$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa File: a900db9d-6c9c-3739-b1a1-9441dc45040e.roa (raw, json) Hash identifier: 1qf1dOZT6henUxiBe5JgInqdZyxr8/oh1Dq7BjG/OQQ= Subject key identifier: 99:3D:EB:C3:23:C9:A4:4C:C9:CF:83:AB:48:FE:36:82:38:4E:2C:00 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497442CABB9538B3498B1CE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.19.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:42:ca:bb:95:38:b3:49:8b:1c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=621984e6-5ff6-4362-a9ae-a673c1f24318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:d1:48:93:f7:c4:9e:ef:bf:e0:98:b8:c1: 3e:c3:53:71:81:25:8d:54:44:72:42:66:11:34:f7: d3:a4:38:1c:b8:c8:ff:9c:43:36:54:56:1e:10:43: c8:54:75:50:c1:28:1c:6e:5c:e1:57:45:eb:98:43: 4c:a5:20:fe:a3:19:95:a8:1d:97:92:bd:43:a8:f0: 38:61:33:26:da:b7:ff:59:08:ff:5e:34:dc:74:46: 3c:eb:34:22:a4:fc:2c:44:ab:a8:99:44:dd:56:30: 29:5e:70:e9:2b:47:06:44:4c:57:fd:94:35:14:69: 1c:4d:94:f8:da:88:83:56:b7:69:0e:44:c6:b8:55: b6:1d:87:20:fa:59:09:9d:80:92:8c:36:f9:8b:21: d8:b8:68:9b:6e:2e:df:33:69:ed:5c:be:38:b2:2e: 18:3a:23:f2:2a:a1:15:f7:72:b1:57:98:55:d7:98: f7:6e:a2:1b:23:3d:5e:f3:e3:1e:24:60:ab:92:3f: 16:6c:b7:4b:c8:75:f9:53:04:53:79:ad:bb:fa:f6: 50:d9:50:26:26:20:df:61:22:ac:71:fc:1b:a3:f2: ef:97:95:4a:ca:8c:99:ae:1e:36:b1:4a:48:09:63: 7c:34:03:40:70:f9:cf:27:12:d5:bf:cb:0a:7b:52: a0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3D:EB:C3:23:C9:A4:4C:C9:CF:83:AB:48:FE:36:82:38:4E:2C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:44:92:50:00:8b:d3:05:76:9c:c4:e7:36:3e:57:00:88:b9: 1b:6e:34:be:a8:77:38:ab:4c:3e:00:34:68:0a:dd:5a:7c:74: bd:64:3f:9f:1b:be:1a:79:5d:da:fc:d5:b5:8e:18:2c:7e:72: 6e:63:23:51:21:d9:a8:09:f6:95:78:e9:7b:d1:8f:e9:95:c2: 68:5c:5c:ec:84:25:1d:6c:d4:4c:1a:df:2c:18:33:b9:af:2b: 7a:91:e2:c9:95:26:42:fa:eb:9f:ee:80:29:bc:9f:18:20:a7: db:97:b6:cc:40:c2:78:bf:88:9b:04:97:0d:ad:34:bd:89:18: e6:61:70:4c:d7:d9:94:60:aa:7c:7f:62:50:8b:95:f8:94:5e: fd:ca:89:39:a0:44:61:57:77:99:7d:c8:ae:f7:35:2e:a7:4e: 8e:a3:1e:19:2c:90:80:cd:85:8b:3b:1e:97:99:1f:d8:43:e5: 40:64:d1:cc:16:5e:df:df:91:f5:a7:d3:90:4a:4e:4a:3c:30: 8d:f7:3b:17:78:02:0c:e8:e5:98:c6:b0:74:04:2a:31:1f:11: fe:31:e4:4a:e6:d8:e3:73:23:f8:c7:64:79:54:d1:09:f1:e8: 2a:0b:ce:da:59:71:8c:78:1d:cb:cd:1c:0f:e2:43:7f:72:87: ca:e8:a5:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdELKu5U4s0mLHOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjIxOTg0ZTYtNWZmNi00MzYyLWE5YWUtYTY3M2MxZjI0MzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08/RSJP3xJ7vv+CYuME+w1NxgSWNVERyQmYR NPfTpDgcuMj/nEM2VFYeEEPIVHVQwSgcblzhV0XrmENMpSD+oxmVqB2Xkr1DqPA4 YTMm2rf/WQj/XjTcdEY86zQipPwsRKuomUTdVjApXnDpK0cGRExX/ZQ1FGkcTZT4 2oiDVrdpDkTGuFW2HYcg+lkJnYCSjDb5iyHYuGibbi7fM2ntXL44si4YOiPyKqEV 93KxV5hV15j3bqIbIz1e8+MeJGCrkj8WbLdLyHX5UwRTea27+vZQ2VAmJiDfYSKs cfwbo/Lvl5VKyoyZrh42sUpICWN8NANAcPnPJxLVv8sKe1KgFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJk968MjyaRMyc+Dq0j+NoI4TiwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTkwMGRiOWQtNmM5Yy0z NzM5LWIxYTEtOTQ0MWRjNDUwNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZEklAAi9MFdpzE5zY+VwCIuRtuNL6odzirTD4ANGgK3Vp8dL1kP58b vhp5Xdr81bWOGCx+cm5jI1Eh2agJ9pV46XvRj+mVwmhcXOyEJR1s1Ewa3ywYM7mv K3qR4smVJkL665/ugCm8nxggp9uXtsxAwni/iJsElw2tNL2JGOZhcEzX2ZRgqnx/ YlCLlfiUXv3KiTmgRGFXd5l9yK73NS6nTo6jHhkskIDNhYs7HpeZH9hD5UBk0cwW Xt/fkfWn05BKTko8MI33Oxd4Agzo5ZjGsHQEKjEfEf4x5Erm2ONzI/jHZHlU0Qnx 6CoLztpZcYx4HcvNHA/iQ39yh8ropZ0= -----END CERTIFICATE-----Generated at Fri Sep 25 19:40:50 2026 by rpki-client