$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b624cd06-3f80-33dc-9336-4ce73e3a13da.roa File: b624cd06-3f80-33dc-9336-4ce73e3a13da.roa (raw, json) Hash identifier: yftala7+sv3oOeya9FCrFhC0WhTI25W8htgIFzWA7Bk= Subject key identifier: 2D:22:87:E1:8C:D6:16:45:47:F6:D6:BF:F6:A2:30:6E:83:74:6C:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED861D3C4181D1DE4BD033F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b624cd06-3f80-33dc-9336-4ce73e3a13da.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 98.17.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:d3:c4:18:1d:1d:e4:bd:03:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=6751860c-417c-4170-84df-041f456afd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6f:be:75:98:d2:e9:39:a6:48:21:bb:5b:0e: f0:75:5e:50:64:24:b3:11:9e:b4:85:50:59:48:c8: b8:1e:40:2e:9d:1c:ad:d7:a2:d0:98:74:3b:3d:d4: 30:04:a8:05:8a:68:52:ac:47:07:8f:25:5d:58:f6: 22:50:60:39:4d:30:51:8e:ec:16:e4:fc:d1:4f:ff: 69:26:dc:3c:27:14:66:14:33:0d:f3:62:ec:93:e6: e0:3f:3b:f8:cf:06:a8:bf:38:c0:1e:f3:43:8d:d1: 91:9e:6b:13:64:7d:39:28:6a:54:d8:28:c1:68:ae: 8e:90:28:b5:5d:32:57:c0:00:14:e1:32:92:b6:8d: 4b:f4:a7:99:c4:a5:09:d8:0f:fe:7d:d8:3d:80:e9: a3:ca:d9:10:f5:4a:8b:da:34:9e:b5:f5:b8:c2:e7: d7:6a:ef:cf:4c:8c:af:91:51:8d:d8:bb:ef:1d:16: 50:d0:a3:bb:bc:ee:8e:e7:de:a3:07:d1:f6:2f:c1: 0e:41:73:32:a3:50:1d:6c:08:bc:4d:98:79:e9:b5: 74:8e:85:08:a1:48:ef:4e:76:bb:43:fb:49:74:a1: 4b:44:21:d5:54:08:d4:42:22:93:b0:8b:c8:75:48: a0:4c:ee:95:c9:88:f1:dc:fc:00:9b:52:57:57:21: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:22:87:E1:8C:D6:16:45:47:F6:D6:BF:F6:A2:30:6E:83:74:6C:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b624cd06-3f80-33dc-9336-4ce73e3a13da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:55:44:57:57:9f:46:a1:8e:3e:99:75:84:9d:6b:43:60:e8: 5d:1e:b2:1a:a0:16:20:ac:b0:01:d0:63:0c:ae:54:62:5f:11: 73:c7:0f:2d:ad:0c:9a:e1:b8:de:45:39:6b:71:f3:16:55:3b: a9:d4:26:66:f3:eb:70:e2:14:e2:0b:81:17:65:86:e7:a4:1d: 28:e0:92:85:bf:55:6c:13:21:d0:1d:ac:d0:c8:b0:04:f7:21: 08:dd:54:08:90:06:b2:c4:ee:93:9f:43:0f:2d:97:7b:6c:51: 18:ff:c1:ad:75:62:f6:85:79:75:9e:e3:42:97:cb:0e:18:6b: d8:39:9e:0b:2d:17:6b:0b:ae:35:31:2b:eb:75:e2:3e:f7:59: 7c:3e:e1:28:b5:8a:d5:34:a1:9f:f6:13:f3:17:8e:0b:df:cd: 68:36:39:e6:c2:30:f2:1f:bd:30:cc:c8:52:33:98:a7:9a:0d: 41:40:fe:26:70:33:2e:d5:93:04:f5:78:2c:c4:6b:e7:0b:d5: 0a:0b:ba:04:df:39:a6:32:cf:20:2d:a4:c5:17:aa:b6:80:fc: d2:0f:98:79:c2:b4:00:1c:68:27:ec:1e:c1:fe:8f:94:ae:18: 3e:4b:1a:90:db:ba:8d:17:30:ad:99:63:ab:0c:c3:4d:7a:03: 11:bd:0f:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYdPEGB0d5L0DPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk Njc1MTg2MGMtNDE3Yy00MTcwLTg0ZGYtMDQxZjQ1NmFmZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12++dZjS6TmmSCG7Ww7wdV5QZCSzEZ60hVBZ SMi4HkAunRyt16LQmHQ7PdQwBKgFimhSrEcHjyVdWPYiUGA5TTBRjuwW5PzRT/9p Jtw8JxRmFDMN82Lsk+bgPzv4zwaovzjAHvNDjdGRnmsTZH05KGpU2CjBaK6OkCi1 XTJXwAAU4TKSto1L9KeZxKUJ2A/+fdg9gOmjytkQ9UqL2jSetfW4wufXau/PTIyv kVGN2LvvHRZQ0KO7vO6O596jB9H2L8EOQXMyo1AdbAi8TZh56bV0joUIoUjvTna7 Q/tJdKFLRCHVVAjUQiKTsIvIdUigTO6VyYjx3PwAm1JXVyHwhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0ih+GM1hZFR/bWv/aiMG6DdGzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjYyNGNkMDYtM2Y4MC0z M2RjLTkzMzYtNGNlNzNlM2ExM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBVRFdXn0ahjj6ZdYSda0Ng6F0eshqgFiCssAHQYwyuVGJfEXPHDy2t DJrhuN5FOWtx8xZVO6nUJmbz63DiFOILgRdlhuekHSjgkoW/VWwTIdAdrNDIsAT3 IQjdVAiQBrLE7pOfQw8tl3tsURj/wa11YvaFeXWe40KXyw4Ya9g5ngstF2sLrjUx K+t14j73WXw+4Si1itU0oZ/2E/MXjgvfzWg2OebCMPIfvTDMyFIzmKeaDUFA/iZw My7VkwT1eCzEa+cL1QoLugTfOaYyzyAtpMUXqraA/NIPmHnCtAAcaCfsHsH+j5Su GD5LGpDbuo0XMK2ZY6sMw016AxG9D+c= -----END CERTIFICATE-----Generated at Thu Aug 27 14:19:48 2026 by rpki-client