$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa File: b9c73bea-e693-3d79-b258-a76ffb3f2510.roa (raw, json) Hash identifier: nYCvoVsXCT1l53io/UZ+pug31kqfTNioQLkaAQ6ztWM= Subject key identifier: F0:D7:F3:B9:07:45:42:66:F9:80:DE:E9:83:E1:34:2F:3D:18:54:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FAE4FAFDCBE90B568100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.16.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:fa:e4:fa:fd:cb:e9:0b:56:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=2fd37f35-d51c-46e6-8682-7735edabf584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:40:1b:06:8f:c3:3a:e3:af:ed:dd:e5:20:41: 01:0c:47:f9:c2:85:da:25:a1:86:a5:31:d8:1c:d1: b2:31:77:d3:35:0a:d7:bb:0d:46:87:bf:8d:73:8d: fb:e1:4a:a8:10:02:34:ef:2b:de:61:f6:d8:33:bf: 79:16:6e:d4:49:21:e8:c0:c2:a1:15:7c:4a:2a:d7: 71:1a:27:3e:e5:a6:56:af:84:38:d5:82:3e:7c:82: 3c:2d:9b:6b:0d:cb:5f:22:42:1a:14:9b:98:c9:f6: 05:c6:e2:fa:45:6b:88:27:3c:8f:29:4d:e0:2d:09: 0c:bd:69:0e:86:c6:85:be:7f:ab:1e:a4:b3:ef:6e: c5:fe:50:34:ff:cd:b0:df:c9:93:f3:e7:22:7f:a6: 29:fe:3a:ca:19:b0:65:a8:08:5b:5a:da:91:72:bf: 82:9a:7c:e0:49:47:15:30:df:18:a3:ad:54:ff:cc: c7:5f:4a:a4:0e:d3:82:eb:60:17:55:17:0e:20:e8: 74:06:98:33:23:c7:32:0a:e9:b8:9a:df:4c:84:7b: 0a:cb:57:8b:1b:9e:0c:71:c1:24:63:aa:e8:08:c0: 54:61:ab:d3:02:27:96:b9:7a:cc:55:78:54:73:0b: 74:62:9f:b1:37:0e:71:f4:42:24:c1:6d:3c:bd:d7: c7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D7:F3:B9:07:45:42:66:F9:80:DE:E9:83:E1:34:2F:3D:18:54:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f8:17:d5:d6:7a:8e:16:ba:3f:08:74:bb:b6:c3:ed:c5:eb: 18:e9:22:ec:0f:1e:31:a7:4e:ff:1f:33:45:c3:e7:98:65:ce: 45:6b:73:6c:60:23:e7:65:ae:cb:bb:07:d6:52:cd:33:aa:0a: 9a:db:a9:c5:ea:13:41:35:f4:bc:d3:4e:7e:1b:4f:64:50:64: 74:36:04:6f:94:23:58:f9:94:d0:bf:cc:a1:8d:85:fa:a5:a9: 40:d0:cb:35:64:66:3a:48:e4:04:ee:8f:aa:16:e4:29:30:26: 37:b9:fb:b8:3c:d5:b2:83:39:00:30:e6:45:a5:db:92:99:24: 08:b7:d8:4d:19:97:04:0c:da:30:db:c4:56:e2:dc:39:c7:a4: b7:c7:fe:82:41:a8:b9:03:65:33:64:c1:a3:aa:f4:cc:36:d8: 7a:6d:70:8e:c2:de:63:d7:43:40:a8:2a:44:c6:04:0c:8b:d6: ab:3b:21:5f:66:b4:bb:53:f5:de:09:e4:dd:c6:e3:22:25:2c: 76:34:92:52:ac:a2:0f:53:39:f3:ae:4b:91:6a:18:45:b4:54: aa:81:e5:5e:ba:4f:2d:8a:4d:84:d0:de:4a:b3:bf:2e:62:74: 49:c9:ea:d2:e9:24:4d:68:ca:f3:c9:fa:ae:d3:d8:4e:8a:1d: 10:38:99:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vrk+v3L6QtWgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MmZkMzdmMzUtZDUxYy00NmU2LTg2ODItNzczNWVkYWJmNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkAbBo/DOuOv7d3lIEEBDEf5woXaJaGGpTHY HNGyMXfTNQrXuw1Gh7+Nc4374UqoEAI07yveYfbYM795Fm7USSHowMKhFXxKKtdx Gic+5aZWr4Q41YI+fII8LZtrDctfIkIaFJuYyfYFxuL6RWuIJzyPKU3gLQkMvWkO hsaFvn+rHqSz727F/lA0/82w38mT8+cif6Yp/jrKGbBlqAhbWtqRcr+CmnzgSUcV MN8Yo61U/8zHX0qkDtOC62AXVRcOIOh0BpgzI8cyCum4mt9MhHsKy1eLG54MccEk Y6roCMBUYavTAieWuXrMVXhUcwt0Yp+xNw5x9EIkwW08vdfH8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDX87kHRUJm+YDe6YPhNC89GFRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjljNzNiZWEtZTY5My0z ZDc5LWIyNTgtYTc2ZmZiM2YyNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/4F9XWeo4Wuj8IdLu2w+3F6xjpIuwPHjGnTv8fM0XD55hlzkVrc2xg I+dlrsu7B9ZSzTOqCprbqcXqE0E19LzTTn4bT2RQZHQ2BG+UI1j5lNC/zKGNhfql qUDQyzVkZjpI5ATuj6oW5CkwJje5+7g81bKDOQAw5kWl25KZJAi32E0ZlwQM2jDb xFbi3DnHpLfH/oJBqLkDZTNkwaOq9Mw22HptcI7C3mPXQ0CoKkTGBAyL1qs7IV9m tLtT9d4J5N3G4yIlLHY0klKsog9TOfOuS5FqGEW0VKqB5V66Ty2KTYTQ3kqzvy5i dEnJ6tLpJE1oyvPJ+q7T2E6KHRA4mck= -----END CERTIFICATE-----Generated at Thu Aug 27 11:30:36 2026 by rpki-client