$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9700d2f6-bc58-3285-9bec-b8aa7022b9dc.roa File: 9700d2f6-bc58-3285-9bec-b8aa7022b9dc.roa (raw, json) Hash identifier: vLxHcFsGbNwiibS8JwBLBH+i0fTavRFUH8GL6jkHwLA= Subject key identifier: 10:71:88:14:1D:35:B7:92:27:4B:B2:42:98:A4:80:0E:EE:A8:77:F8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F12F590305FF91E148E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9700d2f6-bc58-3285-9bec-b8aa7022b9dc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.20.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:12:f5:90:30:5f:f9:1e:14:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7f807392-8db7-4819-9d26-9541e24c1958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:92:ce:61:0d:57:1d:d4:4e:64:42:34:f6:d5: 63:ba:b7:fa:e2:73:6d:91:b6:00:b3:d2:99:b3:d7: 2a:f3:94:cc:a8:5e:02:d8:01:cc:62:ab:af:86:0f: 13:17:ff:a4:f5:e3:93:4d:13:c9:b3:d9:31:12:2a: c2:c6:3b:d0:e6:29:1d:09:5e:54:96:2f:24:7d:09: 81:0c:70:49:2b:ec:9b:8c:6d:e4:3e:5e:01:49:5d: b0:93:6e:06:87:10:13:af:8a:10:19:c6:6f:ad:7a: e4:09:8a:52:8c:ac:52:0f:11:f0:f0:e8:df:c6:dc: e1:94:9f:4a:66:3d:89:b0:db:11:f7:3d:47:52:14: 81:09:33:6b:18:e2:b3:00:69:87:f6:67:d9:6c:24: 08:f7:99:5d:ad:43:8f:96:f2:e8:f6:bb:d9:94:9b: f9:50:fe:a3:8c:17:b7:92:db:f7:14:2e:cc:e8:e9: 7c:02:c0:dc:a7:a7:25:df:34:4f:28:c9:81:b1:e4: 42:ac:d0:cb:f2:bd:a9:bc:0d:84:e3:6a:97:85:39: 1e:9c:fa:a6:ec:d4:04:7d:49:fb:b0:db:d3:07:62: bd:41:83:23:68:92:bf:83:3c:cf:a7:4c:68:7e:bb: 16:0e:24:d4:b4:ec:74:73:b4:96:d5:33:04:36:09: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:71:88:14:1D:35:B7:92:27:4B:B2:42:98:A4:80:0E:EE:A8:77:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9700d2f6-bc58-3285-9bec-b8aa7022b9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:74:0f:9b:c9:9c:af:66:f3:45:e9:47:57:3f:94:4a:35:a0: a6:08:83:ab:d0:98:75:ec:96:29:a9:a2:81:58:90:4a:28:f4: dc:f1:82:e7:41:4c:e9:5c:a3:68:ba:b9:36:a9:b5:0e:bd:c1: 3c:8e:ce:31:f3:00:f1:29:87:50:be:2b:0d:04:4a:4e:8b:ea: 6b:d0:72:ec:80:69:24:92:39:4a:91:bd:b4:ef:e7:53:66:55: 80:88:2c:86:d1:8e:8a:5f:69:80:88:71:76:d8:1b:86:36:56: f9:9c:75:4e:3c:f1:05:7d:7a:bf:e8:2a:79:33:c8:06:d9:0a: ab:f8:6e:84:a4:94:84:01:f8:34:04:62:ed:d6:9a:b2:f7:4f: fc:6c:9a:40:86:8a:1a:1b:bb:43:8c:b8:b7:21:b6:b5:f0:f1: 6c:34:3d:4d:90:d5:6c:27:24:3d:c0:c1:fc:a6:8d:d6:5a:84: b9:f6:75:47:0e:81:36:34:25:42:45:13:54:39:5a:9b:29:10: 8b:8e:fa:69:0d:ce:97:53:52:fe:2d:6d:45:b1:00:6d:d1:c9: ea:d4:3c:a2:e0:8e:96:ee:ff:a1:c5:ec:cc:6c:87:d6:01:05: 73:f6:a6:c4:9f:d8:c0:d7:7d:ef:ef:12:e6:ac:74:d4:ab:b3: 58:13:5d:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfxL1kDBf+R4UjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2Y4MDczOTItOGRiNy00ODE5LTlkMjYtOTU0MWUyNGMxOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJLOYQ1XHdROZEI09tVjurf64nNtkbYAs9KZ s9cq85TMqF4C2AHMYquvhg8TF/+k9eOTTRPJs9kxEirCxjvQ5ikdCV5Uli8kfQmB DHBJK+ybjG3kPl4BSV2wk24GhxATr4oQGcZvrXrkCYpSjKxSDxHw8OjfxtzhlJ9K Zj2JsNsR9z1HUhSBCTNrGOKzAGmH9mfZbCQI95ldrUOPlvLo9rvZlJv5UP6jjBe3 ktv3FC7M6Ol8AsDcp6cl3zRPKMmBseRCrNDL8r2pvA2E42qXhTkenPqm7NQEfUn7 sNvTB2K9QYMjaJK/gzzPp0xofrsWDiTUtOx0c7SW1TMENgkVwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBxiBQdNbeSJ0uyQpikgA7uqHf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTcwMGQyZjYtYmM1OC0z Mjg1LTliZWMtYjhhYTcwMjJiOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB0D5vJnK9m80XpR1c/lEo1oKYIg6vQmHXslimpooFYkEoo9NzxgudB TOlco2i6uTaptQ69wTyOzjHzAPEph1C+Kw0ESk6L6mvQcuyAaSSSOUqRvbTv51Nm VYCILIbRjopfaYCIcXbYG4Y2VvmcdU488QV9er/oKnkzyAbZCqv4boSklIQB+DQE Yu3WmrL3T/xsmkCGihobu0OMuLchtrXw8Ww0PU2Q1WwnJD3AwfymjdZahLn2dUcO gTY0JUJFE1Q5WpspEIuO+mkNzpdTUv4tbUWxAG3RyerUPKLgjpbu/6HF7Mxsh9YB BXP2psSf2MDXfe/vEuasdNSrs1gTXVc= -----END CERTIFICATE-----Generated at Sat Sep 26 11:17:20 2026 by rpki-client