$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa File: f0d0f913-7559-3d06-ac30-36057e4c69cc.roa (raw, json) Hash identifier: h5TWBTQiTVrDIE7MUtMKG9kSIPXcd6Wzg+LzEPTA5BI= Subject key identifier: 67:99:34:BC:2E:1F:95:73:5F:FB:A0:8E:91:BE:5F:4E:DA:F9:14:2C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAFE6FC21939FA347A6D5CE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.20.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:fc:21:93:9f:a3:47:a6:d5:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=34cfb58b-462d-43d0-83fc-1f55fb71e03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:32:f0:73:6e:80:97:0a:a3:9c:cb:df:9f:9f: 93:96:2b:39:79:44:f9:10:c3:05:94:30:32:ae:7c: 83:40:c0:81:d8:74:2e:9f:d1:cf:4b:28:c5:04:1f: 30:26:db:5b:88:4e:cc:47:7e:d6:6f:36:29:d1:7d: 0c:e8:f5:0f:30:83:3e:0e:15:f7:44:bc:fe:a4:36: f8:d5:d6:ab:32:50:01:cb:6e:e6:32:b5:2c:fb:e2: 1f:62:14:47:49:f4:78:49:1b:d7:12:4b:29:15:5e: 39:0f:79:34:ff:71:ca:47:6a:c5:cf:eb:d8:69:70: a3:11:0d:16:3a:1b:37:0d:e9:b9:bf:89:6b:cf:f7: 64:18:6e:3a:ad:77:1f:bf:95:7c:56:2a:c3:28:6d: fd:af:55:ed:a3:35:26:13:ec:5d:2a:7b:ac:22:1c: f1:68:cf:8f:92:e7:11:c1:a4:1c:b1:63:56:2e:f8: ca:1e:87:85:78:27:81:0b:a9:64:bc:bc:c7:72:af: 94:a8:8f:a2:7c:7d:8f:e4:73:32:76:26:2a:5d:f7: 81:85:0b:46:45:8b:96:d7:36:c9:ee:89:d7:68:d3: 55:73:74:87:83:9d:41:1d:f2:de:48:08:58:68:db: 07:41:28:54:8a:a1:07:09:fc:15:f7:5d:c3:60:b0: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:99:34:BC:2E:1F:95:73:5F:FB:A0:8E:91:BE:5F:4E:DA:F9:14:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ff:90:c8:be:00:ad:74:f3:e0:c7:d1:9f:3f:7f:43:05:b2: fc:60:7e:51:4a:2c:54:3a:a0:a4:71:d2:e6:52:0d:49:cc:61: c2:0c:76:bc:c5:4a:e0:13:24:76:ef:1a:f5:27:34:fd:d3:35: f2:ca:48:12:44:75:98:b1:6c:bd:d2:e4:0b:56:29:22:42:92: 62:f8:e8:e2:ad:36:29:fd:d8:39:26:83:2a:c2:58:26:82:7c: 51:e9:e1:f7:45:dd:98:36:33:8f:e9:5e:de:51:7a:d0:7d:60: 94:a7:14:26:5f:be:b1:13:24:80:29:d9:02:ce:07:6a:a2:52: 62:20:bb:f9:69:cf:f2:05:25:3c:fd:2f:04:ff:39:99:fc:98: f0:81:78:a6:35:83:c6:1a:05:88:db:41:f7:4e:35:e3:de:0a: 0e:0b:cf:66:7a:ad:8e:40:3a:91:65:66:2e:8c:b2:20:9c:1d: 1a:9b:e4:a6:0c:e4:fa:cd:d1:e6:7e:15:1d:a9:81:f4:35:57: d5:ad:47:e1:7e:2e:db:62:e1:aa:4d:54:04:35:c1:4d:33:51: 52:c9:f3:5e:4f:d5:29:e9:0d:74:4d:6f:32:d4:b0:ea:3c:ed: 3e:de:61:52:0a:c6:88:c8:93:0f:39:1a:5b:aa:fe:1d:10:db: 74:e9:d2:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vwhk5+jR6bVzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MzRjZmI1OGItNDYyZC00M2QwLTgzZmMtMWY1NWZiNzFlMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTLwc26AlwqjnMvfn5+Tlis5eUT5EMMFlDAy rnyDQMCB2HQun9HPSyjFBB8wJttbiE7MR37WbzYp0X0M6PUPMIM+DhX3RLz+pDb4 1darMlABy27mMrUs++IfYhRHSfR4SRvXEkspFV45D3k0/3HKR2rFz+vYaXCjEQ0W Ohs3Dem5v4lrz/dkGG46rXcfv5V8VirDKG39r1XtozUmE+xdKnusIhzxaM+PkucR waQcsWNWLvjKHoeFeCeBC6lkvLzHcq+UqI+ifH2P5HMydiYqXfeBhQtGRYuW1zbJ 7onXaNNVc3SHg51BHfLeSAhYaNsHQShUiqEHCfwV913DYLDIEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeZNLwuH5VzX/ugjpG+X07a+RQsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjBkMGY5MTMtNzU1OS0z ZDA2LWFjMzAtMzYwNTdlNGM2OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv/kMi+AK108+DH0Z8/f0MFsvxgflFKLFQ6oKRx0uZSDUnMYcIMdrzF SuATJHbvGvUnNP3TNfLKSBJEdZixbL3S5AtWKSJCkmL46OKtNin92DkmgyrCWCaC fFHp4fdF3Zg2M4/pXt5RetB9YJSnFCZfvrETJIAp2QLOB2qiUmIgu/lpz/IFJTz9 LwT/OZn8mPCBeKY1g8YaBYjbQfdONePeCg4Lz2Z6rY5AOpFlZi6MsiCcHRqb5KYM 5PrN0eZ+FR2pgfQ1V9WtR+F+Ltti4apNVAQ1wU0zUVLJ815P1SnpDXRNbzLUsOo8 7T7eYVIKxojIkw85Gluq/h0Q23Tp0oM= -----END CERTIFICATE-----Generated at Thu Aug 27 11:37:18 2026 by rpki-client