$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa File: b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa (raw, json) Hash identifier: cqK4Gs2XMKvGMDFH0DbJH/TJGqoNJ+EXqohoQ9+HTmI= Subject key identifier: C0:EB:20:5F:93:D5:B2:36:A8:DD:32:AC:AE:ED:EE:A4:13:AD:5B:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E584F2C5D430717E1800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 98.20.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e5:84:f2:c5:d4:30:71:7e:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=23f6c053-c5c5-4da9-b9f7-984ff6b474c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:17:6f:0b:06:30:44:f9:f5:be:60:39:7c: 36:37:e7:d5:c0:e3:07:c6:07:2d:83:5c:dd:f0:b6: 80:83:c7:38:93:a8:10:24:0d:4d:cd:8f:cb:27:11: de:5c:38:86:32:a9:bd:63:39:a4:2c:e1:a3:09:57: b1:73:11:89:d1:53:27:b5:1d:ea:b0:37:2b:52:70: b9:dd:9d:41:30:20:eb:04:63:39:c0:b1:c8:f0:02: c9:41:ff:0e:e9:49:6f:11:c7:a4:4c:46:bf:b3:76: ca:8e:c1:cf:51:e9:7d:e0:f3:e6:07:93:0a:09:34: 23:2b:4d:74:83:6e:8a:d7:7e:1b:92:8a:61:d9:35: 88:be:7d:ad:85:e3:73:05:84:ba:8e:07:19:f9:e7: 32:7d:51:ca:10:a2:ea:54:02:1c:e1:74:d5:ee:55: 93:05:24:dc:5c:fd:6f:93:69:51:2a:86:3c:b4:8a: f7:e6:1d:f2:c9:6c:e6:00:42:6e:bc:15:83:bb:92: a2:0f:ff:83:af:4c:f1:04:a1:ba:7c:bc:23:95:32: 2f:a3:36:7d:ba:bb:cf:96:30:ec:43:84:55:ce:e2: c8:ee:c1:79:e5:49:6f:1a:b3:6b:f7:f4:a9:6f:20: f1:00:b3:d2:9c:8a:b2:e6:ea:a4:30:32:b0:4f:e4: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EB:20:5F:93:D5:B2:36:A8:DD:32:AC:AE:ED:EE:A4:13:AD:5B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:98:19:22:3e:b1:4b:0a:4e:04:c9:63:88:f4:19:62:27:d6: 9b:d8:6b:df:c6:1d:bc:54:64:0b:09:09:8b:00:50:a9:15:6a: 6f:e8:e7:46:03:5f:b7:a2:0c:a3:58:dc:4a:a8:5d:ab:98:5d: 67:de:a3:b5:1c:5c:33:65:76:d7:4d:e0:a4:20:f0:d0:a0:42: 89:b3:69:14:89:a3:34:18:73:8a:d3:9b:02:be:04:c5:42:3f: be:e3:24:df:2e:05:0a:58:1f:2c:14:ef:76:ec:f7:e5:77:ea: f2:68:b8:71:6a:99:95:0a:bc:04:29:51:c8:c8:9e:12:00:d6: 55:47:f0:fc:db:bc:ad:2f:50:61:31:90:f7:63:96:bb:d0:29: 8c:bf:51:15:f8:38:2c:cd:fa:9c:93:08:67:fb:cb:91:86:48: 88:e8:18:c0:48:29:c5:76:e3:e4:aa:77:41:90:cf:fd:8c:48: ca:ac:9e:12:10:71:8d:bf:8b:64:b6:14:22:8a:ef:1e:24:8b: 5d:66:15:68:cf:2d:49:9c:b7:32:90:2c:11:98:2f:b5:7c:ef: 5a:97:61:c6:91:0f:6f:fc:f3:e3:1f:45:31:44:d4:eb:4b:a9: 4b:2b:01:5a:ab:85:94:29:e8:3e:a4:fe:d7:9e:5e:08:91:99: 7f:c2:ef:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseWE8sXUMHF+GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MjNmNmMwNTMtYzVjNS00ZGE5LWI5ZjctOTg0ZmY2YjQ3NGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9QXbwsGMET59b5gOXw2N+fVwOMHxgctg1zd 8LaAg8c4k6gQJA1NzY/LJxHeXDiGMqm9YzmkLOGjCVexcxGJ0VMntR3qsDcrUnC5 3Z1BMCDrBGM5wLHI8ALJQf8O6UlvEcekTEa/s3bKjsHPUel94PPmB5MKCTQjK010 g26K134bkoph2TWIvn2theNzBYS6jgcZ+ecyfVHKEKLqVAIc4XTV7lWTBSTcXP1v k2lRKoY8tIr35h3yyWzmAEJuvBWDu5KiD/+Dr0zxBKG6fLwjlTIvozZ9urvPljDs Q4RVzuLI7sF55UlvGrNr9/SpbyDxALPSnIqy5uqkMDKwT+RwOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDrIF+T1bI2qN0yrK7t7qQTrVu9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjA2MzNlYjMtOGU1MS0z ZmZjLThhZjctZTBhNjVmMDBmODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeYGSI+sUsKTgTJY4j0GWIn1pvYa9/GHbxUZAsJCYsAUKkVam/o50YD X7eiDKNY3EqoXauYXWfeo7UcXDNldtdN4KQg8NCgQomzaRSJozQYc4rTmwK+BMVC P77jJN8uBQpYHywU73bs9+V36vJouHFqmZUKvAQpUcjInhIA1lVH8PzbvK0vUGEx kPdjlrvQKYy/URX4OCzN+pyTCGf7y5GGSIjoGMBIKcV24+Sqd0GQz/2MSMqsnhIQ cY2/i2S2FCKK7x4ki11mFWjPLUmctzKQLBGYL7V871qXYcaRD2/88+MfRTFE1OtL qUsrAVqrhZQp6D6k/teeXgiRmX/C78U= -----END CERTIFICATE-----Generated at Thu Aug 27 15:14:00 2026 by rpki-client