$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed00e4fa-6dbd-3b60-a692-e600f4e369a8.roa File: ed00e4fa-6dbd-3b60-a692-e600f4e369a8.roa (raw, json) Hash identifier: iQnlZxAvP3rHcrvCRKHfsPh+dqT9yq+xw7UwsCTOAjw= Subject key identifier: 62:7C:9C:3D:8D:20:12:30:19:D9:CA:44:43:3F:E0:07:CF:37:DC:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78740EC1550FF8820FAA480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed00e4fa-6dbd-3b60-a692-e600f4e369a8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.20.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:40:ec:15:50:ff:88:20:fa:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=72b8bb07-3354-4940-9ff5-c21ae8a160c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e1:60:a1:fd:ce:a2:a0:07:a9:f4:6c:f1:72: 6e:8c:85:e1:7a:9a:b7:1c:39:3d:3e:bb:b3:f3:15: 53:9a:3c:5f:4a:1a:6d:5f:0e:09:2f:b9:dd:78:40: 6b:a7:22:c7:2d:3c:b1:f9:a6:d1:71:c4:d3:4b:d2: 06:e2:6e:5a:e2:47:58:e9:ff:60:d0:db:d6:22:8a: f2:91:29:a8:44:38:12:89:bd:38:cf:1a:ee:a3:1e: 43:10:9c:cc:70:80:56:1a:6f:58:0b:c8:04:1d:b8: ee:ec:e0:cc:49:d5:28:70:01:b1:79:44:65:12:43: b5:51:97:ba:47:df:06:7a:bc:21:ad:2a:69:b2:bf: 06:78:e5:bb:ec:10:7e:26:3a:8f:1c:f8:46:f1:5e: 87:fa:4b:8c:45:90:66:5a:a5:da:d8:50:af:d5:2a: 7f:3a:e0:75:fb:94:31:61:36:eb:e6:ba:f3:73:2c: 2e:e3:c8:cb:db:64:c3:2f:b2:7a:0a:0b:78:b3:16: 14:9e:bd:0a:ca:9a:22:77:ec:7c:34:42:f4:ae:e0: fb:f6:1e:05:67:c4:44:ee:3a:5f:85:c1:47:b4:82: 4b:aa:2a:b6:98:8d:32:74:39:fa:19:71:83:d4:cf: 89:f3:b4:fd:6b:81:16:9f:a2:8b:ca:1f:80:fa:57: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7C:9C:3D:8D:20:12:30:19:D9:CA:44:43:3F:E0:07:CF:37:DC:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed00e4fa-6dbd-3b60-a692-e600f4e369a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c2:f8:a4:2b:e5:eb:70:24:22:a4:ea:d1:ec:84:8b:f6:90: dc:b7:6a:ac:16:27:a4:16:47:32:25:39:cd:37:77:06:c5:6e: b9:a3:e6:3b:2c:57:2e:54:b7:1c:2c:58:3f:c9:f2:c2:58:d9: e1:bc:fa:87:10:d5:4b:a0:bf:87:06:1c:4c:73:74:ba:93:12: c5:36:38:1c:10:b2:e1:a2:cf:35:c4:7e:be:cb:de:ad:a1:ed: f8:ce:a4:5c:1f:89:97:a3:6c:ed:54:ab:eb:b1:43:75:42:ec: 3d:85:a6:3b:53:44:b4:c1:69:97:fe:56:b5:e9:cb:83:1c:c4: 75:99:15:8d:fc:fb:dc:9e:8d:dd:57:40:49:49:3b:32:94:d7: 8c:f6:d4:c7:d9:95:4b:5b:84:ad:95:43:9e:13:42:50:3d:7b: a8:d7:77:19:ed:67:0f:5f:1f:9f:60:f8:86:94:75:97:81:d5: 7f:40:66:8d:36:8c:eb:43:da:2e:97:da:54:b3:44:6f:72:d7: 0f:54:7a:f6:9c:e9:9e:1d:ad:4b:af:5c:c1:40:d4:b7:04:c1: 52:75:71:75:22:fb:6f:8a:54:42:c9:a4:17:19:90:e0:9c:38: bf:18:52:96:8c:fe:75:9d:51:31:a4:97:86:65:e8:2a:da:10: 08:f7:d4:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh0DsFVD/iCD6pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzJiOGJiMDctMzM1NC00OTQwLTlmZjUtYzIxYWU4YTE2MGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuFgof3OoqAHqfRs8XJujIXhepq3HDk9Pruz 8xVTmjxfShptXw4JL7ndeEBrpyLHLTyx+abRccTTS9IG4m5a4kdY6f9g0NvWIory kSmoRDgSib04zxruox5DEJzMcIBWGm9YC8gEHbju7ODMSdUocAGxeURlEkO1UZe6 R98GerwhrSppsr8GeOW77BB+JjqPHPhG8V6H+kuMRZBmWqXa2FCv1Sp/OuB1+5Qx YTbr5rrzcywu48jL22TDL7J6Cgt4sxYUnr0Kypoid+x8NEL0ruD79h4FZ8RE7jpf hcFHtIJLqiq2mI0ydDn6GXGD1M+J87T9a4EWn6KLyh+A+lebFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJ8nD2NIBIwGdnKREM/4AfPN9yCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWQwMGU0ZmEtNmRiZC0z YjYwLWE2OTItZTYwMGY0ZTM2OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhQeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTC+KQr5etwJCKk6tHshIv2kNy3aqwWJ6QWRzIlOc03dwbFbrmj5jss Vy5UtxwsWD/J8sJY2eG8+ocQ1Uugv4cGHExzdLqTEsU2OBwQsuGizzXEfr7L3q2h 7fjOpFwfiZejbO1Uq+uxQ3VC7D2FpjtTRLTBaZf+VrXpy4McxHWZFY38+9yejd1X QElJOzKU14z21MfZlUtbhK2VQ54TQlA9e6jXdxntZw9fH59g+IaUdZeB1X9AZo02 jOtD2i6X2lSzRG9y1w9Uevac6Z4drUuvXMFA1LcEwVJ1cXUi+2+KVELJpBcZkOCc OL8YUpaM/nWdUTGkl4Zl6CraEAj31DU= -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:37 2026 by rpki-client