$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10d5bb3b-6c99-3070-b64a-96b940675009.roa File: 10d5bb3b-6c99-3070-b64a-96b940675009.roa (raw, json) Hash identifier: jjlznweaKV5uBpBDa9Pl1TdVotiNisxtUEU45pLHMZs= Subject key identifier: F8:34:15:74:32:10:4B:1D:FD:1B:A0:E3:4C:1C:0F:7F:CE:7E:B2:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E97B5095929D0746232E9D480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10d5bb3b-6c99-3070-b64a-96b940675009.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 7029 IP address blocks: 98.20.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:09:59:29:d0:74:62:32:e9:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=f63be0e9-3748-4831-9e5f-7fb0263c3b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:d0:91:c1:58:41:e3:92:89:1c:9a:1d:da: ba:08:dd:fd:ad:84:f5:a2:28:fa:bc:d8:84:b8:ff: c7:00:88:d1:66:f8:e4:c9:0d:ea:ce:7d:cb:d0:29: e7:eb:24:ce:d6:a6:0c:86:d7:06:33:26:e6:29:db: f3:ed:85:af:fc:62:d4:05:fd:0c:5b:f0:e7:f3:75: 51:85:15:1c:cb:ac:98:fa:94:6f:43:32:7f:5c:f2: 2a:44:32:d2:86:94:d2:9b:20:7e:a1:34:21:13:ea: 3c:eb:84:33:43:cc:2d:9d:a3:7e:6d:12:44:e8:fc: 2f:aa:d0:72:a2:9b:08:6e:1f:13:c5:bc:f6:97:e4: 2f:20:77:a6:69:5a:64:b3:d7:d8:30:33:10:a8:fd: e7:90:96:d4:08:8e:0c:93:8b:74:b0:95:c8:19:b8: c9:8b:39:93:ee:1f:d9:c4:33:28:e9:c7:af:4d:a2: a2:97:fa:74:e9:e6:4a:79:8b:ef:d1:13:72:d7:4a: 84:67:eb:60:01:93:75:6d:5d:ec:bd:f7:6f:fe:f7: cc:b6:d7:d1:88:10:1c:34:c0:ff:8a:97:ef:11:dd: 07:02:63:a7:83:07:bc:c9:f6:5b:3f:c2:5d:5a:08: 57:b8:aa:dc:61:86:52:3a:fc:b7:3a:e7:c4:a4:e5: c8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:34:15:74:32:10:4B:1D:FD:1B:A0:E3:4C:1C:0F:7F:CE:7E:B2:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10d5bb3b-6c99-3070-b64a-96b940675009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:12:41:3e:49:88:24:f3:42:6c:2c:ba:ee:23:1f:22:fb:75: 3e:8e:0c:98:44:07:47:6d:f4:0a:49:8b:21:03:bd:fe:eb:18: 24:8d:8b:59:dc:ca:28:50:03:ce:56:8a:72:55:04:f1:6d:02: eb:38:67:6c:dd:07:11:c1:38:bc:71:d6:3f:02:68:69:d5:fa: 65:0a:43:e8:ee:ba:53:21:f8:20:03:c7:71:16:5b:8d:19:38: 74:03:a8:e1:41:02:0d:af:58:96:e7:8a:98:fa:88:b1:6b:99: 8f:06:94:09:3c:04:42:94:02:ff:d1:0e:9a:cb:39:b6:47:58: 55:28:ff:6e:c3:24:3e:89:29:dc:99:e6:3f:e9:f9:33:ef:df: 34:cd:63:4a:d3:c3:3a:b6:84:cd:1d:2d:2b:70:04:51:ab:40: 52:d2:ce:73:71:4d:2a:f6:6c:e8:54:3f:f6:46:ae:ad:41:f8: e3:cd:ec:b2:a5:e4:06:69:49:25:45:77:9d:c3:51:a2:1c:72: 93:39:0a:98:69:33:de:3f:86:d4:f0:07:c8:14:f2:ec:a8:24: e9:ec:30:b2:92:fe:fe:4b:17:ef:2e:28:a9:9c:ef:2e:c1:59: 02:30:ed:c6:ba:6d:68:9a:d3:04:91:eb:b5:a8:32:1a:cf:fb: 2b:7e:51:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQlZKdB0YjLp1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk ZjYzYmUwZTktMzc0OC00ODMxLTllNWYtN2ZiMDI2M2MzYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvzQkcFYQeOSiRyaHdq6CN39rYT1oij6vNiE uP/HAIjRZvjkyQ3qzn3L0Cnn6yTO1qYMhtcGMybmKdvz7YWv/GLUBf0MW/Dn83VR hRUcy6yY+pRvQzJ/XPIqRDLShpTSmyB+oTQhE+o864QzQ8wtnaN+bRJE6PwvqtBy opsIbh8Txbz2l+QvIHemaVpks9fYMDMQqP3nkJbUCI4Mk4t0sJXIGbjJizmT7h/Z xDMo6cevTaKil/p06eZKeYvv0RNy10qEZ+tgAZN1bV3svfdv/vfMttfRiBAcNMD/ ipfvEd0HAmOngwe8yfZbP8JdWghXuKrcYYZSOvy3OufEpOXIZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg0FXQyEEsd/Rug40wcD3/OfrKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTBkNWJiM2ItNmM5OS0z MDcwLWI2NGEtOTZiOTQwNjc1MDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsSQT5JiCTzQmwsuu4jHyL7dT6ODJhEB0dt9ApJiyEDvf7rGCSNi1nc yihQA85WinJVBPFtAus4Z2zdBxHBOLxx1j8CaGnV+mUKQ+juulMh+CADx3EWW40Z OHQDqOFBAg2vWJbnipj6iLFrmY8GlAk8BEKUAv/RDprLObZHWFUo/27DJD6JKdyZ 5j/p+TPv3zTNY0rTwzq2hM0dLStwBFGrQFLSznNxTSr2bOhUP/ZGrq1B+OPN7LKl 5AZpSSVFd53DUaIccpM5CphpM94/htTwB8gU8uyoJOnsMLKS/v5LF+8uKKmc7y7B WQIw7ca6bWia0wSR67WoMhrP+yt+UYA= -----END CERTIFICATE-----Generated at Fri Jul 24 14:01:39 2026 by rpki-client