$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c10ea6ee-b666-3d32-8016-c26cb11879d5.roa File: c10ea6ee-b666-3d32-8016-c26cb11879d5.roa (raw, json) Hash identifier: PqA6iAChlJCexABv98QKogt62+TnTHZlT2dQ9mUEdlI= Subject key identifier: 39:C3:E0:F5:5D:4F:EF:C0:8A:07:85:D7:C9:42:F1:68:F3:07:6E:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED4322306DB51C8F694363600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c10ea6ee-b666-3d32-8016-c26cb11879d5.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 98.21.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:23:06:db:51:c8:f6:94:36:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=900b658c-1296-48a9-94d1-60882148b5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:19:7b:c5:3b:fd:cc:25:f5:d2:81:7d:4c:ca: 6f:02:9c:c7:a3:e1:8e:f9:19:b8:2c:89:ee:5d:23: 61:e2:8f:9c:5e:4e:19:03:a9:88:d9:ae:85:18:a2: 4b:a1:4b:4c:64:40:db:37:e4:69:c7:dc:64:97:49: 85:2f:ed:64:d5:a1:c7:51:54:91:ac:6c:bf:1a:87: c0:81:48:03:8f:b3:27:b0:08:34:3d:5a:77:07:d9: 51:0c:93:e6:b0:a2:c5:d5:04:9f:68:84:17:19:82: ec:72:54:1f:8a:80:1f:a5:1f:58:19:ff:a8:5b:8d: c4:1d:f8:f0:97:3a:c8:43:bb:4a:c3:5b:ff:58:04: 03:24:5a:2e:c8:5f:be:19:a3:3f:d1:03:61:7f:2f: 2b:e2:f5:1d:a1:13:28:c8:d1:4b:9e:ec:f5:ae:4d: cd:f9:c0:2e:3f:d8:22:bb:f8:53:75:40:15:8b:0a: 75:52:12:a9:81:4e:66:db:04:3c:8f:08:28:1c:6e: 2b:53:09:ba:f1:ff:ca:31:af:a7:0f:cd:e2:56:16: f5:79:a3:51:f5:9b:a8:2d:22:03:5d:68:a5:f8:d4: 04:f9:f1:b5:6f:0d:f9:c6:a7:10:4d:db:75:e6:45: d3:2d:4d:6b:d8:cb:cb:05:28:e1:b6:ea:12:95:97: 7c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C3:E0:F5:5D:4F:EF:C0:8A:07:85:D7:C9:42:F1:68:F3:07:6E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c10ea6ee-b666-3d32-8016-c26cb11879d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:20:ba:20:0a:7c:0d:41:de:a0:0d:c9:3d:52:25:3d:dd:fc: 9f:09:3a:68:4d:35:d1:bd:8b:17:27:8d:2c:a2:8c:4a:37:0f: e7:f1:e3:d7:87:1c:6d:f5:5b:b5:26:cc:b4:2d:6d:cf:f4:16: a8:d6:4f:1b:a0:43:6d:d3:16:6c:24:c6:3b:68:a6:ad:d3:ae: fa:8a:f8:9e:b8:5e:56:a7:b2:e4:84:03:7b:63:0d:18:13:f4: 35:a0:c9:b4:71:5f:9e:b3:ec:25:c0:c1:6c:93:b7:59:e4:28: fa:cd:d7:63:b0:4c:40:ea:5c:ad:8a:f6:8c:84:12:2f:39:49: 46:3a:2d:11:a5:eb:0b:df:14:bb:d5:86:02:9e:29:86:a7:5d: 96:67:a9:67:5f:79:6a:63:f4:a8:d1:48:a5:b2:c8:93:bd:d2: 5a:eb:f6:e1:b5:fd:b8:8e:ff:3f:de:65:6b:1c:2b:ae:bf:59: 4f:b4:48:42:4d:d5:b3:c2:9c:f0:64:4d:15:d7:1d:0e:6c:da: 34:5f:dd:eb:c9:38:da:5d:c8:d5:5e:e9:8e:d5:29:9e:c6:ff: bd:24:85:d7:4d:2d:19:fc:d1:8c:cc:19:6c:1c:30:8e:4b:79: 75:82:5b:9e:00:0e:bc:3f:2a:be:bc:8d:97:45:ca:05:d5:db: 07:24:78:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMiMG21HI9pQ2NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk OTAwYjY1OGMtMTI5Ni00OGE5LTk0ZDEtNjA4ODIxNDhiNWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRl7xTv9zCX10oF9TMpvApzHo+GO+Rm4LInu XSNh4o+cXk4ZA6mI2a6FGKJLoUtMZEDbN+Rpx9xkl0mFL+1k1aHHUVSRrGy/GofA gUgDj7MnsAg0PVp3B9lRDJPmsKLF1QSfaIQXGYLsclQfioAfpR9YGf+oW43EHfjw lzrIQ7tKw1v/WAQDJFouyF++GaM/0QNhfy8r4vUdoRMoyNFLnuz1rk3N+cAuP9gi u/hTdUAViwp1UhKpgU5m2wQ8jwgoHG4rUwm68f/KMa+nD83iVhb1eaNR9ZuoLSID XWil+NQE+fG1bw35xqcQTdt15kXTLU1r2MvLBSjhtuoSlZd8kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnD4PVdT+/AigeF18lC8WjzB264MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzEwZWE2ZWUtYjY2Ni0z ZDMyLTgwMTYtYzI2Y2IxMTg3OWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4guiAKfA1B3qANyT1SJT3d/J8JOmhNNdG9ixcnjSyijEo3D+fx49eH HG31W7UmzLQtbc/0FqjWTxugQ23TFmwkxjtopq3TrvqK+J64XlansuSEA3tjDRgT 9DWgybRxX56z7CXAwWyTt1nkKPrN12OwTEDqXK2K9oyEEi85SUY6LRGl6wvfFLvV hgKeKYanXZZnqWdfeWpj9KjRSKWyyJO90lrr9uG1/biO/z/eZWscK66/WU+0SEJN 1bPCnPBkTRXXHQ5s2jRf3evJONpdyNVe6Y7VKZ7G/70khddNLRn80YzMGWwcMI5L eXWCW54ADrw/Kr68jZdFygXV2wckeMk= -----END CERTIFICATE-----Generated at Thu Aug 27 12:28:57 2026 by rpki-client