$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/365bfc95-2bab-3670-9660-42731ca45b2f.roa File: 365bfc95-2bab-3670-9660-42731ca45b2f.roa (raw, json) Hash identifier: EwvlcVK6IXSZ5YPSerNEPR8Fh3TVzSJ6BJir6+np5cU= Subject key identifier: 2E:EF:87:58:46:4A:C3:1D:9D:3D:2F:D7:EB:52:67:7D:49:53:0F:BB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F1090F5DAA642134A63F78B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/365bfc95-2bab-3670-9660-42731ca45b2f.roa Signing time: Fri 04 Sep 2026 16:00:28 +0000 ROA not before: Fri 04 Sep 2026 16:00:28 +0000 ROA not after: Thu 03 Dec 2026 17:00:28 +0000 asID: 7029 IP address blocks: 98.20.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:90:f5:da:a6:42:13:4a:63:f7:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 16:00:28 2026 GMT Not After : Dec 3 17:00:28 2026 GMT Subject: CN=e1e2b730-0e69-4dea-8fd2-fbef1d3a053f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9d:74:30:84:ce:54:a5:9b:01:16:26:7a:10: ae:23:dc:cd:26:5e:27:7b:d3:cb:b6:19:58:bc:bf: 44:b8:09:47:6d:e4:83:d9:52:2e:af:6f:2c:20:4b: 42:33:05:17:69:3f:ac:b7:59:10:4c:8f:4b:c3:21: 73:4d:51:bd:04:a9:22:0e:76:45:12:2e:be:c8:66: f2:5a:fc:74:d2:75:94:4b:29:00:10:2a:84:78:03: 2a:fb:ea:0e:27:a2:35:20:81:cf:90:cc:c1:8f:1d: be:c3:a1:f1:99:96:ff:8e:d4:56:fe:6e:7e:b6:7a: e3:da:bd:d2:d9:42:ad:3e:04:1d:30:42:ab:8d:a8: 2e:4c:63:b9:ac:43:e2:46:b6:aa:6a:91:9c:4b:ce: 23:19:a2:74:84:6f:10:6d:89:0f:c1:1d:22:59:0b: 40:93:fa:91:a0:b3:b7:2f:37:00:32:7b:19:be:ff: c8:ee:40:c0:fb:4d:f4:12:e5:8b:b4:e9:80:6a:45: 29:c7:00:d5:d9:df:51:e9:ab:cf:33:21:dd:c9:3b: 58:a2:bb:7d:db:33:b7:89:25:5f:69:93:23:7f:7a: 4c:54:04:75:13:67:f6:a1:4a:88:40:21:10:ea:c0: bd:92:4a:23:d6:1c:89:7b:72:41:24:15:56:cb:e5: 0b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EF:87:58:46:4A:C3:1D:9D:3D:2F:D7:EB:52:67:7D:49:53:0F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/365bfc95-2bab-3670-9660-42731ca45b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ad:bf:ac:b2:d1:c6:06:36:be:dc:08:c1:b3:b5:b6:26:2f: 24:15:46:54:a0:89:95:24:aa:79:69:21:05:b4:10:3f:03:34: f8:83:b2:50:63:ff:96:4d:85:09:bf:15:e9:16:ba:8f:30:d7: 07:a8:b5:c4:1c:8a:ff:ad:b9:22:39:62:3b:05:06:40:cb:cd: 3e:01:91:80:13:ef:84:ed:23:56:f1:5e:7e:5f:cb:c9:46:1e: f2:77:c7:2f:8b:72:02:6f:ef:da:74:45:3f:fa:c2:25:2a:5c: 7f:55:e1:6c:0a:59:e7:b9:ab:8b:99:7c:f6:f6:a5:af:4c:ac: 5e:c5:52:59:8f:c2:17:1a:64:24:c8:0f:3e:42:d9:af:b3:3a: 9d:3d:69:8e:7e:f1:e3:65:0a:44:8a:1a:31:5e:66:2d:7e:5c: 7f:9f:b0:90:55:d3:e5:3c:c8:e6:d5:9f:fc:21:b2:c7:6a:f3: 9a:3d:9e:af:3d:b5:e6:5f:12:42:89:70:98:17:6a:2e:48:dd: e2:36:2a:81:80:76:59:c2:cb:71:15:c7:ea:78:50:e9:0e:36: 68:29:e5:c6:f7:c6:3c:64:cc:aa:7b:96:c1:d8:bf:d0:fb:aa: b8:d7:b7:73:b5:b2:6f:32:9c:2b:ea:2b:4a:7b:d5:59:c6:3e: d5:92:e7:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QkPXapkITSmP3i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNDE2MDAyOFoXDTI2MTIwMzE3MDAyOFowLzEtMCsGA1UEAxMk ZTFlMmI3MzAtMGU2OS00ZGVhLThmZDItZmJlZjFkM2EwNTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn510MITOVKWbARYmehCuI9zNJl4ne9PLthlY vL9EuAlHbeSD2VIur28sIEtCMwUXaT+st1kQTI9LwyFzTVG9BKkiDnZFEi6+yGby Wvx00nWUSykAECqEeAMq++oOJ6I1IIHPkMzBjx2+w6HxmZb/jtRW/m5+tnrj2r3S 2UKtPgQdMEKrjaguTGO5rEPiRraqapGcS84jGaJ0hG8QbYkPwR0iWQtAk/qRoLO3 LzcAMnsZvv/I7kDA+030EuWLtOmAakUpxwDV2d9R6avPMyHdyTtYort92zO3iSVf aZMjf3pMVAR1E2f2oUqIQCEQ6sC9kkoj1hyJe3JBJBVWy+UL8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7vh1hGSsMdnT0v1+tSZ31JUw+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzY1YmZjOTUtMmJhYi0z NjcwLTk2NjAtNDI3MzFjYTQ1YjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhSyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKtv6yy0cYGNr7cCMGztbYmLyQVRlSgiZUkqnlpIQW0ED8DNPiDslBj /5ZNhQm/FekWuo8w1weotcQciv+tuSI5YjsFBkDLzT4BkYAT74TtI1bxXn5fy8lG HvJ3xy+LcgJv79p0RT/6wiUqXH9V4WwKWee5q4uZfPb2pa9MrF7FUlmPwhcaZCTI Dz5C2a+zOp09aY5+8eNlCkSKGjFeZi1+XH+fsJBV0+U8yObVn/whssdq85o9nq89 teZfEkKJcJgXai5I3eI2KoGAdlnCy3EVx+p4UOkONmgp5cb3xjxkzKp7lsHYv9D7 qrjXt3O1sm8ynCvqK0p71VnGPtWS590= -----END CERTIFICATE-----Generated at Mon Sep 21 11:49:45 2026 by rpki-client