$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa File: 37e2a1fd-6045-3704-9912-f89b40158f53.roa (raw, json) Hash identifier: SiCdxv8jNJW8rCCmdlnFjoDWgHfemsPOAPDEMi/OXhY= Subject key identifier: F9:C6:93:DA:8D:D7:C5:4A:56:B1:BB:EE:AD:65:CA:F6:78:C1:17:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49861DB6D222BA23102CDF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.20.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:1d:b6:d2:22:ba:23:10:2c:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f22935b7-1ced-4887-970d-de9ed9629aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d8:39:37:3c:e8:af:e5:29:24:e9:2b:2f:48: 4f:00:33:5f:dd:9d:79:49:45:16:8f:d9:b4:c6:40: 56:00:05:82:41:56:41:26:a2:f5:ac:0f:02:4e:d5: 8a:5a:39:0c:d3:b7:90:78:58:fd:c3:40:43:a7:be: c0:0e:ae:b7:45:08:c9:b6:58:fa:5f:7a:cd:15:cf: 00:77:c1:19:ab:48:b7:45:f9:26:35:79:77:45:47: 1d:b8:ca:a9:29:75:ba:8a:a8:c4:8a:41:2d:12:f5: 8c:90:a1:5c:12:0e:21:0d:c3:37:f6:3b:5b:4d:d0: 21:5d:d0:15:89:03:4f:7f:78:0c:22:c6:ae:7e:bf: 99:f5:6a:00:07:08:38:64:42:d2:4b:53:2a:cb:96: ba:1e:5e:7e:c0:8c:13:b6:6b:2c:05:ee:c6:6b:84: 34:48:40:28:c0:01:07:5c:b9:63:21:13:67:ba:ff: 98:34:e7:bc:94:61:c1:80:b7:c8:89:78:df:3c:fb: eb:68:15:4f:ab:2a:cf:fa:20:d4:02:83:2e:17:d5: ef:48:cc:df:6a:19:d3:b9:61:63:ab:fd:ff:6c:34: 25:2b:06:46:9f:03:ba:3f:be:12:dc:7a:1c:87:d7: 49:59:fc:11:70:5f:76:bd:75:d2:bd:83:be:ca:03: 3d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C6:93:DA:8D:D7:C5:4A:56:B1:BB:EE:AD:65:CA:F6:78:C1:17:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e2a1fd-6045-3704-9912-f89b40158f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0f:45:b1:fd:65:70:8b:be:6c:22:d4:c5:c9:ec:ff:e7:42: 8e:55:30:03:21:30:72:61:d3:c8:16:73:0d:9f:2b:f0:c7:b0: de:e2:14:5c:3b:46:41:2b:3b:7d:51:84:cd:7b:76:70:66:7f: 11:a1:e6:71:e7:a6:da:c6:0e:9f:7d:8a:39:96:86:ad:df:6a: ab:c9:8d:ee:bf:d4:a1:dd:49:56:c7:01:60:e7:9d:b7:bc:82: ef:64:31:99:89:fd:1a:e5:77:37:cd:a3:27:aa:7f:f0:84:dd: 13:a0:03:7a:f6:15:e9:e8:0d:b3:6e:86:9a:97:0e:c9:c7:48: d7:da:19:3e:6f:01:76:54:e6:6f:4b:c5:81:58:dc:22:1a:78: f5:46:99:06:fd:c4:2d:ad:b0:1b:d0:54:c4:64:aa:ac:06:7a: f9:e1:f5:f7:b9:ad:79:e0:09:7f:4e:03:4a:7c:6c:11:a4:f5: 1e:70:62:28:49:f5:93:1b:23:54:b9:2b:4f:50:ab:e9:7f:08: 00:4e:87:56:af:c7:d1:9c:0b:5b:0d:d8:cb:5c:83:de:61:56: a3:2c:d1:2a:65:dc:ea:04:5b:1c:24:f1:b8:88:6b:e2:8b:47: 03:31:62:9a:21:dc:f5:bc:a2:c7:fe:0c:75:54:14:19:44:8b: 62:11:d7:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhh220iK6IxAs3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjIyOTM1YjctMWNlZC00ODg3LTk3MGQtZGU5ZWQ5NjI5YWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstg5Nzzor+UpJOkrL0hPADNf3Z15SUUWj9m0 xkBWAAWCQVZBJqL1rA8CTtWKWjkM07eQeFj9w0BDp77ADq63RQjJtlj6X3rNFc8A d8EZq0i3RfkmNXl3RUcduMqpKXW6iqjEikEtEvWMkKFcEg4hDcM39jtbTdAhXdAV iQNPf3gMIsaufr+Z9WoABwg4ZELSS1Mqy5a6Hl5+wIwTtmssBe7Ga4Q0SEAowAEH XLljIRNnuv+YNOe8lGHBgLfIiXjfPPvraBVPqyrP+iDUAoMuF9XvSMzfahnTuWFj q/3/bDQlKwZGnwO6P74S3Hoch9dJWfwRcF92vXXSvYO+ygM93wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnGk9qN18VKVrG77q1lyvZ4wReQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdlMmExZmQtNjA0NS0z NzA0LTk5MTItZjg5YjQwMTU4ZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEPRbH9ZXCLvmwi1MXJ7P/nQo5VMAMhMHJh08gWcw2fK/DHsN7iFFw7 RkErO31RhM17dnBmfxGh5nHnptrGDp99ijmWhq3faqvJje6/1KHdSVbHAWDnnbe8 gu9kMZmJ/RrldzfNoyeqf/CE3ROgA3r2FenoDbNuhpqXDsnHSNfaGT5vAXZU5m9L xYFY3CIaePVGmQb9xC2tsBvQVMRkqqwGevnh9fe5rXngCX9OA0p8bBGk9R5wYihJ 9ZMbI1S5K09Qq+l/CABOh1avx9GcC1sN2Mtcg95hVqMs0Spl3OoEWxwk8biIa+KL RwMxYpoh3PW8osf+DHVUFBlEi2IR168= -----END CERTIFICATE-----Generated at Mon Sep 28 19:18:10 2026 by rpki-client