$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1f9c761-de85-3a31-b994-2ebd342ae058.roa File: d1f9c761-de85-3a31-b994-2ebd342ae058.roa (raw, json) Hash identifier: 2Kj45sJ1C0DbJNQXx3flvwdjDM064bNAFdMfFqZkIbE= Subject key identifier: E2:63:17:E4:A6:5C:14:0E:85:2A:FA:53:87:13:E1:9D:1F:DE:52:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F109FCBB89F9BB8E5FB39EB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1f9c761-de85-3a31-b994-2ebd342ae058.roa Signing time: Fri 04 Sep 2026 16:30:21 +0000 ROA not before: Fri 04 Sep 2026 16:30:21 +0000 ROA not after: Thu 03 Dec 2026 17:30:21 +0000 asID: 7029 IP address blocks: 98.20.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:9f:cb:b8:9f:9b:b8:e5:fb:39:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 16:30:21 2026 GMT Not After : Dec 3 17:30:21 2026 GMT Subject: CN=4fb4b0b4-b7cb-4f01-a395-ca802b00dc2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fb:df:c4:4a:76:b8:df:eb:ea:c9:17:cc:fd: 62:83:31:a5:3e:80:84:b9:3d:c9:1d:50:43:94:08: 37:a1:60:25:3b:bc:b8:9a:61:88:3b:60:94:2e:63: ea:5b:9f:6e:60:cf:fa:0e:e1:61:cf:c8:40:c6:87: 8f:e0:46:af:70:0d:c0:ab:67:66:48:71:95:85:83: 4a:81:a3:ab:d3:de:bc:fa:7e:4b:d7:4f:d6:a3:e8: 9d:96:44:84:ad:17:67:81:84:aa:c2:70:8f:92:23: ee:27:d9:df:b5:62:22:e2:ad:5e:6d:64:d6:a9:75: 66:8c:0b:9c:ca:f5:e3:c7:85:9a:8b:ce:6d:20:51: d5:bf:44:5c:a7:fe:17:3c:73:26:48:b3:0d:c5:66: 7b:ca:3b:e3:2e:86:77:1f:56:e9:95:99:d1:9c:e5: 8a:b8:ee:e9:ac:87:d8:31:7b:6d:97:24:24:71:41: b3:2a:de:12:cf:8a:5c:86:66:66:b3:d6:12:f0:40: 49:be:c3:07:2b:1b:88:bd:7c:90:3c:c1:39:0b:17: 42:73:2b:ef:a1:3f:dc:13:0e:3a:ce:3a:2b:7e:3a: e2:03:16:8a:67:b7:26:50:85:72:95:0c:45:55:90: db:b1:9b:8e:5c:14:5b:58:da:09:ae:48:da:90:1b: 5e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:63:17:E4:A6:5C:14:0E:85:2A:FA:53:87:13:E1:9D:1F:DE:52:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1f9c761-de85-3a31-b994-2ebd342ae058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e0:a3:c7:c2:32:22:6b:7c:b2:4e:76:8e:22:9e:05:ac:ef: 01:7c:43:34:ca:e7:cf:c3:05:12:6e:a6:79:23:67:06:c9:e3: bd:4c:a2:76:55:41:16:4c:04:b1:90:81:22:9f:72:b7:11:d8: 41:9f:93:94:a4:18:6f:00:fd:5c:84:77:91:27:47:56:a9:80: 65:e2:a3:5d:d7:f7:be:83:d3:75:f1:15:2b:49:28:be:b7:b8: 2b:5f:9e:30:48:fc:dd:da:98:b9:a9:b9:e5:8b:c7:79:81:87: 50:66:4d:a1:a0:5f:76:a0:3d:89:83:5a:02:53:d9:13:71:85: eb:cb:44:65:7a:a0:50:b9:7b:f7:55:60:d8:0b:08:b9:d8:34: 32:1c:e1:d5:3f:04:87:c6:84:d1:b2:c6:b1:63:ca:2e:40:2c: 9b:b7:d7:1a:06:07:1e:d2:a4:58:19:9a:88:9c:cc:ba:3f:2c: 0a:48:0d:ff:3c:1b:c0:af:41:59:7b:60:97:e3:8b:26:bb:f0: b1:3d:c3:33:d4:02:3c:6a:d2:81:b0:61:da:73:20:93:09:03: 27:a9:fd:92:08:3e:c5:a4:01:47:59:aa:8f:60:f9:e0:fb:f0: e7:91:96:cb:0e:78:ab:fb:a2:72:af:b3:7b:f1:72:65:5c:f3: 5e:19:ae:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Qn8u4n5u45fs56wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNDE2MzAyMVoXDTI2MTIwMzE3MzAyMVowLzEtMCsGA1UEAxMk NGZiNGIwYjQtYjdjYi00ZjAxLWEzOTUtY2E4MDJiMDBkYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/vfxEp2uN/r6skXzP1igzGlPoCEuT3JHVBD lAg3oWAlO7y4mmGIO2CULmPqW59uYM/6DuFhz8hAxoeP4EavcA3Aq2dmSHGVhYNK gaOr0968+n5L10/Wo+idlkSErRdngYSqwnCPkiPuJ9nftWIi4q1ebWTWqXVmjAuc yvXjx4Wai85tIFHVv0Rcp/4XPHMmSLMNxWZ7yjvjLoZ3H1bplZnRnOWKuO7prIfY MXttlyQkcUGzKt4Sz4pchmZms9YS8EBJvsMHKxuIvXyQPME5CxdCcyvvoT/cEw46 zjorfjriAxaKZ7cmUIVylQxFVZDbsZuOXBRbWNoJrkjakBteGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJjF+SmXBQOhSr6U4cT4Z0f3lLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFmOWM3NjEtZGU4NS0z YTMxLWI5OTQtMmViZDM0MmFlMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhS0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7go8fCMiJrfLJOdo4ingWs7wF8QzTK58/DBRJupnkjZwbJ471MonZV QRZMBLGQgSKfcrcR2EGfk5SkGG8A/VyEd5EnR1apgGXio13X976D03XxFStJKL63 uCtfnjBI/N3amLmpueWLx3mBh1BmTaGgX3agPYmDWgJT2RNxhevLRGV6oFC5e/dV YNgLCLnYNDIc4dU/BIfGhNGyxrFjyi5ALJu31xoGBx7SpFgZmoiczLo/LApIDf88 G8CvQVl7YJfjiya78LE9wzPUAjxq0oGwYdpzIJMJAyep/ZIIPsWkAUdZqo9g+eD7 8OeRlssOeKv7onKvs3vxcmVc814ZrgQ= -----END CERTIFICATE-----Generated at Tue Sep 22 18:40:30 2026 by rpki-client