$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa File: aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa (raw, json) Hash identifier: 7rdg7tMX/ovaFZcVYV7NukmQcoM6926mshNuaLDcO9Q= Subject key identifier: 30:D5:15:56:0D:1E:08:F2:DA:0F:D5:D3:C3:A8:18:C8:02:2B:6D:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F0242382C8D7D3E062C7CA300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 98.22.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:38:2c:8d:7d:3e:06:2c:7c:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=9bfdc0fe-8e55-4495-86bd-e5b2ec6afac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:db:6c:fa:cf:81:a3:4a:d6:12:63:4d:ad:57: f4:7a:c3:ae:f2:8d:22:67:91:88:01:8e:2e:6c:80: 05:a5:85:67:5d:65:93:e8:c5:60:83:7c:10:6a:80: 31:41:14:f7:d2:84:48:92:e7:ed:2c:67:fc:24:be: 80:84:24:05:ba:2d:2e:c7:71:ca:8c:8e:57:ad:fc: 6a:75:a2:99:3e:04:fc:9e:ec:fc:0a:4e:99:9a:bf: 04:fa:42:98:15:52:cd:dd:da:a7:20:69:26:a4:b7: f5:80:9b:a9:dd:35:48:c8:36:5a:5b:e1:c5:7a:8f: d3:5e:fe:72:78:c4:a3:fa:8e:a8:6a:9b:08:70:4e: 85:68:a5:09:34:5a:4b:12:d9:e4:2f:84:f6:f9:1a: 42:08:9e:7d:70:83:6a:06:47:5d:eb:51:30:82:b5: bb:f9:73:33:b0:16:2e:16:ff:da:3c:3c:58:64:cc: 51:7a:2c:30:92:d8:78:da:23:95:b2:4d:31:3b:10: f8:2b:f3:ac:f7:f1:eb:5e:37:ee:98:ed:0b:a0:8c: 68:84:59:b0:97:2f:ad:ff:38:f8:5e:4b:ab:b0:c5: 3f:04:8d:f5:02:45:6c:38:ff:60:17:16:4e:62:03: 36:f6:9a:fa:f9:6a:20:7d:da:7e:b6:5c:38:b4:ae: 8b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D5:15:56:0D:1E:08:F2:DA:0F:D5:D3:C3:A8:18:C8:02:2B:6D:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:aa:4f:2c:a2:7a:4e:16:b9:00:76:c8:58:b6:29:f7:1a:e0: c1:7d:13:c2:6e:62:ce:3c:c8:28:e0:8c:fb:59:1b:a2:17:8c: ad:89:cf:2e:8d:37:10:2f:0a:28:5c:a0:23:6c:79:92:5a:eb: 0e:fa:3b:0a:d6:98:81:50:8d:54:70:55:57:1a:d7:5d:38:45: c2:7c:79:65:ee:b3:96:23:2b:a2:fd:3d:e9:c2:cd:e0:8e:c2: 34:7a:13:58:df:fd:a1:2f:54:3f:de:ca:1c:81:92:d7:53:d7: 92:7c:c4:8b:f3:e9:78:05:55:09:ae:9a:b5:22:12:5c:b7:64: 89:6c:a3:db:1f:fd:98:1a:3c:25:a4:10:70:e4:13:63:b9:99: ba:11:20:1f:17:bf:53:04:fa:07:14:a9:80:3b:f2:ac:af:a8: 1e:0e:0c:1c:e1:62:90:a3:4d:25:3f:1f:3d:d2:72:6d:17:c0: d3:e0:be:4f:64:22:6f:f1:ec:d1:f9:72:4c:87:c4:7e:86:67: 8e:ce:3c:09:6b:7d:87:79:df:3c:3c:9e:57:3a:b0:7c:a0:da: b5:02:c6:d1:39:2a:22:e3:2f:3b:ab:e8:e6:77:e0:cd:0c:0e: 2c:c5:87:22:85:b7:6e:f5:42:9a:e1:67:52:4f:b8:27:ce:13: 30:4b:96:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjgsjX0+Bix8owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk OWJmZGMwZmUtOGU1NS00NDk1LTg2YmQtZTViMmVjNmFmYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9ts+s+Bo0rWEmNNrVf0esOu8o0iZ5GIAY4u bIAFpYVnXWWT6MVgg3wQaoAxQRT30oRIkuftLGf8JL6AhCQFui0ux3HKjI5Xrfxq daKZPgT8nuz8Ck6Zmr8E+kKYFVLN3dqnIGkmpLf1gJup3TVIyDZaW+HFeo/TXv5y eMSj+o6oapsIcE6FaKUJNFpLEtnkL4T2+RpCCJ59cINqBkdd61EwgrW7+XMzsBYu Fv/aPDxYZMxReiwwkth42iOVsk0xOxD4K/Os9/HrXjfumO0LoIxohFmwly+t/zj4 XkursMU/BI31AkVsOP9gFxZOYgM29pr6+Wogfdp+tlw4tK6LzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDVFVYNHgjy2g/V08OoGMgCK23AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEzZWYxMDEtNjdkMC0z ZDU0LTkwYWUtMmY5NGNmNmFjNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGqTyyiek4WuQB2yFi2Kfca4MF9E8JuYs48yCjgjPtZG6IXjK2Jzy6N NxAvCihcoCNseZJa6w76OwrWmIFQjVRwVVca1104RcJ8eWXus5YjK6L9PenCzeCO wjR6E1jf/aEvVD/eyhyBktdT15J8xIvz6XgFVQmumrUiEly3ZIlso9sf/ZgaPCWk EHDkE2O5mboRIB8Xv1ME+gcUqYA78qyvqB4ODBzhYpCjTSU/Hz3Scm0XwNPgvk9k Im/x7NH5ckyHxH6GZ47OPAlrfYd53zw8nlc6sHyg2rUCxtE5KiLjLzur6OZ34M0M DizFhyKFt271QprhZ1JPuCfOEzBLli0= -----END CERTIFICATE-----Generated at Tue Sep 22 21:16:16 2026 by rpki-client