$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa File: aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa (raw, json) Hash identifier: kEuCRXJRlh8RSraBV0nxIzq1ZEMizfw6U2Ff0UmSE28= Subject key identifier: 83:AF:CC:D5:0F:16:9E:92:C7:EC:E1:2E:AF:57:BF:E4:40:DF:FF:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA79AB7047CF21114C8686B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.21.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:b7:04:7c:f2:11:14:c8:68:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=aab8e751-e10f-408b-a8e6-f6cad7f7c34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:fc:f8:b6:5c:cf:ac:26:53:cf:a0:89:b0: 3b:5b:45:4d:bb:72:ab:39:90:4e:d3:88:e4:3a:ff: c9:37:9a:7e:2e:d7:87:4f:4e:71:86:64:06:5b:82: 7c:43:f6:d7:12:77:57:ef:e2:e5:c0:4f:e7:18:ee: 77:83:ef:6e:9c:f6:dd:f5:5d:14:d4:7a:77:9a:7e: 63:05:c7:8d:14:cb:aa:47:4d:e4:2b:75:42:46:dd: 85:12:88:18:00:30:f4:98:3d:ab:fb:44:00:c1:ad: ed:dc:c8:97:d3:69:15:ab:3d:ed:1c:a0:5d:76:bb: b7:e2:15:25:18:08:f5:eb:6b:00:46:67:12:31:7b: c0:e1:e2:0a:37:6f:8e:72:0b:62:93:0d:bf:63:78: 03:20:03:cb:cf:0b:e3:69:96:48:29:68:c7:47:b9: 23:ff:8a:5d:9b:db:45:f8:0f:1e:19:15:27:f3:40: 34:4a:01:59:23:bc:05:86:74:5a:c0:4a:e5:77:08: f7:04:e2:58:29:73:cd:0f:54:1b:ce:8a:f2:74:65: 24:58:6a:e1:ff:80:cc:f9:27:90:49:c6:23:b7:8a: 64:29:b3:f1:79:bf:94:2c:20:8e:56:c9:c1:9e:74: e4:96:b8:8d:de:68:c1:2a:67:fc:0c:9a:cd:1d:f5: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AF:CC:D5:0F:16:9E:92:C7:EC:E1:2E:AF:57:BF:E4:40:DF:FF:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aacc3f23-ddcd-368e-89a8-cd4831fd17f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f8:84:64:a5:3c:81:40:41:cd:cf:96:1b:8c:02:9a:24:a8: d1:49:6d:fc:a7:06:dd:7c:a9:01:f9:e0:83:5e:37:74:24:b1: a1:8a:6f:5c:77:25:31:56:aa:0d:6e:ad:48:40:76:26:90:30: ce:a6:e9:fd:13:cc:31:ce:3f:95:58:e5:9a:86:3a:2e:60:df: 33:27:4e:04:fa:66:c3:c8:e9:e7:b5:c3:ea:89:28:96:d4:2f: 41:ad:98:93:50:8e:42:8a:3c:d6:ab:be:09:b6:10:5e:75:d6: 9d:ef:b9:3f:5e:18:0c:ff:9b:61:c0:d4:d2:dc:46:ad:47:c1: 2d:22:cb:b5:03:42:88:92:18:b0:f2:48:96:92:ce:74:23:1e: 0f:e0:7a:d1:50:46:a8:51:46:53:f4:78:fa:79:d4:5c:d3:b4: 1f:ec:93:81:75:ad:88:45:5b:9f:4e:c7:fe:98:50:8b:6e:39: 57:04:d8:29:10:0c:d7:a0:6f:24:98:3e:61:e3:cf:e5:39:de: 5c:3a:c9:23:1a:3d:24:af:ec:23:63:b7:52:bc:68:cf:e0:ff: c8:05:8c:72:88:9a:4d:28:aa:72:5c:b1:3b:35:3c:52:bd:4b: 66:b5:87:b2:12:42:03:e9:8d:ea:65:b7:94:0d:f4:38:8b:6b: e4:f3:ab:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmrcEfPIRFMhoa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWFiOGU3NTEtZTEwZi00MDhiLWE4ZTYtZjZjYWQ3ZjdjMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2P8+LZcz6wmU8+gibA7W0VNu3KrOZBO04jk Ov/JN5p+LteHT05xhmQGW4J8Q/bXEndX7+LlwE/nGO53g+9unPbd9V0U1Hp3mn5j BceNFMuqR03kK3VCRt2FEogYADD0mD2r+0QAwa3t3MiX02kVqz3tHKBddru34hUl GAj162sARmcSMXvA4eIKN2+Ocgtikw2/Y3gDIAPLzwvjaZZIKWjHR7kj/4pdm9tF +A8eGRUn80A0SgFZI7wFhnRawErldwj3BOJYKXPND1QbzorydGUkWGrh/4DM+SeQ ScYjt4pkKbPxeb+ULCCOVsnBnnTklriN3mjBKmf8DJrNHfUt4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOvzNUPFp6Sx+zhLq9Xv+RA3/9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWFjYzNmMjMtZGRjZC0z NjhlLTg5YTgtY2Q0ODMxZmQxN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/4hGSlPIFAQc3PlhuMApokqNFJbfynBt18qQH54INeN3QksaGKb1x3 JTFWqg1urUhAdiaQMM6m6f0TzDHOP5VY5ZqGOi5g3zMnTgT6ZsPI6ee1w+qJKJbU L0GtmJNQjkKKPNarvgm2EF511p3vuT9eGAz/m2HA1NLcRq1HwS0iy7UDQoiSGLDy SJaSznQjHg/getFQRqhRRlP0ePp51FzTtB/sk4F1rYhFW59Ox/6YUItuOVcE2CkQ DNegbySYPmHjz+U53lw6ySMaPSSv7CNjt1K8aM/g/8gFjHKImk0oqnJcsTs1PFK9 S2a1h7ISQgPpjeplt5QN9DiLa+Tzq8Y= -----END CERTIFICATE-----Generated at Thu Aug 27 14:19:52 2026 by rpki-client