFLrk= -----END CERTIFICATE-----Generated at Thu Aug 27 10:33:11 2026 by rpki-client