$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa File: f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa (raw, json) Hash identifier: OgQdB14YoUGODXUk5IU6ZoPSuJdxxA8HyN8npHkjJpM= Subject key identifier: 76:6A:47:6F:15:7B:7E:F3:93:B5:17:FF:F6:10:D4:16:80:05:A2:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAE81B5602B704BB85388A6D7 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 7029 IP address blocks: 98.23.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b5:60:2b:70:4b:b8:53:88:a6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=f8ed35a4-21af-42dc-9d74-3abbb776cc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2d:e9:7d:9a:21:64:97:93:55:87:8a:b0:f6: ac:60:7a:26:f6:94:b2:f8:7a:5e:de:27:44:85:4d: a9:a2:ca:36:6e:c7:02:80:d9:f5:65:55:50:6a:aa: a9:30:23:1a:a5:0c:f3:03:bc:07:ad:dd:88:62:6d: 86:62:aa:28:d0:39:9d:7c:e3:f1:41:18:ad:e6:55: a1:26:69:2d:c6:0e:88:fe:d8:c3:66:83:1c:7f:d4: 7e:7f:c0:df:9a:15:f9:8d:db:a4:8c:3e:e1:22:27: 4a:21:fc:fd:3f:ff:6a:72:ec:97:90:88:b9:75:0c: 24:f5:64:32:77:bd:ae:6c:8c:74:ca:64:c3:3f:23: 83:1b:70:fb:87:2f:c8:c2:11:69:e4:9b:8e:b7:a7: 1d:52:e1:b2:8a:b6:a2:b8:66:2e:8a:18:12:e3:73: ea:65:50:4d:27:c7:99:da:67:04:a0:a4:20:29:fc: ae:54:15:95:c9:31:3b:0b:5c:36:1f:e9:08:35:66: 3b:9b:fe:51:5b:4f:52:60:3c:ec:dd:d3:9f:ef:6d: fb:ca:b8:68:0e:5c:6b:35:91:7d:4b:15:97:a2:79: 47:12:aa:9d:2f:b9:94:86:b8:33:4f:de:93:8e:ba: 96:d2:02:df:5d:e6:cb:49:86:e0:8a:0a:0d:5d:74: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6A:47:6F:15:7B:7E:F3:93:B5:17:FF:F6:10:D4:16:80:05:A2:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8d:36:8a:1a:81:b6:2e:8b:0c:f1:20:d7:14:6b:8b:00:9d: 15:85:ab:21:d8:77:d3:45:8c:50:7f:08:74:b6:ca:1c:b4:96: ca:e7:ac:1d:ce:c7:36:20:b4:67:ec:c2:d7:49:e2:d1:3e:df: f1:7f:7f:82:07:fd:7d:3b:83:be:3e:6c:ba:76:a5:01:16:17: 7c:90:3c:31:39:02:20:b7:70:3a:52:c7:11:4f:1c:45:a1:df: f8:03:a0:3f:15:48:e6:8a:eb:55:4c:e6:bb:c4:e4:60:56:22: 1e:e9:a3:a7:80:42:8d:20:08:f8:47:89:1f:ff:04:23:16:2c: 6c:1e:70:cd:2c:54:0c:23:a9:90:1c:87:8f:7e:c8:ad:b6:43: 2e:1b:ea:51:8a:99:e6:58:5c:a3:56:01:a4:c1:7c:b2:96:1b: 13:f9:1f:c8:46:be:be:88:9f:58:c0:e1:e5:55:97:68:4d:25: cf:ca:a4:ef:4f:d4:5e:7e:27:7b:a8:0f:ea:4a:0e:35:8c:96: 5e:9e:2e:0b:97:94:cc:d9:b8:a6:24:f5:54:ea:8e:12:c2:07: 66:d5:35:44:b2:e5:15:ee:6b:10:4b:0a:7a:28:60:23:85:d6: 3b:93:2e:6a:fe:c0:c1:f1:f9:43:89:36:06:77:76:03:1d:6d: 87:19:af:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbVgK3BLuFOIptcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk ZjhlZDM1YTQtMjFhZi00MmRjLTlkNzQtM2FiYmI3NzZjYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC3pfZohZJeTVYeKsPasYHom9pSy+Hpe3idE hU2poso2bscCgNn1ZVVQaqqpMCMapQzzA7wHrd2IYm2GYqoo0DmdfOPxQRit5lWh Jmktxg6I/tjDZoMcf9R+f8DfmhX5jdukjD7hIidKIfz9P/9qcuyXkIi5dQwk9WQy d72ubIx0ymTDPyODG3D7hy/IwhFp5JuOt6cdUuGyiraiuGYuihgS43PqZVBNJ8eZ 2mcEoKQgKfyuVBWVyTE7C1w2H+kINWY7m/5RW09SYDzs3dOf7237yrhoDlxrNZF9 SxWXonlHEqqdL7mUhrgzT96TjrqW0gLfXebLSYbgigoNXXQX0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZqR28Ve37zk7UX//YQ1BaABaKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjNiOGFhYmUtZTI3ZC0z NDgwLThlNzItNWI5Zjk2OWJjOGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYheAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuNNooagbYuiwzxINcUa4sAnRWFqyHYd9NFjFB/CHS2yhy0lsrnrB3O xzYgtGfswtdJ4tE+3/F/f4IH/X07g74+bLp2pQEWF3yQPDE5AiC3cDpSxxFPHEWh 3/gDoD8VSOaK61VM5rvE5GBWIh7po6eAQo0gCPhHiR//BCMWLGwecM0sVAwjqZAc h49+yK22Qy4b6lGKmeZYXKNWAaTBfLKWGxP5H8hGvr6In1jA4eVVl2hNJc/KpO9P 1F5+J3uoD+pKDjWMll6eLguXlMzZuKYk9VTqjhLCB2bVNUSy5RXuaxBLCnooYCOF 1juTLmr+wMHx+UOJNgZ3dgMdbYcZrx0= -----END CERTIFICATE-----Generated at Thu Aug 27 10:28:02 2026 by rpki-client