$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4628ea5a-c9aa-3451-9779-fcb1086498f6.roa File: 4628ea5a-c9aa-3451-9779-fcb1086498f6.roa (raw, json) Hash identifier: LkR2sDM+uD06vPVtzMLUravS9dOHli7Z9XrHkk1238A= Subject key identifier: FA:C3:49:59:65:DF:97:F2:01:1A:FA:5B:1D:EE:11:20:E0:F3:B4:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F42C3F51D08370DDB34FD5580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4628ea5a-c9aa-3451-9779-fcb1086498f6.roa Signing time: Tue 22 Sep 2026 15:33:38 +0000 ROA not before: Tue 22 Sep 2026 15:33:38 +0000 ROA not after: Mon 21 Dec 2026 16:33:38 +0000 asID: 7029 IP address blocks: 98.20.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:c3:f5:1d:08:37:0d:db:34:fd:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 22 15:33:38 2026 GMT Not After : Dec 21 16:33:38 2026 GMT Subject: CN=0b4a1c96-d916-46c9-b480-7a182b01a217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:26:15:c3:de:f0:9c:00:60:51:1a:e8:62:fc: 51:3b:19:69:55:49:56:1d:9e:c2:ba:b3:2e:a8:3f: 60:29:9b:e2:5c:16:b5:3a:d0:c1:16:ef:31:99:e7: 24:13:36:67:f0:39:1a:87:e0:e4:b7:f5:c8:3f:10: 71:bd:ba:1f:ed:51:7c:2c:0c:f7:59:3b:29:51:1e: 69:15:c9:06:56:b6:35:35:ef:39:76:85:8f:a6:d2: cc:89:94:d0:71:26:10:fa:2e:b4:fb:e5:59:3b:92: d1:65:ad:5e:a3:59:24:16:c2:17:c1:b0:ec:30:65: 62:ca:4e:16:af:cc:e7:21:4d:41:94:38:f2:2a:54: 6d:59:71:0f:0b:37:4a:94:8a:64:b2:5b:ad:6f:6f: 41:e5:9a:94:d1:a3:9f:43:f8:d7:e7:90:70:84:a9: 77:97:8d:73:86:47:c7:d5:1c:5e:e1:1d:b7:62:50: dc:7d:77:7f:31:cb:a0:0b:8c:49:2c:cd:b2:bc:4d: f1:80:1f:e1:a0:5f:3e:1e:0d:e7:f5:03:9a:70:5f: 3f:1b:dc:87:51:74:56:df:e6:75:b7:9d:93:4f:1f: 42:b8:ce:66:cc:c8:cf:f4:33:02:71:8d:12:09:28: 69:37:01:24:0a:34:23:1f:e4:f9:3c:7b:68:a0:34: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C3:49:59:65:DF:97:F2:01:1A:FA:5B:1D:EE:11:20:E0:F3:B4:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4628ea5a-c9aa-3451-9779-fcb1086498f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e3:58:52:7f:e3:e8:28:25:02:ac:ce:23:95:b5:73:36:8c: a1:3e:62:80:88:3a:28:74:d9:4a:20:f6:44:e1:3e:aa:68:7a: 03:94:06:29:e6:e5:ac:f6:71:23:74:90:93:7c:86:39:c4:37: dc:ec:dc:52:d4:71:f8:21:23:57:30:d2:54:57:8a:6a:22:2d: f4:19:df:99:11:50:e0:72:53:05:f2:ae:ef:53:28:78:2e:cb: 9a:be:cd:d9:42:48:07:91:88:a4:99:f7:9d:f2:63:be:02:33: 12:ba:1a:99:ef:d6:e0:ab:6c:d8:c6:cd:73:cd:8f:3f:a7:6e: 12:30:ca:03:d1:fd:f0:f3:9e:a1:f9:7b:db:48:b9:13:19:64: 83:aa:26:73:f4:31:01:48:aa:5c:aa:b7:bf:7e:ce:01:9f:d3: 83:c6:94:00:84:67:3f:13:45:2d:79:e6:99:bb:97:e1:50:05: 94:df:8e:23:fa:7d:9d:99:81:c0:e8:f9:22:06:c2:41:db:b5: 60:b6:d8:d5:ba:df:f8:90:5f:fd:de:9e:cc:e5:db:ab:b8:ff: be:74:3e:91:66:f8:51:4f:ec:c8:ab:44:0c:5d:1c:1b:d3:c5: 6e:f5:e1:d5:72:e8:a7:df:80:43:48:1a:93:d4:bb:bd:16:ae: 88:6d:98:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cw/UdCDcN2zT9VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyMjE1MzMzOFoXDTI2MTIyMTE2MzMzOFowLzEtMCsGA1UEAxMk MGI0YTFjOTYtZDkxNi00NmM5LWI0ODAtN2ExODJiMDFhMjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SYVw97wnABgURroYvxROxlpVUlWHZ7CurMu qD9gKZviXBa1OtDBFu8xmeckEzZn8Dkah+Dkt/XIPxBxvbof7VF8LAz3WTspUR5p FckGVrY1Ne85doWPptLMiZTQcSYQ+i60++VZO5LRZa1eo1kkFsIXwbDsMGViyk4W r8znIU1BlDjyKlRtWXEPCzdKlIpkslutb29B5ZqU0aOfQ/jX55BwhKl3l41zhkfH 1Rxe4R23YlDcfXd/McugC4xJLM2yvE3xgB/hoF8+Hg3n9QOacF8/G9yHUXRW3+Z1 t52TTx9CuM5mzMjP9DMCcY0SCShpNwEkCjQjH+T5PHtooDQ2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrDSVll35fyARr6Wx3uESDg87SKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDYyOGVhNWEtYzlhYS0z NDUxLTk3NzktZmNiMTA4NjQ5OGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhS8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzjWFJ/4+goJQKsziOVtXM2jKE+YoCIOih02Uog9kThPqpoegOUBinm 5az2cSN0kJN8hjnEN9zs3FLUcfghI1cw0lRXimoiLfQZ35kRUOByUwXyru9TKHgu y5q+zdlCSAeRiKSZ953yY74CMxK6Gpnv1uCrbNjGzXPNjz+nbhIwygPR/fDznqH5 e9tIuRMZZIOqJnP0MQFIqlyqt79+zgGf04PGlACEZz8TRS155pm7l+FQBZTfjiP6 fZ2ZgcDo+SIGwkHbtWC22NW63/iQX/3enszl26u4/750PpFm+FFP7MirRAxdHBvT xW714dVy6KffgENIGpPUu70WrohtmEU= -----END CERTIFICATE-----Generated at Sat Sep 26 11:01:44 2026 by rpki-client