$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eae51cf2-e93c-3a1e-bc73-967ebaf3da32.roa File: eae51cf2-e93c-3a1e-bc73-967ebaf3da32.roa (raw, json) Hash identifier: CK9KIVrgBEJUmf9rp6LuRri16SJItqcENJSq9+LxpP0= Subject key identifier: 39:1C:C4:4D:B9:9B:A2:3A:CE:11:DF:A5:91:25:C2:64:64:63:92:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA7873EA922774A591358EE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eae51cf2-e93c-3a1e-bc73-967ebaf3da32.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.17.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3e:a9:22:77:4a:59:13:58:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2cf37110-4e8c-4f3f-90fb-9d22ffae20a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:37:6b:83:ed:9f:17:78:cb:72:f7:df:af:fc: 5a:32:5c:18:09:f9:f8:9f:58:28:e2:96:38:d4:89: a8:4d:3d:19:d4:78:d9:2e:13:4c:a0:09:02:ca:7c: 6b:30:f4:19:5a:8d:44:07:b7:17:a2:95:0d:77:5c: bf:3c:0d:ab:62:16:bc:8c:cd:61:ed:d8:df:f2:aa: fa:e4:fa:7a:bf:f9:c7:fc:5e:ff:fb:86:92:06:bb: 00:4f:8d:6a:98:a6:d8:16:20:3b:41:c2:7c:d6:23: 4f:25:74:df:9d:dd:31:22:78:a8:ad:89:e1:b6:89: 41:84:ac:f7:3c:3f:94:2a:6e:85:a8:72:f5:ff:66: 72:7d:cf:15:d0:0a:ac:a0:eb:cd:8a:fe:51:9e:3d: 72:b3:be:c5:c1:fe:04:3e:1e:7d:5f:2c:b3:93:49: ee:1d:7c:c5:53:86:dd:7c:fb:31:93:4f:2d:f4:a3: 50:4c:15:a0:c6:e4:f2:13:f7:6d:1f:d8:fa:01:db: b8:4a:83:48:d9:46:58:d2:c8:22:0a:d9:73:b0:54: 5b:ef:dc:86:c2:ff:85:ef:ab:17:8b:a3:23:d5:4a: 52:4b:ff:14:95:29:f5:bb:af:d5:e2:26:63:70:a7: a1:69:9f:7d:8f:60:52:f8:a6:be:e8:4e:3e:4e:93: 5e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1C:C4:4D:B9:9B:A2:3A:CE:11:DF:A5:91:25:C2:64:64:63:92:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eae51cf2-e93c-3a1e-bc73-967ebaf3da32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:33:93:57:1f:81:2d:21:2c:52:5d:db:c5:13:99:94:3c:d1: a6:f8:e3:61:5a:3e:fd:00:a1:ee:f3:c6:b0:51:1f:d3:3c:7a: d8:a7:e1:f3:ef:ad:a3:0d:34:4d:bd:2d:b1:a7:75:5e:2a:7f: 8a:c2:e7:bd:32:47:45:73:42:3b:eb:74:ba:4e:39:00:67:c8: 91:1a:95:9f:25:47:ad:41:23:29:cd:7f:e1:fa:46:a3:f2:b1: b0:2b:ef:a9:a4:1a:ca:b4:90:f8:c5:20:19:32:e9:64:08:c4: 93:c7:41:e2:a0:0d:a4:3c:2f:67:6d:d4:b6:7a:64:5d:8f:34: 69:96:c9:cc:3a:13:54:f4:67:47:be:64:c0:e4:30:46:52:1a: 6b:7e:ee:d8:6c:33:9d:28:1a:da:7d:48:2f:10:ab:d2:a8:9e: 95:f9:0e:34:19:0a:03:b5:14:9c:42:12:70:1d:b3:b1:87:39: 4b:f5:02:fd:f9:95:8e:40:25:63:0a:b0:68:45:a0:c5:c5:68: 0b:89:e8:b4:92:b3:10:d2:96:29:15:d8:c4:22:45:58:ce:cd: 6a:bd:d5:cb:9b:5e:4d:df:89:0f:76:66:90:9f:38:b5:15:1f: 3c:fd:df:00:82:fc:d7:2a:21:fb:d6:4c:21:b2:41:57:91:23: e4:ce:bd:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhz6pIndKWRNY7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmNmMzcxMTAtNGU4Yy00ZjNmLTkwZmItOWQyMmZmYWUyMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTdrg+2fF3jLcvffr/xaMlwYCfn4n1go4pY4 1ImoTT0Z1HjZLhNMoAkCynxrMPQZWo1EB7cXopUNd1y/PA2rYha8jM1h7djf8qr6 5Pp6v/nH/F7/+4aSBrsAT41qmKbYFiA7QcJ81iNPJXTfnd0xIniorYnhtolBhKz3 PD+UKm6FqHL1/2Zyfc8V0AqsoOvNiv5Rnj1ys77Fwf4EPh59Xyyzk0nuHXzFU4bd fPsxk08t9KNQTBWgxuTyE/dtH9j6Adu4SoNI2UZY0sgiCtlzsFRb79yGwv+F76sX i6Mj1UpSS/8UlSn1u6/V4iZjcKehaZ99j2BS+Ka+6E4+TpNeLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkcxE25m6I6zhHfpZElwmRkY5LyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWFlNTFjZjItZTkzYy0z YTFlLWJjNzMtOTY3ZWJhZjNkYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8zk1cfgS0hLFJd28UTmZQ80ab442FaPv0Aoe7zxrBRH9M8etin4fPv raMNNE29LbGndV4qf4rC570yR0VzQjvrdLpOOQBnyJEalZ8lR61BIynNf+H6RqPy sbAr76mkGsq0kPjFIBky6WQIxJPHQeKgDaQ8L2dt1LZ6ZF2PNGmWycw6E1T0Z0e+ ZMDkMEZSGmt+7thsM50oGtp9SC8Qq9KonpX5DjQZCgO1FJxCEnAds7GHOUv1Av35 lY5AJWMKsGhFoMXFaAuJ6LSSsxDSlikV2MQiRVjOzWq91cubXk3fiQ92ZpCfOLUV Hzz93wCC/NcqIfvWTCGyQVeRI+TOvYE= -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:19 2026 by rpki-client