$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62134457-a2ad-319d-956d-7d1516e6dcc0.roa File: 62134457-a2ad-319d-956d-7d1516e6dcc0.roa (raw, json) Hash identifier: sX3Hth3F5UVAUS1GVXLe2noOcBo1X4qo8mGatCrzCNo= Subject key identifier: E3:F9:57:83:AD:C3:10:60:4C:39:FF:4C:10:DA:93:A7:31:3F:47:7E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F6269BD1BBFA935BDE700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62134457-a2ad-319d-956d-7d1516e6dcc0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.20.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:62:69:bd:1b:bf:a9:35:bd:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=638ed8ad-6e0c-4212-b5d2-f4f7568092c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a3:e0:dc:df:5b:24:34:2e:54:91:2a:f8:e7: de:0e:19:27:3b:62:cf:cf:cf:b1:ba:35:a7:fb:33: 8b:d3:fc:7e:80:d6:e0:90:b5:01:e0:3d:ea:7a:cf: cd:09:63:09:81:77:db:5e:66:f2:af:71:24:98:c8: d7:6e:67:5d:57:fd:f0:ba:96:26:8f:a7:da:89:92: 6b:2a:48:55:5c:89:c5:3d:e2:af:11:96:9b:c1:37: 67:11:45:70:0f:c7:b1:11:d8:8a:37:78:8c:cc:cf: bf:54:e3:c9:0f:30:7c:7c:58:65:7d:48:df:39:39: e8:e3:0d:89:93:7e:20:ef:c0:50:09:89:42:23:27: 71:65:06:2f:43:1a:94:5d:aa:44:37:07:86:9d:f6: 04:33:91:cd:25:c5:9d:9a:87:96:d3:11:5f:bf:68: bc:48:67:1d:d7:75:30:21:00:9e:ee:3d:c7:4c:1d: d6:a2:61:c2:11:a0:ba:42:5e:72:15:d9:56:22:6f: 3e:c2:ae:fc:9f:15:16:3c:69:c7:d7:a6:9e:52:3e: a6:99:88:f7:a1:e7:08:df:59:da:b2:f4:30:fa:be: b6:65:5d:82:3c:9d:7f:fb:d7:83:73:97:a9:cb:6f: 96:8b:7d:7c:58:ce:5f:fb:09:f2:10:e5:da:39:2b: 71:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F9:57:83:AD:C3:10:60:4C:39:FF:4C:10:DA:93:A7:31:3F:47:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62134457-a2ad-319d-956d-7d1516e6dcc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:22:fb:5b:66:d3:22:04:6e:63:40:97:a3:f8:4f:e0:b9:1d: 66:cf:8a:29:39:3f:21:3e:d9:3a:34:de:3b:be:09:8d:bc:f3: b0:f1:c9:f5:88:03:ad:7e:cc:34:e7:1d:e7:7c:2f:e9:49:f8: 2f:dd:66:4f:f9:dd:40:1d:f7:1e:80:d3:dc:79:76:58:2e:a5: 44:20:60:ae:f9:1f:e7:6f:f0:c4:84:5b:a5:f4:91:68:57:78: 06:53:97:eb:ba:30:52:b8:b2:c8:f3:0a:21:ca:14:cb:63:43: 5c:5a:18:8f:59:91:75:25:f9:b9:ab:cd:c6:0a:d1:57:9e:18: 7c:93:fe:28:a6:eb:8e:af:b9:bb:45:b9:6e:67:a6:83:ef:e2: ee:3d:05:6e:74:ba:73:a3:b6:12:58:e5:91:d9:32:76:4d:60: 86:f0:66:a5:93:8a:e3:1d:4a:ee:7f:c7:76:e1:58:1e:17:de: 46:02:56:b8:43:fc:d0:78:a9:18:0a:e1:f6:a8:c4:d0:3d:e9: 11:7a:1b:dc:26:3a:91:e6:c2:c2:6c:2c:0b:bb:d2:5d:90:ab: b0:e1:ab:64:4b:fc:95:5b:e7:a1:67:54:d2:d3:03:0c:0c:d6: f7:47:a5:15:5c:06:d4:87:59:1a:e3:02:f7:b9:15:a6:cb:72: ff:b4:4b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf2JpvRu/qTW95wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjM4ZWQ4YWQtNmUwYy00MjEyLWI1ZDItZjRmNzU2ODA5MmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKPg3N9bJDQuVJEq+OfeDhknO2LPz8+xujWn +zOL0/x+gNbgkLUB4D3qes/NCWMJgXfbXmbyr3EkmMjXbmddV/3wupYmj6faiZJr KkhVXInFPeKvEZabwTdnEUVwD8exEdiKN3iMzM+/VOPJDzB8fFhlfUjfOTno4w2J k34g78BQCYlCIydxZQYvQxqUXapENweGnfYEM5HNJcWdmoeW0xFfv2i8SGcd13Uw IQCe7j3HTB3WomHCEaC6Ql5yFdlWIm8+wq78nxUWPGnH16aeUj6mmYj3oecI31na svQw+r62ZV2CPJ1/+9eDc5epy2+Wi318WM5f+wnyEOXaOStxiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP5V4OtwxBgTDn/TBDak6cxP0d+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjIxMzQ0NTctYTJhZC0z MTlkLTk1NmQtN2QxNTE2ZTZkY2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGci+1tm0yIEbmNAl6P4T+C5HWbPiik5PyE+2To03ju+CY2887DxyfWI A61+zDTnHed8L+lJ+C/dZk/53UAd9x6A09x5dlgupUQgYK75H+dv8MSEW6X0kWhX eAZTl+u6MFK4ssjzCiHKFMtjQ1xaGI9ZkXUl+bmrzcYK0VeeGHyT/iim646vubtF uW5npoPv4u49BW50unOjthJY5ZHZMnZNYIbwZqWTiuMdSu5/x3bhWB4X3kYCVrhD /NB4qRgK4faoxNA96RF6G9wmOpHmwsJsLAu70l2Qq7Dhq2RL/JVb56FnVNLTAwwM 1vdHpRVcBtSHWRrjAve5FabLcv+0S/g= -----END CERTIFICATE-----Generated at Wed Sep 30 21:28:29 2026 by rpki-client