$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc8372ad-05e5-3cfb-b278-7521d217c72e.roa File: dc8372ad-05e5-3cfb-b278-7521d217c72e.roa (raw, json) Hash identifier: o8dQaFg8g1e2uNKKhSF+45tMpC+eU0ccddKKHoc2U+w= Subject key identifier: 94:43:ED:E2:F1:EA:C8:C0:9A:26:48:04:56:B7:8E:8B:BE:FE:39:6B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1E579906C4857FAAA2800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc8372ad-05e5-3cfb-b278-7521d217c72e.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 98.20.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:e5:79:90:6c:48:57:fa:aa:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=3ffa8da6-0508-47cd-8d1b-cf824ca25ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:08:84:c1:78:4c:33:a5:b3:c8:78:d4:76:f9: ae:12:1f:92:e1:b6:6c:5c:7a:b5:7e:06:37:38:72: 5a:f8:7c:20:80:ed:9c:33:54:7e:6b:76:fb:64:1d: d5:e2:86:c3:4c:c3:9e:8c:57:b8:00:8a:76:b2:13: ab:0c:12:3d:a9:9c:87:d8:78:3b:d3:21:38:49:fb: 71:2b:82:e9:30:c9:0a:27:93:7d:3b:4d:b5:fa:5e: 34:39:0f:69:6d:76:da:c9:2e:4f:9f:27:57:14:07: df:e7:03:5b:d5:49:f1:38:1e:46:5d:a4:ce:0e:7c: 4b:b5:73:c2:ab:a6:a8:4f:f5:48:e8:6f:5f:82:11: d6:7b:f8:4a:bb:4b:16:26:a9:ee:5c:5b:66:16:fd: 39:d5:9e:fc:70:96:ab:6e:d3:1b:a6:2a:7f:ab:1d: 0f:c5:63:27:6d:da:c4:a3:13:52:86:b4:75:63:60: 9f:31:c1:68:c4:d9:05:48:81:58:f5:bb:f7:27:0a: 99:15:c6:24:97:71:2e:2a:8d:84:41:bb:f8:d2:56: a0:b8:31:b1:03:a7:2a:87:a9:68:b7:9e:e9:77:ef: d3:2a:ce:f8:02:b9:92:56:88:c1:94:c5:e3:8d:19: f3:cc:42:fb:5d:e2:e2:46:44:88:06:e7:b0:29:6d: 94:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:43:ED:E2:F1:EA:C8:C0:9A:26:48:04:56:B7:8E:8B:BE:FE:39:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc8372ad-05e5-3cfb-b278-7521d217c72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b1:29:f1:4e:3b:db:f9:a4:54:60:88:97:ac:3b:67:c7:0a: 9f:85:db:2d:35:c5:a0:a2:bc:f9:9c:8e:42:54:3a:7a:1c:9b: 11:48:04:8b:76:93:f0:72:f0:a4:7a:6f:d0:77:1d:ff:74:23: c1:e5:af:58:9c:31:c0:ab:1d:a7:de:66:a0:dd:42:72:74:35: b4:6d:8a:c9:e3:9d:a4:b9:7c:a0:d8:d3:b3:68:87:ac:00:0f: 32:bb:eb:51:b0:8f:1a:a8:07:8e:d0:67:ae:02:81:5f:bf:e6: 67:0f:b1:14:f9:88:3f:d8:17:67:12:c0:e9:8a:52:46:47:05: 76:b7:8c:60:5a:3f:fb:34:15:1f:ea:82:45:ca:06:4b:fc:14: f1:3d:c4:52:81:79:e6:2e:19:55:fa:97:26:26:a1:65:1a:06: c6:62:a0:29:7f:d6:94:e7:cb:50:f9:9c:d5:41:ea:f6:bb:38: 9b:92:60:6e:b7:43:52:93:8d:2a:de:1f:42:c2:fb:b4:a0:12: bf:8e:ea:12:40:d2:8c:05:0c:5b:eb:f6:1a:92:4d:ee:da:99: 26:0f:df:20:82:18:02:2e:aa:14:af:f9:47:10:e5:ac:98:fb: a1:54:60:8e:e6:ee:50:1f:c8:22:c3:1f:c9:48:20:e3:ed:ce: 90:c2:3e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseV5kGxIV/qqKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk M2ZmYThkYTYtMDUwOC00N2NkLThkMWItY2Y4MjRjYTI1ZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwiEwXhMM6WzyHjUdvmuEh+S4bZsXHq1fgY3 OHJa+HwggO2cM1R+a3b7ZB3V4obDTMOejFe4AIp2shOrDBI9qZyH2Hg70yE4Sftx K4LpMMkKJ5N9O021+l40OQ9pbXbayS5PnydXFAff5wNb1UnxOB5GXaTODnxLtXPC q6aoT/VI6G9fghHWe/hKu0sWJqnuXFtmFv051Z78cJarbtMbpip/qx0PxWMnbdrE oxNShrR1Y2CfMcFoxNkFSIFY9bv3JwqZFcYkl3EuKo2EQbv40laguDGxA6cqh6lo t57pd+/TKs74ArmSVojBlMXjjRnzzEL7XeLiRkSIBuewKW2UCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRD7eLx6sjAmiZIBFa3jou+/jlrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGM4MzcyYWQtMDVlNS0z Y2ZiLWIyNzgtNzUyMWQyMTdjNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqxKfFOO9v5pFRgiJesO2fHCp+F2y01xaCivPmcjkJUOnocmxFIBIt2 k/By8KR6b9B3Hf90I8Hlr1icMcCrHafeZqDdQnJ0NbRtisnjnaS5fKDY07Noh6wA DzK761GwjxqoB47QZ64CgV+/5mcPsRT5iD/YF2cSwOmKUkZHBXa3jGBaP/s0FR/q gkXKBkv8FPE9xFKBeeYuGVX6lyYmoWUaBsZioCl/1pTny1D5nNVB6va7OJuSYG63 Q1KTjSreH0LC+7SgEr+O6hJA0owFDFvr9hqSTe7amSYP3yCCGAIuqhSv+UcQ5ayY +6FUYI7m7lAfyCLDH8lIIOPtzpDCPlM= -----END CERTIFICATE-----Generated at Thu Aug 27 10:31:16 2026 by rpki-client