$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa File: d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa (raw, json) Hash identifier: Kt9d4Du2lZcJGbLzVQwhyczQlL14ek/ZonGkGSKWOmE= Subject key identifier: 18:E3:2D:CD:7D:93:40:09:53:3E:B7:17:23:D6:BD:6F:1B:C6:C0:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E54C88D546ADD56919AC Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 98.20.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e5:4c:88:d5:46:ad:d5:69:19:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=3f9a04e8-4e51-4e0e-841f-9d52db55d27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:ea:03:4b:fa:ea:77:08:db:0f:59:c8:b0: 5d:cb:b3:7c:7f:79:4e:47:49:2d:03:b9:92:bd:72: af:e6:08:f7:a9:57:a7:d4:f4:b5:eb:b0:47:13:f1: 56:a6:4f:14:77:8c:24:d6:c3:30:5d:a8:61:c7:b3: c6:b5:53:0b:ba:49:48:1f:54:e2:8d:4e:16:fa:a8: c0:22:b4:08:d8:40:c4:0e:55:a4:7e:a7:c0:f5:6f: 52:ed:b8:cb:b2:6c:54:30:f9:11:1b:52:65:b3:b3: 94:bf:1b:cc:50:af:fb:78:40:4d:82:bd:5f:69:c5: 77:61:4d:82:b2:42:ed:08:f9:e3:24:82:a9:22:40: ec:12:7f:3f:d5:76:97:c6:1f:43:28:a1:37:01:65: 76:80:ad:fc:b0:29:f7:89:89:1c:52:3c:aa:56:b1: 21:06:9f:40:03:04:2e:59:5a:c7:3e:ef:65:be:73: 57:03:b9:bf:89:e1:61:73:86:79:6b:33:73:f0:cd: f4:e6:cf:f7:b7:e9:4c:99:67:1a:b1:d0:59:23:9b: bb:38:da:47:ea:aa:e3:ca:81:42:24:90:4f:ac:fa: b0:b7:c7:76:75:f6:0b:ef:4c:4b:9f:09:93:44:a8: de:f9:ab:3f:4d:c7:88:78:f5:c2:e4:6b:1e:81:ae: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E3:2D:CD:7D:93:40:09:53:3E:B7:17:23:D6:BD:6F:1B:C6:C0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b7:e9:1c:a4:96:0d:ca:ae:27:57:00:d8:40:f1:b0:e8:9c: e2:0a:d6:d6:50:c6:72:ce:a7:2b:bd:ce:5a:cf:d2:fc:f4:cf: fe:08:bf:3c:09:79:59:7d:5d:dc:24:89:8c:bf:6c:c3:dd:6e: 13:b8:d7:fa:57:c7:67:ac:ec:fb:c1:53:f3:d6:93:ee:4f:79: f7:19:c6:b0:f9:5e:69:a9:69:d6:fe:5a:8f:0f:21:3b:38:35: 75:12:c0:ac:03:d0:73:05:ff:43:4d:76:9d:c2:45:66:d3:59: 9e:12:8b:97:68:61:b8:9c:ef:69:96:b8:a9:64:1c:a7:49:ae: b2:49:2b:f4:01:cd:bb:25:38:8c:34:30:e8:ad:fd:ac:07:85: 05:b6:fb:81:64:2d:72:d9:1c:0a:92:3a:7e:9c:8e:33:8f:66: 07:81:b5:39:c9:3d:17:27:55:f1:43:4f:20:26:de:03:ae:9a: ff:76:a5:ac:4d:20:6b:c8:56:c2:76:e1:2d:0c:69:76:ab:60: 69:23:91:75:10:bb:69:3f:63:bc:4e:52:41:6b:2f:ea:64:08: 68:bf:fe:6e:82:ad:6a:53:4d:39:cd:25:34:06:db:6a:90:23: ae:88:ec:e5:fa:00:3d:79:6d:be:34:bc:d5:9e:4b:52:65:3b: 20:f9:94:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseVMiNVGrdVpGawwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk M2Y5YTA0ZTgtNGU1MS00ZTBlLTg0MWYtOWQ1MmRiNTVkMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYrqA0v66ncI2w9ZyLBdy7N8f3lOR0ktA7mS vXKv5gj3qVen1PS167BHE/FWpk8Ud4wk1sMwXahhx7PGtVMLuklIH1TijU4W+qjA IrQI2EDEDlWkfqfA9W9S7bjLsmxUMPkRG1Jls7OUvxvMUK/7eEBNgr1facV3YU2C skLtCPnjJIKpIkDsEn8/1XaXxh9DKKE3AWV2gK38sCn3iYkcUjyqVrEhBp9AAwQu WVrHPu9lvnNXA7m/ieFhc4Z5azNz8M305s/3t+lMmWcasdBZI5u7ONpH6qrjyoFC JJBPrPqwt8d2dfYL70xLnwmTRKje+as/TceIePXC5Gsega5cWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjjLc19k0AJUz63FyPWvW8bxsAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDYwOWQ3ZDEtODFlOC0z NzAzLTlhMTItYTZmOTdhMWJkNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYhQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+36Ryklg3KridXANhA8bDonOIK1tZQxnLOpyu9zlrP0vz0z/4IvzwJ eVl9XdwkiYy/bMPdbhO41/pXx2es7PvBU/PWk+5PefcZxrD5Xmmpadb+Wo8PITs4 NXUSwKwD0HMF/0NNdp3CRWbTWZ4Si5doYbic72mWuKlkHKdJrrJJK/QBzbslOIw0 MOit/awHhQW2+4FkLXLZHAqSOn6cjjOPZgeBtTnJPRcnVfFDTyAm3gOumv92paxN IGvIVsJ24S0MaXarYGkjkXUQu2k/Y7xOUkFrL+pkCGi//m6CrWpTTTnNJTQG22qQ I66I7OX6AD15bb40vNWeS1JlOyD5lKE= -----END CERTIFICATE-----Generated at Thu Aug 27 11:37:01 2026 by rpki-client