$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa File: a1a78e31-2fd1-340f-9abd-830bb997d842.roa (raw, json) Hash identifier: MkbB2QR08u1v0ikRubjfoS3vxl7e5QCShuXVtV2m22Y= Subject key identifier: FD:77:29:44:39:38:DA:FF:3A:A9:82:AF:89:75:E2:34:9A:69:30:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F02423910CBF4F489CE384D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 98.19.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:39:10:cb:f4:f4:89:ce:38:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=7d1a672c-f5e6-4ed6-98f0-374f0c32bed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:cc:ff:17:75:f3:8f:ab:e9:f1:16:2d:a7: 04:13:08:3d:c5:26:a3:ad:2a:a8:1a:25:ac:3a:3b: 86:a7:ad:51:8e:03:40:ed:c3:8b:60:d7:5c:45:d1: dc:f8:40:ad:d2:d1:f1:6d:97:b1:1f:a0:0b:ee:3f: 03:6d:66:67:2a:ce:8f:15:9c:98:42:88:38:5a:ec: e4:48:a1:37:8e:8a:0e:74:2d:ff:d5:bc:71:79:ac: cd:be:c3:f1:7c:a5:18:15:bd:5c:ec:f5:5c:48:e9: 78:d4:b9:e0:f6:d0:1d:38:28:fb:f8:73:63:7a:60: 56:e7:ed:0d:ba:18:f1:aa:e7:8b:46:14:8a:6d:80: 36:19:2d:fa:9a:46:5b:79:1f:8d:d9:d2:5b:cb:5c: 25:42:28:dc:4b:35:b8:e9:c6:7d:33:e1:e2:72:f5: 89:16:33:17:b8:48:29:a9:f1:ce:4f:9f:74:49:1a: 07:c2:51:81:01:98:e6:6c:f3:41:79:21:1f:0a:54: 1a:92:31:3f:22:41:ee:ac:5a:13:21:2c:60:fb:c4: eb:2c:c6:5f:af:2f:f8:91:13:a0:0c:91:d0:94:05: 34:83:e0:d1:7e:04:45:34:54:f2:62:31:e5:f7:94: 1c:4d:4e:6c:0b:a3:71:0a:18:0f:6a:b6:da:38:7e: 57:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:77:29:44:39:38:DA:FF:3A:A9:82:AF:89:75:E2:34:9A:69:30:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a78e31-2fd1-340f-9abd-830bb997d842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:17:51:17:c1:32:1f:c4:3b:33:5e:02:cb:29:9a:98:dd:47: ef:5d:dd:de:07:41:db:81:8b:bf:89:00:68:e2:c0:06:7b:c2: 09:7e:59:4d:7d:d7:33:12:2c:9b:a3:a5:ad:02:ff:f6:9f:8b: cd:5a:fc:dc:73:9c:4f:2e:a6:96:2a:6c:3b:e3:8f:89:3f:8b: be:ad:a7:d0:1d:af:6b:66:0d:f5:7e:7e:69:ff:9f:8f:a2:1a: fe:2e:04:e2:17:77:fd:c5:ac:be:39:21:61:d0:da:6d:e8:78: 7c:e5:0e:b0:b6:c0:b3:3e:0e:74:13:27:dc:04:e9:cc:1a:23: f5:f1:77:4d:93:14:f4:50:a6:f6:fd:d7:98:ff:57:bd:03:7d: 41:20:7b:a4:b7:4f:cb:cb:ac:65:cd:d1:bf:8e:fe:5d:5a:56: 36:77:74:8e:83:78:cd:7a:5b:69:03:9c:bf:cd:a3:ee:34:3b: 75:62:22:b5:20:70:04:6e:5b:76:d8:0c:e0:74:1e:ce:be:b9: 6a:76:49:06:f1:a0:5e:aa:da:85:35:84:66:29:77:74:fb:91: f5:f6:cc:c3:ea:69:3e:b2:53:76:ce:5a:e3:f8:12:a1:23:67: 55:02:61:34:b7:4c:8b:35:4e:7c:a1:8b:bd:cb:ff:3b:0a:b5: c9:17:a8:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjkQy/T0ic44TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk N2QxYTY3MmMtZjVlNi00ZWQ2LTk4ZjAtMzc0ZjBjMzJiZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5HM/xd184+r6fEWLacEEwg9xSajrSqoGiWs OjuGp61RjgNA7cOLYNdcRdHc+ECt0tHxbZexH6AL7j8DbWZnKs6PFZyYQog4Wuzk SKE3jooOdC3/1bxxeazNvsPxfKUYFb1c7PVcSOl41Lng9tAdOCj7+HNjemBW5+0N uhjxqueLRhSKbYA2GS36mkZbeR+N2dJby1wlQijcSzW46cZ9M+HicvWJFjMXuEgp qfHOT590SRoHwlGBAZjmbPNBeSEfClQakjE/IkHurFoTISxg+8TrLMZfry/4kROg DJHQlAU0g+DRfgRFNFTyYjHl95QcTU5sC6NxChgParbaOH5XJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP13KUQ5ONr/OqmCr4l14jSaaTDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTFhNzhlMzEtMmZkMS0z NDBmLTlhYmQtODMwYmI5OTdkODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcXURfBMh/EOzNeAsspmpjdR+9d3d4HQduBi7+JAGjiwAZ7wgl+WU19 1zMSLJujpa0C//afi81a/NxznE8uppYqbDvjj4k/i76tp9Adr2tmDfV+fmn/n4+i Gv4uBOIXd/3FrL45IWHQ2m3oeHzlDrC2wLM+DnQTJ9wE6cwaI/Xxd02TFPRQpvb9 15j/V70DfUEge6S3T8vLrGXN0b+O/l1aVjZ3dI6DeM16W2kDnL/No+40O3ViIrUg cARuW3bYDOB0Hs6+uWp2SQbxoF6q2oU1hGYpd3T7kfX2zMPqaT6yU3bOWuP4EqEj Z1UCYTS3TIs1Tnyhi73L/zsKtckXqGk= -----END CERTIFICATE-----Generated at Thu Sep 24 22:22:47 2026 by rpki-client