$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa File: d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa (raw, json) Hash identifier: aRSCKwJgcI5bHxXfRNkf9QTFQRyC96rQQxW3pg+yGlE= Subject key identifier: CE:D9:22:3D:6B:CB:26:22:5F:CD:DB:37:0D:6B:45:D1:75:2C:3F:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1D0F2FA2F24FE3FA6A500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 54142 IP address blocks: 98.16.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:d0:f2:fa:2f:24:fe:3f:a6:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=da7144b5-0625-4f3e-b25e-f16675a990f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0c:3d:e9:8e:38:ff:6c:bd:75:49:a4:cc:53: 22:54:f7:ae:d3:96:9e:47:a9:95:c1:cb:01:e5:ac: 70:05:cd:03:35:c0:8b:2b:23:82:58:d8:6c:31:58: e6:93:e0:50:49:24:da:58:e7:8d:f0:7c:9a:a8:75: 44:4f:dd:f5:c9:96:12:94:d5:a2:6a:5a:f7:64:48: 96:06:79:f8:1f:35:88:a7:51:df:6d:71:96:50:f9: 2a:54:23:78:03:d9:4f:ee:86:cf:fb:93:fa:7c:df: 20:cb:47:0f:8f:e7:51:3e:d8:9b:d7:6f:43:e6:eb: 4f:b0:bd:e1:6c:cc:10:2d:b5:08:0a:6a:86:cb:a0: e1:f3:43:6c:b2:f4:d8:37:7d:d9:8c:a6:21:1b:9c: 81:d5:83:9a:e5:97:03:31:a4:49:1c:08:37:5e:bc: c5:75:eb:37:00:8e:8f:15:b1:cb:97:07:90:51:a1: 65:6c:9f:bf:8e:1c:60:a1:cb:fb:bc:86:b9:3b:43: 92:9d:44:39:e0:40:54:b2:c4:84:6d:91:17:bf:2d: 1a:a7:cd:6c:ce:3d:fa:c2:99:c2:a2:64:7a:b8:2f: 8f:a2:72:a3:fb:6d:35:00:96:6c:4f:3b:f0:0c:89: a9:4b:0d:03:3a:64:2e:e0:f7:90:fd:f9:80:a8:75: 43:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D9:22:3D:6B:CB:26:22:5F:CD:DB:37:0D:6B:45:D1:75:2C:3F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9e:4f:03:f1:48:51:6e:01:d0:1b:4c:ab:1a:03:29:26:31: d8:aa:91:bc:b0:38:0d:7f:05:40:3d:28:a0:07:37:65:6a:f4: 26:df:64:74:b1:26:fb:48:94:db:cb:5a:f5:eb:ec:e5:60:96: 92:a0:b1:78:63:2e:63:88:86:1b:49:d0:9a:ba:88:6a:7f:09: 74:52:43:7a:c7:0f:f5:72:10:23:7d:eb:56:81:2f:40:c5:ff: 38:44:c3:5d:89:61:58:03:77:b4:87:d1:b5:bb:91:76:31:a6: 5d:02:77:b5:4c:87:92:5d:1e:9a:60:cf:d8:3d:bd:73:5f:58: a4:b5:38:36:16:c5:e1:4c:ec:49:5a:aa:d6:b0:12:3a:bd:0d: d2:03:74:34:55:a6:d7:a6:d0:34:41:9c:a4:2e:1b:e2:8a:c3: 9c:2a:a5:5b:a4:d5:10:2f:2a:39:38:b5:ef:01:15:dc:b7:2d: 4d:ce:2d:5a:12:3d:86:46:0c:7d:0f:80:b8:57:0f:5f:1a:58: 64:3d:99:8d:d3:59:62:74:86:b4:14:b2:6e:5a:37:35:8c:8a: f6:11:5e:d1:b0:5d:9b:98:f2:34:14:6d:2d:f6:28:60:a2:af: 8d:3d:db:d4:25:e9:e1:62:75:8c:d4:70:44:4c:b0:78:ea:a8: f4:68:d2:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysdDy+i8k/j+mpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZGE3MTQ0YjUtMDYyNS00ZjNlLWIyNWUtZjE2Njc1YTk5MGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjww96Y44/2y9dUmkzFMiVPeu05aeR6mVwcsB 5axwBc0DNcCLKyOCWNhsMVjmk+BQSSTaWOeN8HyaqHVET931yZYSlNWialr3ZEiW Bnn4HzWIp1HfbXGWUPkqVCN4A9lP7obP+5P6fN8gy0cPj+dRPtib129D5utPsL3h bMwQLbUICmqGy6Dh80NssvTYN33ZjKYhG5yB1YOa5ZcDMaRJHAg3XrzFdes3AI6P FbHLlweQUaFlbJ+/jhxgocv7vIa5O0OSnUQ54EBUssSEbZEXvy0ap81szj36wpnC omR6uC+PonKj+201AJZsTzvwDImpSw0DOmQu4PeQ/fmAqHVDOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7ZIj1ryyYiX83bNw1rRdF1LD80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDljZjllOWQtNDVhNS0z YzQxLWE2NTQtOTYwNDI4Y2MyZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyeTwPxSFFuAdAbTKsaAykmMdiqkbywOA1/BUA9KKAHN2Vq9CbfZHSx JvtIlNvLWvXr7OVglpKgsXhjLmOIhhtJ0Jq6iGp/CXRSQ3rHD/VyECN961aBL0DF /zhEw12JYVgDd7SH0bW7kXYxpl0Cd7VMh5JdHppgz9g9vXNfWKS1ODYWxeFM7Ela qtawEjq9DdIDdDRVptem0DRBnKQuG+KKw5wqpVuk1RAvKjk4te8BFdy3LU3OLVoS PYZGDH0PgLhXD18aWGQ9mY3TWWJ0hrQUsm5aNzWMivYRXtGwXZuY8jQUbS32KGCi r40929Ql6eFidYzUcERMsHjqqPRo0qo= -----END CERTIFICATE-----Generated at Thu Aug 27 09:48:16 2026 by rpki-client