$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/93f8d5ba-fae3-345e-a7f2-85468cb10a0b.roa File: 93f8d5ba-fae3-345e-a7f2-85468cb10a0b.roa (raw, json) Hash identifier: 6/o9kde1l4SnRbk7vqbUS3Ok4RRnZvKoBhIn5W/mIwg= Subject key identifier: 84:7A:9E:64:24:2D:35:5C:C0:E8:0B:3A:8F:9D:33:D9:B2:57:BE:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F1125C65C942B1A0DAB719E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/93f8d5ba-fae3-345e-a7f2-85468cb10a0b.roa Signing time: Fri 04 Sep 2026 21:00:18 +0000 ROA not before: Fri 04 Sep 2026 21:00:18 +0000 ROA not after: Thu 03 Dec 2026 22:00:18 +0000 asID: 7029 IP address blocks: 98.21.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:25:c6:5c:94:2b:1a:0d:ab:71:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 21:00:18 2026 GMT Not After : Dec 3 22:00:18 2026 GMT Subject: CN=59504bbc-9a2b-4887-96e2-4ca3073bc4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d0:28:72:25:1b:ca:a6:14:f6:53:be:b0:4e: f7:c2:c1:ca:3f:48:a4:d6:5e:aa:6d:ae:02:5a:38: 97:fe:25:c6:cc:7b:9a:18:18:48:36:c4:63:2a:75: cb:34:02:9f:d7:44:3e:df:6e:87:32:71:20:a1:94: fa:c8:b2:90:40:93:37:74:8a:ea:bc:c2:21:db:8d: b0:37:e2:9e:b3:06:f1:09:55:8f:b1:73:65:98:8f: 5e:ba:11:2e:62:d8:60:5c:2f:49:3b:f3:35:11:bc: 9d:5e:41:0b:d8:60:4c:a4:69:2a:4e:44:b7:28:d8: 5b:05:b2:7e:7f:af:dd:29:cc:40:53:dd:1e:c8:6b: c7:a7:82:da:28:f3:20:e9:8c:37:1c:62:45:26:97: d8:c8:ef:7b:6b:31:bc:d2:47:31:6e:bb:a0:b8:bc: 60:37:1d:f2:c5:ad:df:fd:c3:55:c0:31:4e:9e:06: 84:6e:03:f4:b6:e4:92:15:84:3a:12:e6:6b:eb:7e: 2e:a4:2b:cb:14:7b:d7:84:41:44:fc:4f:11:c0:f8: c0:9c:1d:01:7a:fb:56:96:27:1e:c7:28:48:79:53: 9e:dd:ac:22:39:5d:35:37:1b:45:e0:0d:66:05:2f: 6c:95:00:e6:da:f8:5e:c3:c9:99:eb:37:8f:60:89: 42:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7A:9E:64:24:2D:35:5C:C0:E8:0B:3A:8F:9D:33:D9:B2:57:BE:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/93f8d5ba-fae3-345e-a7f2-85468cb10a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:50:67:05:d1:9c:60:e5:c2:7c:73:aa:5c:4e:0e:8f:3e:9f: 2b:ba:68:cd:c0:4e:bc:13:f6:eb:92:b1:04:3a:c6:8b:da:d1: 24:02:7d:a2:87:d1:de:c6:c1:30:35:93:62:c3:9d:d3:21:2d: b5:76:29:63:a1:ec:d1:f7:aa:31:79:20:2e:59:f2:fb:62:fa: 7e:c4:c3:81:0a:20:6d:c7:48:6a:44:42:3d:b4:ff:20:c9:70: ff:d2:72:4d:b0:67:4d:d0:59:73:43:94:6b:3f:7b:49:49:63: 5a:a8:ca:48:ab:ab:c5:83:53:a3:86:48:05:33:48:70:1e:a8: c6:eb:32:77:49:40:e3:fc:80:1b:bd:42:e9:c3:43:2f:d0:88: 69:d4:7e:bb:be:ce:7e:fb:0d:0e:8e:69:26:a4:d7:40:58:a6: c5:c1:19:d1:f4:0b:78:81:b2:77:c2:b2:0c:4f:8b:62:26:56: 6d:d5:8b:af:44:90:af:5c:88:06:41:6a:40:ba:a2:ba:52:34: 7a:a1:a8:e4:bf:9c:f2:e2:b6:aa:a9:c8:53:ac:cb:b6:1d:ee: d7:ba:43:17:68:07:67:14:e9:e4:bf:82:f1:6e:2d:c3:19:d6: 61:46:0b:16:f7:71:49:1b:90:29:c4:2c:67:1a:a0:73:fb:b7: e0:a3:87:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RJcZclCsaDatxngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNDIxMDAxOFoXDTI2MTIwMzIyMDAxOFowLzEtMCsGA1UEAxMk NTk1MDRiYmMtOWEyYi00ODg3LTk2ZTItNGNhMzA3M2JjNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NAociUbyqYU9lO+sE73wsHKP0ik1l6qba4C WjiX/iXGzHuaGBhINsRjKnXLNAKf10Q+326HMnEgoZT6yLKQQJM3dIrqvMIh242w N+KeswbxCVWPsXNlmI9euhEuYthgXC9JO/M1EbydXkEL2GBMpGkqTkS3KNhbBbJ+ f6/dKcxAU90eyGvHp4LaKPMg6Yw3HGJFJpfYyO97azG80kcxbruguLxgNx3yxa3f /cNVwDFOngaEbgP0tuSSFYQ6EuZr634upCvLFHvXhEFE/E8RwPjAnB0BevtWlice xyhIeVOe3awiOV01NxtF4A1mBS9slQDm2vhew8mZ6zePYIlC3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIR6nmQkLTVcwOgLOo+dM9myV74XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTNmOGQ1YmEtZmFlMy0z NDVlLWE3ZjItODU0NjhjYjEwYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhU/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRQZwXRnGDlwnxzqlxODo8+nyu6aM3ATrwT9uuSsQQ6xova0SQCfaKH 0d7GwTA1k2LDndMhLbV2KWOh7NH3qjF5IC5Z8vti+n7Ew4EKIG3HSGpEQj20/yDJ cP/Sck2wZ03QWXNDlGs/e0lJY1qoykirq8WDU6OGSAUzSHAeqMbrMndJQOP8gBu9 QunDQy/QiGnUfru+zn77DQ6OaSak10BYpsXBGdH0C3iBsnfCsgxPi2ImVm3Vi69E kK9ciAZBakC6orpSNHqhqOS/nPLitqqpyFOsy7Yd7te6QxdoB2cU6eS/gvFuLcMZ 1mFGCxb3cUkbkCnELGcaoHP7t+Cjh4s= -----END CERTIFICATE-----Generated at Sun Sep 20 17:29:28 2026 by rpki-client