$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2532e085-e8d5-3931-b788-c0515f773874.roa File: 2532e085-e8d5-3931-b788-c0515f773874.roa (raw, json) Hash identifier: l0zka917rp7mn1Kl7BJ/om9x7pulTOMPoeP/cscG5Qo= Subject key identifier: 15:4A:CD:73:86:71:5E:31:4E:0F:7C:89:F6:3A:D7:D4:FA:E9:BE:C2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F0ED233335F675515CF388DA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2532e085-e8d5-3931-b788-c0515f773874.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.19.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:33:33:5f:67:55:15:cf:38:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=c63338fe-34d8-4635-ad2a-b58d538761db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9f:4d:85:1e:85:c2:8e:19:02:8a:89:29:6f: 8c:55:0c:86:a7:b4:90:39:e8:f6:6b:f3:9c:c3:87: 52:78:86:7b:88:9a:3a:e0:42:ba:78:f2:ca:3d:46: 09:77:20:f2:f3:f1:45:76:58:c5:62:17:a1:47:b0: ab:55:40:5c:c8:6c:57:d1:68:ed:9a:10:e0:24:1c: b8:2f:76:40:22:c5:bf:5c:7b:46:ad:6f:df:9b:0a: b0:b2:72:16:b6:53:cd:b5:60:68:de:2c:15:b7:3c: 0b:a9:60:8c:20:f9:80:e2:b0:36:31:66:04:92:99: a9:9e:af:8e:72:f0:f4:1b:aa:ce:af:38:6a:dd:2f: ae:ff:7f:3b:d9:b8:30:b7:91:89:a6:6e:20:e3:af: ed:3c:11:2b:69:2e:4d:d7:54:00:b1:15:e7:07:59: 65:d6:9d:dd:5d:23:24:0b:cc:39:50:4a:ce:ae:35: 09:a2:91:1d:4b:4d:b7:0c:91:d6:1c:14:a4:37:37: dd:28:f6:2c:1b:22:20:4a:37:de:73:9e:9f:c7:5c: 1b:b8:98:f2:3e:9e:8b:4d:dc:53:07:1a:d8:da:29: 2d:a9:76:05:67:f7:d2:02:5a:b6:8a:8f:61:52:54: 4a:f6:22:77:0f:db:50:04:7e:5e:0f:58:b7:fc:55: dd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:CD:73:86:71:5E:31:4E:0F:7C:89:F6:3A:D7:D4:FA:E9:BE:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2532e085-e8d5-3931-b788-c0515f773874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:20:8a:6c:ea:a3:84:89:40:57:e3:24:45:32:72:43:9e:51: 80:e7:91:a4:be:d9:ce:63:48:76:3e:29:2e:46:3f:bb:cd:94: 45:ce:0e:18:73:01:fa:97:aa:30:a9:45:f9:0b:db:90:e7:2b: cf:5b:64:7a:bb:cf:61:9a:09:c6:b1:18:25:40:0b:84:37:e1: d3:b1:a4:de:59:06:56:05:7e:b9:a5:98:a6:90:0f:84:fd:8d: 32:c7:41:c6:41:da:79:a8:60:3f:5c:63:47:e5:9c:4b:5f:53: ef:ca:39:eb:9d:33:e5:0a:c5:a9:b8:96:5c:ed:5d:8d:6d:3c: 8d:e3:dc:f8:a1:bb:cf:24:68:e8:c9:43:a7:dc:b8:80:83:14: ef:40:b0:85:66:80:f1:77:9c:d0:8a:56:0c:79:6f:4d:a3:4c: 47:2b:33:a8:80:cc:c6:b5:54:93:d5:c8:25:8b:32:b5:56:bf: 0b:f4:4e:f2:f3:47:7c:c9:04:56:bc:e3:08:e0:4b:0a:ee:c6: ca:32:37:a0:c1:fa:5e:b3:3e:7b:a1:04:db:f7:69:85:01:ff: 0a:fa:fc:e6:b4:a4:28:af:2c:ab:7b:b8:18:be:35:0f:92:06: fc:3b:a2:b4:2f:25:23:69:2d:ba:83:6a:ae:05:7e:a0:12:4b: 58:f9:28:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jMzX2dVFc84jaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk YzYzMzM4ZmUtMzRkOC00NjM1LWFkMmEtYjU4ZDUzODc2MWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip9NhR6Fwo4ZAoqJKW+MVQyGp7SQOej2a/Oc w4dSeIZ7iJo64EK6ePLKPUYJdyDy8/FFdljFYhehR7CrVUBcyGxX0WjtmhDgJBy4 L3ZAIsW/XHtGrW/fmwqwsnIWtlPNtWBo3iwVtzwLqWCMIPmA4rA2MWYEkpmpnq+O cvD0G6rOrzhq3S+u/3872bgwt5GJpm4g46/tPBEraS5N11QAsRXnB1ll1p3dXSMk C8w5UErOrjUJopEdS023DJHWHBSkNzfdKPYsGyIgSjfec56fx1wbuJjyPp6LTdxT BxrY2iktqXYFZ/fSAlq2io9hUlRK9iJ3D9tQBH5eD1i3/FXdMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVKzXOGcV4xTg98ifY619T66b7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjUzMmUwODUtZThkNS0z OTMxLWI3ODgtYzA1MTVmNzczODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcgimzqo4SJQFfjJEUyckOeUYDnkaS+2c5jSHY+KS5GP7vNlEXODhhz AfqXqjCpRfkL25DnK89bZHq7z2GaCcaxGCVAC4Q34dOxpN5ZBlYFfrmlmKaQD4T9 jTLHQcZB2nmoYD9cY0flnEtfU+/KOeudM+UKxam4llztXY1tPI3j3Pihu88kaOjJ Q6fcuICDFO9AsIVmgPF3nNCKVgx5b02jTEcrM6iAzMa1VJPVyCWLMrVWvwv0TvLz R3zJBFa84wjgSwruxsoyN6DB+l6zPnuhBNv3aYUB/wr6/Oa0pCivLKt7uBi+NQ+S Bvw7orQvJSNpLbqDaq4FfqASS1j5KEQ= -----END CERTIFICATE-----Generated at Sat Sep 26 15:59:46 2026 by rpki-client