$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa File: d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa (raw, json) Hash identifier: VgaLIOfgMiHkyC23KdaaGM9bE/i8z9l/gpCH738H4gk= Subject key identifier: DD:22:90:6F:24:64:9B:F7:EF:7E:4D:D5:4D:DA:D3:26:2B:5E:B8:B0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D91D227316C96F3B74F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.20.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:91:d2:27:31:6c:96:f3:b7:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=66dd5b54-7484-4557-9faf-ae387abe4781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:8d:1c:02:18:a2:9e:90:18:39:da:fb:25: e3:40:c8:24:18:a9:f8:d4:d7:bf:f1:3b:17:01:66: 97:84:1e:df:d0:0a:79:c0:47:fb:01:c7:01:59:1f: 47:eb:13:27:78:5d:60:88:44:f3:98:6e:38:10:c9: 62:20:3e:1f:26:77:90:3d:98:fd:54:bc:da:95:29: 00:e8:f7:59:59:98:fa:41:50:4c:ce:ac:21:aa:88: 15:af:51:60:5c:4c:21:83:27:57:75:6c:cc:24:f2: 85:9b:d0:a6:aa:3b:9f:19:ab:3f:cb:2b:17:db:88: 9b:c1:c0:ef:ee:76:08:96:38:c8:66:6e:93:fe:4a: 7e:80:c6:e9:54:52:c1:d7:66:76:b7:bb:af:c7:5e: a2:37:32:bc:43:61:0b:62:0d:94:99:13:98:5c:27: 3f:1b:c9:e2:aa:93:ce:b4:f2:2a:5e:8f:e9:94:51: e7:91:94:de:63:d3:73:a8:0f:c3:07:6a:5d:53:ad: c2:30:87:11:e8:4e:04:7b:54:d0:00:ad:23:d8:a5: 0b:55:4e:08:5c:91:38:63:18:68:c7:83:bb:69:d0: 53:4a:94:f7:a1:11:e1:63:e6:97:63:1d:17:a7:49: 9b:ab:5d:cc:82:cf:d3:89:5b:f1:ee:4a:65:f8:3a: 49:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:22:90:6F:24:64:9B:F7:EF:7E:4D:D5:4D:DA:D3:26:2B:5E:B8:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:54:a9:78:53:af:98:e2:88:30:f5:22:ca:e5:eb:d8:ae:bc: 50:4d:c2:40:7c:c4:92:d1:2d:90:40:4a:cf:e5:9c:8e:20:3c: 50:82:a4:b7:05:16:15:9b:b5:73:ed:46:08:3d:e3:13:49:89: b9:30:6e:4a:52:0f:a2:16:82:bb:6f:c8:54:39:78:57:9e:3b: 93:98:41:04:65:69:fc:38:b7:ec:57:03:0d:44:67:e4:a7:1c: 81:f8:21:31:75:0d:20:3b:67:58:09:7e:93:28:ac:67:63:34: 6b:99:28:1f:17:15:e6:46:ca:a6:18:9a:d4:e6:ab:eb:3b:1d: 53:42:73:5e:c8:e5:f1:b9:c0:f8:cc:40:5b:f7:24:ce:34:d6: 87:3b:68:58:bb:c4:ff:03:8c:a6:86:6b:58:f5:29:c3:e5:49: bb:20:11:11:a9:31:f3:4c:37:c2:9f:91:fe:6f:ef:d8:78:b2: 4b:e0:3f:42:75:e2:1e:69:d7:a6:99:e6:d9:25:a8:dc:23:d9: 7d:bc:dd:b8:96:04:3e:c1:fe:28:ae:73:43:df:67:8f:f7:c3: ba:04:24:a7:37:75:48:e2:52:20:98:0a:76:9b:77:ed:93:6c: 5e:5f:04:d8:ae:fa:a6:b0:2e:36:ce:e1:82:36:71:0c:2e:d3: dc:fc:6b:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZHSJzFslvO3T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NjZkZDViNTQtNzQ4NC00NTU3LTlmYWYtYWUzODdhYmU0NzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP6NHAIYop6QGDna+yXjQMgkGKn41Ne/8TsX AWaXhB7f0Ap5wEf7AccBWR9H6xMneF1giETzmG44EMliID4fJneQPZj9VLzalSkA 6PdZWZj6QVBMzqwhqogVr1FgXEwhgydXdWzMJPKFm9CmqjufGas/yysX24ibwcDv 7nYIljjIZm6T/kp+gMbpVFLB12Z2t7uvx16iNzK8Q2ELYg2UmROYXCc/G8niqpPO tPIqXo/plFHnkZTeY9NzqA/DB2pdU63CMIcR6E4Ee1TQAK0j2KULVU4IXJE4Yxho x4O7adBTSpT3oRHhY+aXYx0Xp0mbq13Mgs/TiVvx7kpl+DpJ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0ikG8kZJv3735N1U3a0yYrXriwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDYwOWQ3ZDEtODFlOC0z NzAzLTlhMTItYTZmOTdhMWJkNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYhQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxUqXhTr5jiiDD1Isrl69iuvFBNwkB8xJLRLZBASs/lnI4gPFCCpLcF FhWbtXPtRgg94xNJibkwbkpSD6IWgrtvyFQ5eFeeO5OYQQRlafw4t+xXAw1EZ+Sn HIH4ITF1DSA7Z1gJfpMorGdjNGuZKB8XFeZGyqYYmtTmq+s7HVNCc17I5fG5wPjM QFv3JM401oc7aFi7xP8DjKaGa1j1KcPlSbsgERGpMfNMN8Kfkf5v79h4skvgP0J1 4h5p16aZ5tklqNwj2X283biWBD7B/iiuc0PfZ4/3w7oEJKc3dUjiUiCYCnabd+2T bF5fBNiu+qawLjbO4YI2cQwu09z8ay4= -----END CERTIFICATE-----Generated at Tue Sep 29 17:41:35 2026 by rpki-client