$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/c5bd60ea-9028-3627-99ab-6203524e5928.roa File: c5bd60ea-9028-3627-99ab-6203524e5928.roa (raw, json) Hash identifier: j0wVbI7/hU61joNizoFeJdNicqpMJP8RaTGM3U7RBHE= Subject key identifier: BF:49:3F:C3:D7:B8:4F:CF:17:03:87:B0:B0:07:85:3E:B2:81:A6:78 Certificate issuer: /CN=98b2490c-dcb7-4b1f-a79f-05a43608aa62 Certificate serial: 010D0C9F4328584ED32103E18C4BF39689E3CD90 Authority key identifier: F8:6C:F4:7D:86:7C:AA:80:5E:AA:BC:71:DD:F6:FD:02:40:BE:41:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/c5bd60ea-9028-3627-99ab-6203524e5928.roa Signing time: Thu 13 Aug 2026 15:50:36 +0000 ROA not before: Thu 13 Aug 2026 15:50:36 +0000 ROA not after: Wed 11 Nov 2026 16:50:36 +0000 asID: 20119 IP address blocks: 204.10.116.0/22 maxlen: 22 2602:fd7f::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/98b2490c-dcb7-4b1f-a79f-05a43608aa62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/98b2490c-dcb7-4b1f-a79f-05a43608aa62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d3:21:03:e1:8c:4b:f3:96:89:e3:cd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98b2490c-dcb7-4b1f-a79f-05a43608aa62 Validity Not Before: Aug 13 15:50:36 2026 GMT Not After : Nov 11 16:50:36 2026 GMT Subject: CN=4d9951c5-9636-41b0-84b8-692c8efb9b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0c:93:22:05:fd:e5:ff:2d:d5:ea:a4:b9:14: 53:ed:b4:b0:c1:ad:5a:a3:62:49:ba:df:ea:d5:bc: a7:70:61:57:e3:a7:d3:a8:7f:61:8d:6d:72:53:9e: 46:3f:ab:d5:67:8d:3a:7c:6c:dc:44:de:08:1c:3e: 10:57:c1:17:d6:2e:fe:80:85:61:18:93:a5:81:f9: 65:4e:65:ca:9d:36:89:89:99:52:dd:a9:be:2c:47: 93:35:7f:05:12:e5:81:b2:b5:59:a0:69:e9:87:60: 89:a6:64:8d:8a:2d:bf:75:d5:7e:b3:40:c3:13:e1: 46:8e:40:3b:25:d9:5d:8f:83:30:27:d8:74:73:40: 1d:7e:8d:80:7c:3b:2c:55:af:1b:68:7e:cf:b5:03: c6:d8:29:62:69:db:2a:ee:bc:f0:7e:97:99:da:77: dd:c1:c6:b3:f0:cb:9a:4f:49:42:cf:99:22:1d:25: 8f:fd:60:ac:b1:97:cf:1b:6a:a9:c4:8f:91:c1:e7: c5:af:ce:18:ec:38:49:70:d6:b5:71:f2:cd:2f:0f: 83:54:45:8f:f6:53:c8:cc:d3:59:73:62:74:d8:9f: 6c:2f:99:29:88:3a:a5:e3:1c:f4:41:00:4f:03:1b: ee:26:c3:d3:6d:1b:9a:07:95:2f:85:e0:27:77:54: 25:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:49:3F:C3:D7:B8:4F:CF:17:03:87:B0:B0:07:85:3E:B2:81:A6:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/c5bd60ea-9028-3627-99ab-6203524e5928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/98b2490c-dcb7-4b1f-a79f-05a43608aa62.crl X509v3 Authority Key Identifier: keyid:F8:6C:F4:7D:86:7C:AA:80:5E:AA:BC:71:DD:F6:FD:02:40:BE:41:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62.cer sbgp-ipAddrBlock: critical IPv4: 204.10.116.0/22 IPv6: 2602:fd7f::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:54:d5:f4:38:dc:3c:73:d7:6d:c7:8f:e6:95:bc:b0:85:b4: 3f:98:ec:57:cf:9f:3c:fc:b6:46:37:49:73:d3:b9:fa:4f:09: 0f:57:86:6e:a8:0b:f0:80:b5:1a:38:e0:4e:fc:dc:72:a0:89: b8:30:94:db:1a:d7:24:86:66:2d:70:99:58:74:b8:c5:18:75: 66:3a:a9:96:74:d9:40:57:b0:2f:86:10:cf:6b:da:fe:2a:4f: 36:0b:62:59:8d:47:46:8a:6b:9d:23:d5:f6:bd:3d:75:af:ac: 95:30:b5:87:ae:7d:af:9a:f1:dd:9e:d0:b4:6d:28:be:b5:78: b4:55:ec:09:da:5d:71:de:72:51:df:ec:b8:d7:37:b5:69:e9: 80:e6:50:0d:af:eb:fe:df:9f:88:5d:29:39:23:95:d1:1b:72: 9c:17:45:d4:d8:60:b7:69:ca:1a:66:83:79:39:c8:f0:76:83: 68:93:fb:2f:08:0a:21:ab:cc:6c:79:dd:7d:2b:30:4e:45:57: 04:20:95:62:7e:27:33:87:75:bb:6f:f5:67:c3:80:67:ca:a5: 04:03:01:90:f9:5b:61:ad:f8:b6:f1:fb:d8:cb:76:98:8a:c7: 9f:8a:b9:f9:16:ba:85:69:f9:68:fe:08:c4:fd:21:3c:68:b6: b6:50:ea:9f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7TIQPhjEvzlonjzZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThiMjQ5MGMtZGNiNy00YjFmLWE3OWYtMDVhNDM2MDhh YTYyMB4XDTI2MDgxMzE1NTAzNloXDTI2MTExMTE2NTAzNlowLzEtMCsGA1UEAxMk NGQ5OTUxYzUtOTYzNi00MWIwLTg0YjgtNjkyYzhlZmI5YjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAyTIgX95f8t1eqkuRRT7bSwwa1ao2JJut/q 1byncGFX46fTqH9hjW1yU55GP6vVZ406fGzcRN4IHD4QV8EX1i7+gIVhGJOlgfll TmXKnTaJiZlS3am+LEeTNX8FEuWBsrVZoGnph2CJpmSNii2/ddV+s0DDE+FGjkA7 Jdldj4MwJ9h0c0Adfo2AfDssVa8baH7PtQPG2Cliadsq7rzwfpeZ2nfdwcaz8Mua T0lCz5kiHSWP/WCssZfPG2qpxI+RwefFr84Y7DhJcNa1cfLNLw+DVEWP9lPIzNNZ c2J02J9sL5kpiDql4xz0QQBPAxvuJsPTbRuaB5UvheAnd1QlLwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFL9JP8PXuE/PFwOHsLAHhT6ygaZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OGIy NDkwYy1kY2I3LTRiMWYtYTc5Zi0wNWE0MzYwOGFhNjIvYzViZDYwZWEtOTAyOC0z NjI3LTk5YWItNjIwMzUyNGU1OTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOThiMjQ5MGMtZGNiNy00YjFmLWE3 OWYtMDVhNDM2MDhhYTYyLzk4YjI0OTBjLWRjYjctNGIxZi1hNzlmLTA1YTQzNjA4 YWE2Mi5jcmwwHwYDVR0jBBgwFoAU+Gz0fYZ8qoBeqrxx3fb9AkC+Qe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OGIyNDkwYy1kY2I3LTRiMWYtYTc5Zi0wNWE0 MzYwOGFhNjIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCzAp0MA4E AgACMAgDBgQmAv1/ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUVNX0ONw8c9dtx4/mlbywhbQ/mOxXz588 /LZGN0lz07n6TwkPV4ZuqAvwgLUaOOBO/NxyoIm4MJTbGtckhmYtcJlYdLjFGHVm OqmWdNlAV7AvhhDPa9r+Kk82C2JZjUdGimudI9X2vT11r6yVMLWHrn2vmvHdntC0 bSi+tXi0VewJ2l1x3nJR3+y41ze1aemA5lANr+v+35+IXSk5I5XRG3KcF0XU2GC3 acoaZoN5OcjwdoNok/svCAohq8xsed19KzBORVcEIJVificzh3W7b/Vnw4BnyqUE AwGQ+Vthrfi28fvYy3aYisefirn5FrqFaflo/gjE/SE8aLa2UOqf -----END CERTIFICATE-----Generated at Fri Aug 21 22:40:56 2026 by rpki-client