$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a6bf8d0-be2d-3c32-8d9a-93a6cfbbd9a9.roa File: 0a6bf8d0-be2d-3c32-8d9a-93a6cfbbd9a9.roa (raw, json) Hash identifier: MPsdaPZTIhmEOJDTz0zrJVpEOKL2b+dWIrkRG9aMG5U= Subject key identifier: 56:07:A4:E3:79:21:6A:B6:E5:75:48:47:FC:8D:E6:FD:F3:96:8D:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F10AEA6E3FF24DF8551636700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a6bf8d0-be2d-3c32-8d9a-93a6cfbbd9a9.roa Signing time: Fri 04 Sep 2026 17:00:17 +0000 ROA not before: Fri 04 Sep 2026 17:00:17 +0000 ROA not after: Thu 03 Dec 2026 18:00:17 +0000 asID: 7029 IP address blocks: 98.20.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:ae:a6:e3:ff:24:df:85:51:63:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 17:00:17 2026 GMT Not After : Dec 3 18:00:17 2026 GMT Subject: CN=1d3f6eff-6f96-47f1-aa4c-c5bfc2c748df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ae:48:9a:63:76:52:4d:5e:d3:60:af:4b:69: ae:05:7e:57:ab:a5:f5:c8:72:8a:de:c3:49:2c:c3: 1a:89:35:b6:8b:cb:30:90:ac:de:68:39:a9:56:7d: 95:bc:46:c8:89:63:df:d3:ad:ed:0c:44:65:e7:2e: a1:4b:a7:ec:d4:4e:84:60:90:f6:b4:90:e0:a5:2a: 06:c6:27:ee:79:4b:16:b6:95:a1:2a:e7:d5:5b:26: ff:71:bc:2f:49:18:70:68:00:52:60:49:0d:84:fa: f4:c9:36:ee:a9:ae:a1:26:8c:f5:ce:ff:46:c8:47: 02:43:ec:f0:ea:4f:ab:ff:c2:19:04:9a:de:df:6a: 58:e7:f4:f2:e5:73:1e:4e:d5:a5:de:2f:7a:55:9a: 97:a2:c5:14:c3:b3:c2:d9:5b:d2:14:06:8b:5e:0e: f6:f9:fc:77:f6:40:54:39:01:b9:34:ec:6b:f9:de: 10:4b:20:48:64:d4:c5:e7:73:9f:20:14:ce:1f:f2: de:d4:4c:c2:3b:51:77:71:a1:65:89:ad:cb:f2:de: de:b4:ce:8e:43:c6:74:df:01:66:9b:66:64:ec:5c: 96:df:27:f9:a7:13:ea:3e:b4:b2:0f:3d:f0:3e:d9: d6:21:40:62:4d:63:f8:b6:29:0c:9c:10:84:1c:c2: a3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:07:A4:E3:79:21:6A:B6:E5:75:48:47:FC:8D:E6:FD:F3:96:8D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a6bf8d0-be2d-3c32-8d9a-93a6cfbbd9a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:21:9c:9e:43:f9:90:61:cc:6f:e3:b6:be:44:90:bb:ab:c6: b8:3a:32:1e:0d:63:74:c8:29:4e:bc:3a:66:cc:81:3c:dd:a5: a5:16:e9:34:1e:d1:10:94:63:74:ba:29:4f:a2:61:65:48:ec: d0:d8:e9:90:38:c9:50:c8:28:d6:67:dd:ab:30:2a:86:cf:c9: e0:6d:e7:29:d8:27:3c:d7:ee:d5:ad:33:6d:87:b0:ef:00:75: 5f:30:bd:c4:42:af:4d:0f:60:dd:5b:db:80:50:58:0c:ca:82: d9:b3:ea:fc:e8:83:de:c2:fb:be:a2:c6:7a:6d:f0:f0:64:de: 6f:72:57:f7:8c:0b:54:84:92:c0:98:0a:e4:13:c7:c7:aa:5f: ca:fb:6e:71:3f:91:88:be:48:ec:28:15:41:2c:84:9a:de:43: 55:41:d6:a3:fe:90:85:72:30:c1:50:96:f9:d3:bb:5b:8c:d1: 39:38:8a:a1:9f:94:e0:8d:a3:f4:36:76:18:2e:fd:02:be:2c: f9:87:01:f5:97:db:d2:cb:09:3a:c9:ac:fc:af:9d:01:43:84: cd:b1:73:5f:11:08:2c:a3:fa:df:8a:da:f7:b9:3e:a1:70:9c: f7:cf:73:5f:c3:58:34:90:f1:ba:8b:a6:af:57:56:de:fd:81: fd:4c:b5:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Qrqbj/yTfhVFjZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNDE3MDAxN1oXDTI2MTIwMzE4MDAxN1owLzEtMCsGA1UEAxMk MWQzZjZlZmYtNmY5Ni00N2YxLWFhNGMtYzViZmMyYzc0OGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq5ImmN2Uk1e02CvS2muBX5Xq6X1yHKK3sNJ LMMaiTW2i8swkKzeaDmpVn2VvEbIiWPf063tDERl5y6hS6fs1E6EYJD2tJDgpSoG xifueUsWtpWhKufVWyb/cbwvSRhwaABSYEkNhPr0yTbuqa6hJoz1zv9GyEcCQ+zw 6k+r/8IZBJre32pY5/Ty5XMeTtWl3i96VZqXosUUw7PC2VvSFAaLXg72+fx39kBU OQG5NOxr+d4QSyBIZNTF53OfIBTOH/Le1EzCO1F3caFlia3L8t7etM6OQ8Z03wFm m2Zk7FyW3yf5pxPqPrSyDz3wPtnWIUBiTWP4tikMnBCEHMKjMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYHpON5IWq25XVIR/yN5v3zlo1AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGE2YmY4ZDAtYmUyZC0z YzMyLThkOWEtOTNhNmNmYmJkOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhS4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYhnJ5D+ZBhzG/jtr5EkLurxrg6Mh4NY3TIKU68OmbMgTzdpaUW6TQe 0RCUY3S6KU+iYWVI7NDY6ZA4yVDIKNZn3aswKobPyeBt5ynYJzzX7tWtM22HsO8A dV8wvcRCr00PYN1b24BQWAzKgtmz6vzog97C+76ixnpt8PBk3m9yV/eMC1SEksCY CuQTx8eqX8r7bnE/kYi+SOwoFUEshJreQ1VB1qP+kIVyMMFQlvnTu1uM0Tk4iqGf lOCNo/Q2dhgu/QK+LPmHAfWX29LLCTrJrPyvnQFDhM2xc18RCCyj+t+K2ve5PqFw nPfPc1/DWDSQ8bqLpq9XVt79gf1MtQ0= -----END CERTIFICATE-----Generated at Mon Sep 21 17:53:42 2026 by rpki-client