$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e71b1fdf-884d-3f18-9efb-4a4e95157eee.roa File: e71b1fdf-884d-3f18-9efb-4a4e95157eee.roa (raw, json) Hash identifier: cApErO5j5WRTNW4VSLdRjpQ8oTwAHQ8Dkv6j1XxLVbQ= Subject key identifier: F7:0A:82:84:0A:A7:04:6D:A9:32:A9:CD:2D:95:22:CF:E3:49:F4:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA788892B3427B7BBC23CD100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e71b1fdf-884d-3f18-9efb-4a4e95157eee.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.20.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:89:2b:34:27:b7:bb:c2:3c:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9381eabf-a973-4156-927e-ccfd6e1fc7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:18:1f:8a:35:87:8c:9d:6e:b4:97:d4:bb: 2d:f4:44:36:ac:b9:f7:40:31:18:68:06:63:af:f0: 8c:cc:67:4d:28:aa:0f:79:4e:3a:1f:18:a2:b4:a7: 9d:8f:62:01:3e:1b:77:07:fe:e5:de:ab:b7:20:02: 2d:fa:fd:31:66:d5:dd:1c:68:ec:9a:14:3d:b5:e5: 86:86:4a:96:02:ba:95:d1:2b:63:14:59:99:ff:c1: 99:0a:33:fc:19:d3:f9:af:91:4c:59:bd:dd:63:47: fb:a3:a7:ec:1a:c7:a8:10:55:9f:01:cc:da:b5:a3: 25:90:73:ac:93:a4:ea:f1:47:cc:35:18:ce:ab:12: 23:0a:b9:ca:06:2e:47:89:41:e4:f1:4c:6a:a4:c4: 53:65:1b:9a:eb:c4:c2:13:4d:c7:0d:2d:ba:2f:57: aa:74:dd:70:6f:09:46:5a:73:e1:4e:fe:8c:15:30: d5:60:4d:b2:f5:c2:c3:a4:11:54:8f:d4:cd:cf:02: fc:71:9e:db:42:ec:6e:2a:e7:19:d7:46:44:3f:a5: 2f:a8:e9:c6:d1:1a:0a:66:1a:cb:24:f7:1d:9e:23: 92:f2:87:ea:db:b8:66:5b:f0:4d:8a:e4:03:97:96: c9:57:fb:fe:99:30:f4:75:c6:2b:ce:a2:3f:17:e9: de:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0A:82:84:0A:A7:04:6D:A9:32:A9:CD:2D:95:22:CF:E3:49:F4:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e71b1fdf-884d-3f18-9efb-4a4e95157eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:63:91:d6:a6:99:d4:87:b9:86:c0:71:bf:aa:e9:55:7d:a1: bd:67:5b:24:e7:51:37:17:b9:73:9d:cd:14:f7:7e:8c:50:14: 27:30:e2:c0:5c:eb:5f:31:df:22:a9:68:ba:8a:56:30:99:7d: 8a:c9:2c:61:c5:26:21:8d:50:0c:a0:8f:88:ef:ab:86:72:94: 34:34:08:ab:f2:e9:8e:10:6f:ea:29:11:dc:78:0d:6f:a0:fc: 9f:b5:f1:0e:aa:29:7a:b5:98:27:ba:ad:55:2d:15:b4:91:fd: 14:04:4a:ff:25:88:be:40:72:dd:58:64:fd:cf:61:d5:80:98: de:63:f2:c6:39:dd:51:09:f3:26:74:12:e5:a6:ec:bd:cc:f4: 8e:83:fa:82:7d:37:95:e4:ad:1b:0a:42:af:8d:b3:0a:12:6e: a0:be:70:0f:5f:c4:6b:fe:71:42:d5:6c:5b:28:4d:8e:34:3d: 34:07:fb:3c:82:47:b1:6e:97:27:51:eb:ac:2f:df:9d:8f:0f: ad:10:87:f0:6d:c0:c4:27:da:0a:35:b3:f7:cf:d3:ba:34:9f: 15:ae:bd:ad:45:af:f5:21:15:b3:ed:b1:d8:80:a9:fe:a8:0f: 2a:01:42:f6:9b:79:77:e7:03:3f:c3:9c:f3:60:3b:52:82:57: 23:c7:3c:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niIkrNCe3u8I80QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTM4MWVhYmYtYTk3My00MTU2LTkyN2UtY2NmZDZlMWZjN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9UYH4o1h4ydbrSX1Lst9EQ2rLn3QDEYaAZj r/CMzGdNKKoPeU46HxiitKedj2IBPht3B/7l3qu3IAIt+v0xZtXdHGjsmhQ9teWG hkqWArqV0StjFFmZ/8GZCjP8GdP5r5FMWb3dY0f7o6fsGseoEFWfAczataMlkHOs k6Tq8UfMNRjOqxIjCrnKBi5HiUHk8UxqpMRTZRua68TCE03HDS26L1eqdN1wbwlG WnPhTv6MFTDVYE2y9cLDpBFUj9TNzwL8cZ7bQuxuKucZ10ZEP6UvqOnG0RoKZhrL JPcdniOS8ofq27hmW/BNiuQDl5bJV/v+mTD0dcYrzqI/F+nelQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcKgoQKpwRtqTKpzS2VIs/jSfQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTcxYjFmZGYtODg0ZC0z ZjE4LTllZmItNGE0ZTk1MTU3ZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANjkdammdSHuYbAcb+q6VV9ob1nWyTnUTcXuXOdzRT3foxQFCcw4sBc 618x3yKpaLqKVjCZfYrJLGHFJiGNUAygj4jvq4ZylDQ0CKvy6Y4Qb+opEdx4DW+g /J+18Q6qKXq1mCe6rVUtFbSR/RQESv8liL5Act1YZP3PYdWAmN5j8sY53VEJ8yZ0 EuWm7L3M9I6D+oJ9N5XkrRsKQq+NswoSbqC+cA9fxGv+cULVbFsoTY40PTQH+zyC R7FulydR66wv352PD60Qh/BtwMQn2go1s/fP07o0nxWuva1Fr/UhFbPtsdiAqf6o DyoBQvabeXfnAz/DnPNgO1KCVyPHPC8= -----END CERTIFICATE-----Generated at Wed Jul 29 05:42:31 2026 by rpki-client