$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12a2a5ef-dd19-3ad4-93a3-1d3340c57be5.roa File: 12a2a5ef-dd19-3ad4-93a3-1d3340c57be5.roa (raw, json) Hash identifier: Qo8sB4b4bTZkcpqeCtB7f91Gz5b2F9Eh2UP0tw4DczY= Subject key identifier: E1:6A:0D:D9:E9:CF:2F:77:38:F4:28:CC:57:C2:C1:7A:A9:0A:02:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024232BE976C8E4ECB26F180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12a2a5ef-dd19-3ad4-93a3-1d3340c57be5.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 98.21.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:32:be:97:6c:8e:4e:cb:26:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=be11b557-39e3-4434-bbf9-72842b5495ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:b6:0e:2f:61:1d:53:b4:b6:00:1d:9a:7e: 60:c1:a2:20:c2:22:dd:e3:f1:2f:94:87:fc:d7:8e: 82:34:5f:ab:59:fc:96:71:dd:28:a9:f0:d1:f9:cd: 2b:40:32:51:3c:81:48:b2:33:43:bd:3e:67:f4:1b: ab:55:0b:b7:c3:6a:b7:90:ee:8a:c3:00:eb:3c:bf: 6c:87:02:66:db:6d:e1:3b:a2:98:cd:21:99:f9:04: b8:e1:1d:70:a2:d9:0f:d6:62:0c:3a:2d:fa:ad:ba: 39:dc:cd:cc:1b:89:0e:7b:bd:ce:80:30:70:40:e7: c9:ee:7f:b5:ec:0d:b2:9d:5d:4b:b9:92:b8:f5:e1: f6:7e:af:c1:73:7b:ec:ca:5c:f1:ed:0e:46:ed:0a: a5:07:4f:e4:b4:ba:49:c2:46:ba:3b:1b:3b:d9:4f: 13:2e:d5:85:b2:14:8d:e5:7f:5d:d0:9b:06:ed:70: b8:af:8e:f4:f3:b3:b0:32:a9:2d:e0:70:9c:d7:0b: 74:74:ad:11:8b:8e:0f:74:92:ad:f0:03:77:66:47: 0a:be:c7:e3:59:96:83:fe:9b:f5:47:0d:f8:99:70: 0c:c5:e1:e4:3e:97:5e:67:e9:6f:a8:df:cb:cd:0b: 7e:b7:40:80:5a:68:67:ed:95:c0:c2:36:05:5d:3e: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6A:0D:D9:E9:CF:2F:77:38:F4:28:CC:57:C2:C1:7A:A9:0A:02:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12a2a5ef-dd19-3ad4-93a3-1d3340c57be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:7c:0a:65:38:0b:33:03:ff:42:a6:c4:cf:29:29:8b:00:bb: 48:4f:77:13:4d:79:cf:b2:a7:c9:4e:3b:b7:19:f6:08:7d:91: 8a:d5:94:9e:37:c1:93:73:98:9a:48:12:f3:0e:b5:16:77:d2: f4:0b:11:57:9d:63:fe:07:d3:a4:5d:a6:53:91:5b:5f:9d:aa: a2:8c:44:76:83:94:3d:91:37:47:29:7b:66:02:83:c5:f7:39: df:f8:e1:e3:75:db:2b:73:16:20:19:9a:85:c6:e5:77:ef:0b: 27:64:f5:a8:87:94:2c:7b:ae:bc:43:0a:62:3c:56:76:16:90: 9f:62:cc:7b:ef:e4:7b:06:af:a2:4f:75:ff:f4:37:04:f8:b0: aa:83:af:60:93:f5:c4:3c:9c:e1:ac:6d:22:ed:95:3c:1a:e3: e5:d1:89:67:bf:e2:db:f1:6c:73:e2:b5:61:af:dc:99:11:48: f7:f1:27:e7:40:ce:48:15:41:46:f9:08:ed:a4:96:ed:3e:6e: 85:d1:fb:fc:81:78:cc:9e:3a:c3:7a:13:37:3a:36:50:03:14: 81:7d:30:08:27:a4:af:b5:0f:5b:c9:be:67:87:32:e7:4b:25: 45:4d:97:f7:3d:b9:56:af:94:e3:73:f5:f2:b8:05:67:89:c3: aa:8a:38:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjK+l2yOTssm8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YmUxMWI1NTctMzllMy00NDM0LWJiZjktNzI4NDJiNTQ5NWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgK2Di9hHVO0tgAdmn5gwaIgwiLd4/EvlIf8 146CNF+rWfyWcd0oqfDR+c0rQDJRPIFIsjNDvT5n9BurVQu3w2q3kO6KwwDrPL9s hwJm223hO6KYzSGZ+QS44R1wotkP1mIMOi36rbo53M3MG4kOe73OgDBwQOfJ7n+1 7A2ynV1LuZK49eH2fq/Bc3vsylzx7Q5G7QqlB0/ktLpJwka6Oxs72U8TLtWFshSN 5X9d0JsG7XC4r47087OwMqkt4HCc1wt0dK0Ri44PdJKt8AN3ZkcKvsfjWZaD/pv1 Rw34mXAMxeHkPpdeZ+lvqN/LzQt+t0CAWmhn7ZXAwjYFXT5H5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFqDdnpzy93OPQozFfCwXqpCgKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTJhMmE1ZWYtZGQxOS0z YWQ0LTkzYTMtMWQzMzQwYzU3YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh8CmU4CzMD/0KmxM8pKYsAu0hPdxNNec+yp8lOO7cZ9gh9kYrVlJ43 wZNzmJpIEvMOtRZ30vQLEVedY/4H06RdplORW1+dqqKMRHaDlD2RN0cpe2YCg8X3 Od/44eN12ytzFiAZmoXG5XfvCydk9aiHlCx7rrxDCmI8VnYWkJ9izHvv5HsGr6JP df/0NwT4sKqDr2CT9cQ8nOGsbSLtlTwa4+XRiWe/4tvxbHPitWGv3JkRSPfxJ+dA zkgVQUb5CO2klu0+boXR+/yBeMyeOsN6Ezc6NlADFIF9MAgnpK+1D1vJvmeHMudL JUVNl/c9uVavlONz9fK4BWeJw6qKOG0= -----END CERTIFICATE-----Generated at Tue Sep 22 00:10:17 2026 by rpki-client