$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb573c75-7272-3f9c-89b4-ea4856857ea7.roa File: fb573c75-7272-3f9c-89b4-ea4856857ea7.roa (raw, json) Hash identifier: zJHIOHRFktKJPT0UYl1FmaPRqJl6+xgQoYLDhuT5Bec= Subject key identifier: D7:F8:CE:6C:09:72:F7:32:5F:AD:6B:57:94:EF:42:44:06:B3:B6:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EEA87888BB364308A7F3F0900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb573c75-7272-3f9c-89b4-ea4856857ea7.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.18.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:88:8b:b3:64:30:8a:7f:3f:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=cf4bce94-c195-49f7-95b0-a9d661025df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:61:40:1d:ac:cb:2e:fa:45:fb:59:8b:e4: 38:37:48:0d:5d:da:39:02:ab:e6:d1:ae:36:0d:a0: 8d:29:50:73:b0:b9:7a:37:12:d3:8f:39:22:da:39: 49:8d:1b:c7:69:17:55:ba:11:ba:f4:6e:73:39:ed: 6c:dd:3d:5a:c5:8b:c0:a8:47:c3:34:ca:6d:43:6e: 75:be:40:00:e5:a3:f8:2b:44:8b:8d:33:fa:57:5c: b7:59:46:16:ae:d3:6e:4e:36:a8:eb:a2:9e:29:d8: 1e:72:3a:82:f0:2e:26:2c:f6:a9:5f:25:26:be:42: e0:41:e7:ae:eb:8d:a3:4c:2d:99:6b:81:60:50:d2: b6:44:a3:2e:eb:22:54:fa:6a:22:ea:1f:9e:34:51: 6f:b2:a0:ec:30:a6:8c:34:6a:d0:b9:e9:c0:ea:25: ae:cf:62:04:c8:5a:aa:28:78:e6:84:8d:24:b8:09: c2:3e:ba:21:e4:e8:16:92:63:59:45:58:58:f3:65: bb:60:64:44:99:7a:63:38:06:96:e6:f8:ac:95:02: b0:89:35:ad:cc:33:b1:51:99:ae:af:a6:cb:55:bd: 38:c5:2e:0a:b6:b2:8b:35:ab:ce:56:76:be:03:6e: 10:d7:89:42:eb:e8:59:b5:b1:18:88:1d:f7:57:0b: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F8:CE:6C:09:72:F7:32:5F:AD:6B:57:94:EF:42:44:06:B3:B6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb573c75-7272-3f9c-89b4-ea4856857ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:1a:a1:9d:c7:6c:83:be:15:68:16:9c:ef:15:61:47:45:2a: 2f:b7:4b:4e:f5:e3:5c:25:33:b4:8d:f1:77:09:41:94:51:a5: 50:26:f6:16:5b:89:9b:2f:4a:23:d9:5c:36:19:0e:b1:d8:a6: 84:2c:65:01:72:9b:89:0a:17:d6:2d:6c:6e:fc:bf:07:ca:45: a3:32:2b:38:43:43:dd:32:57:6f:44:57:35:f4:91:ec:0f:6c: b1:ba:ee:b0:25:1b:9c:6e:35:11:27:66:60:36:27:e2:53:f6: 22:8a:f0:53:fe:4e:c6:11:ee:48:ad:e5:1f:be:13:60:f8:95: 73:d9:d4:59:ea:18:40:8e:ce:1d:ed:da:74:7a:ab:cf:68:ca: f3:14:e0:95:3d:b2:f0:7b:a6:55:cb:32:dc:72:b0:c0:2f:9c: 84:9e:78:1f:76:57:51:8a:40:7c:71:e1:d1:88:1c:53:fe:72: 3d:74:5d:e6:55:3f:57:c2:7e:b8:d3:12:c9:44:35:a3:c1:03: 38:89:1a:dd:17:33:c8:56:cb:52:10:85:aa:06:b4:a8:b0:fe: ba:18:b3:1f:74:70:af:58:98:52:23:46:29:aa:43:e2:ac:3c: 44:09:b6:d7:a9:76:2b:64:62:fe:f4:25:77:43:96:0a:5e:0a: a5:a5:35:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4iLs2Qwin8/CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk Y2Y0YmNlOTQtYzE5NS00OWY3LTk1YjAtYTlkNjYxMDI1ZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxZhQB2syy76RftZi+Q4N0gNXdo5Aqvm0a42 DaCNKVBzsLl6NxLTjzki2jlJjRvHaRdVuhG69G5zOe1s3T1axYvAqEfDNMptQ251 vkAA5aP4K0SLjTP6V1y3WUYWrtNuTjao66KeKdgecjqC8C4mLPapXyUmvkLgQeeu 642jTC2Za4FgUNK2RKMu6yJU+moi6h+eNFFvsqDsMKaMNGrQuenA6iWuz2IEyFqq KHjmhI0kuAnCProh5OgWkmNZRVhY82W7YGREmXpjOAaW5vislQKwiTWtzDOxUZmu r6bLVb04xS4KtrKLNavOVna+A24Q14lC6+hZtbEYiB33Vwu9YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNf4zmwJcvcyX61rV5TvQkQGs7ZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmI1NzNjNzUtNzI3Mi0z ZjljLTg5YjQtZWE0ODU2ODU3ZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUaoZ3HbIO+FWgWnO8VYUdFKi+3S07141wlM7SN8XcJQZRRpVAm9hZb iZsvSiPZXDYZDrHYpoQsZQFym4kKF9YtbG78vwfKRaMyKzhDQ90yV29EVzX0kewP bLG67rAlG5xuNREnZmA2J+JT9iKK8FP+TsYR7kit5R++E2D4lXPZ1FnqGECOzh3t 2nR6q89oyvMU4JU9svB7plXLMtxysMAvnISeeB92V1GKQHxx4dGIHFP+cj10XeZV P1fCfrjTEslENaPBAziJGt0XM8hWy1IQhaoGtKiw/roYsx90cK9YmFIjRimqQ+Ks PEQJttepditkYv70JXdDlgpeCqWlNa4= -----END CERTIFICATE-----Generated at Thu Aug 27 12:29:49 2026 by rpki-client