$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa File: 4c5f2c02-022b-371a-8966-9ae694c3b539.roa (raw, json) Hash identifier: 7Ea74JnW4rDSQ9txmqEU3NP9On5yb/pUVgbde7VwJVU= Subject key identifier: A1:AC:B6:AB:09:B0:3F:E0:BD:18:E5:A8:0B:3D:D1:5E:77:F6:C3:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49861D69D837B732DF921B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.20.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:1d:69:d8:37:b7:32:df:92:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0509c0d5-a743-435a-ab87-ae4c9f830827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:4a:2e:1d:57:a7:63:fe:2b:7f:9b:c1:dd: cd:a2:65:a7:ca:d3:e2:0f:4d:cf:14:79:a5:a9:66: 7c:19:65:ef:8f:99:8a:76:c9:57:b7:9a:65:85:c5: eb:6e:62:94:dd:ed:be:af:18:51:1f:7a:27:01:0e: 61:ad:ec:53:98:32:21:da:4d:24:94:24:2b:f9:8f: 7a:b7:79:18:dd:40:8e:69:b5:7f:2d:3c:60:2a:f9: ba:d8:31:3e:b0:69:86:3f:a0:07:8d:22:12:9a:48: 45:23:b8:02:b1:b8:90:9c:ee:fa:9c:c2:6b:3f:bc: b2:6e:98:1c:45:45:26:bf:43:9c:dc:41:7c:0d:2b: 47:de:47:e0:11:68:11:0f:02:08:e2:47:f0:50:43: dc:b5:51:8f:70:ac:04:bb:92:7d:52:00:eb:f6:05: 74:19:9b:0d:3d:56:ee:95:e7:f9:dc:4e:55:64:60: 70:ba:ce:70:1e:f5:5e:63:46:98:83:68:18:ac:f7: 20:35:1c:6c:d3:62:ee:67:12:a2:a6:60:5b:32:97: 65:a3:81:0c:94:aa:af:a4:5d:f1:49:37:49:3f:19: 78:8e:52:88:cf:0f:a2:be:6b:1a:da:4d:e5:e6:6c: c0:ce:8f:f5:b9:97:6d:dd:57:e8:5a:8c:8a:1d:2a: f3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AC:B6:AB:09:B0:3F:E0:BD:18:E5:A8:0B:3D:D1:5E:77:F6:C3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c5f2c02-022b-371a-8966-9ae694c3b539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:36:4f:fa:b2:09:70:28:2b:59:26:14:2a:3c:0b:86:c0:a8: 64:ca:9f:a4:2e:ff:55:ea:41:56:94:b0:93:2a:b3:27:8e:97: 4b:c0:ae:55:fa:a5:d2:2e:25:d1:7c:9b:69:a9:f3:81:29:06: 64:4f:55:b7:2a:3b:49:ed:58:0a:49:ad:a2:61:95:e0:75:4e: 50:4f:ee:6f:13:f9:2a:bf:57:b6:25:21:9d:2a:3a:f1:91:c1: 2c:3d:97:a0:86:d2:de:06:6b:9f:a9:1d:c1:12:15:87:ee:47: a7:36:39:69:26:6a:d2:a3:9d:bf:e5:83:e4:87:f9:df:e1:8b: c0:54:c6:02:35:4f:a8:08:1a:14:52:8a:5d:db:3b:27:25:19: 87:b4:16:60:a6:c5:b3:4d:76:12:72:f8:43:66:49:bb:63:ef: 9a:70:c1:cf:a1:4d:39:83:36:8c:40:f9:de:ac:0a:b2:25:43: 7d:9b:9a:4f:76:91:a0:80:ac:fd:65:90:70:d8:d0:da:3c:ba: 05:0e:0a:7a:ad:d3:7e:90:30:c9:f0:dc:cb:37:9e:92:e4:1c: 36:21:57:d0:aa:4b:cf:7a:b4:a6:bf:39:2f:7e:04:93:56:e4: 30:e4:cf:0f:b1:af:d4:21:d6:5d:94:5e:07:b6:f6:cc:7c:17: d5:f1:ed:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhh1p2De3Mt+SGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDUwOWMwZDUtYTc0My00MzVhLWFiODctYWU0YzlmODMwODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc1KLh1Xp2P+K3+bwd3NomWnytPiD03PFHml qWZ8GWXvj5mKdslXt5plhcXrbmKU3e2+rxhRH3onAQ5hrexTmDIh2k0klCQr+Y96 t3kY3UCOabV/LTxgKvm62DE+sGmGP6AHjSISmkhFI7gCsbiQnO76nMJrP7yybpgc RUUmv0Oc3EF8DStH3kfgEWgRDwII4kfwUEPctVGPcKwEu5J9UgDr9gV0GZsNPVbu lef53E5VZGBwus5wHvVeY0aYg2gYrPcgNRxs02LuZxKipmBbMpdlo4EMlKqvpF3x STdJPxl4jlKIzw+ivmsa2k3l5mzAzo/1uZdt3VfoWoyKHSrzUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGstqsJsD/gvRjlqAs90V539sNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM1ZjJjMDItMDIyYi0z NzFhLTg5NjYtOWFlNjk0YzNiNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhThMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM2T/qyCXAoK1kmFCo8C4bAqGTKn6Qu/1XqQVaUsJMqsyeOl0vArlX6 pdIuJdF8m2mp84EpBmRPVbcqO0ntWApJraJhleB1TlBP7m8T+Sq/V7YlIZ0qOvGR wSw9l6CG0t4Ga5+pHcESFYfuR6c2OWkmatKjnb/lg+SH+d/hi8BUxgI1T6gIGhRS il3bOyclGYe0FmCmxbNNdhJy+ENmSbtj75pwwc+hTTmDNoxA+d6sCrIlQ32bmk92 kaCArP1lkHDY0No8ugUOCnqt036QMMnw3Ms3npLkHDYhV9CqS896tKa/OS9+BJNW 5DDkzw+xr9Qh1l2UXge29sx8F9Xx7ew= -----END CERTIFICATE-----Generated at Mon Sep 28 19:39:10 2026 by rpki-client