$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa File: 06397e4a-5944-3cf6-9cd6-202ce248026d.roa (raw, json) Hash identifier: ePQxkSsfSgOAyq0G6QmLWCW/USiWKQzhFx29ebbAfUk= Subject key identifier: 2F:72:E3:68:C7:4A:2E:86:C7:D7:30:D2:BA:C2:38:5D:63:6F:9D:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6292C91F7A7B56FFE2E3EB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 98.20.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:c9:1f:7a:7b:56:ff:e2:e3:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=a01a19b0-837b-4061-aa64-bb83e34d5f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:89:23:07:1c:f7:15:de:42:be:fd:ca:86:ed: cf:ab:71:0d:d6:4c:84:27:2c:9a:c8:94:5d:30:05: 46:4e:38:4d:a3:e0:42:7f:76:75:19:c4:9d:7e:18: 1c:58:f8:cd:e7:58:26:94:bc:b2:e2:8d:28:b9:fa: e7:6a:eb:4f:00:34:01:5c:b6:2c:ae:2b:d9:a2:83: 44:cf:8a:44:be:87:42:4f:bc:73:d4:44:15:67:51: 4c:f8:3d:47:fa:46:34:e3:31:2f:e6:73:c7:b0:4e: 6d:3c:01:e3:f8:42:eb:a8:ec:8c:ef:62:3b:82:b9: 28:46:d5:a6:b6:29:e2:4d:b6:82:7c:c9:0c:5c:88: 36:18:e3:88:08:90:60:b6:6c:8d:27:9a:a4:73:04: f6:ea:af:cf:e9:e6:96:56:c7:a2:83:38:c1:5a:08: 46:87:d6:7d:4e:13:78:a3:13:12:89:d9:9e:ef:7c: 7c:bf:e7:5a:6e:cd:3c:b7:9e:24:82:95:12:62:d1: f8:48:d7:50:56:f7:09:a8:e7:f0:dd:34:d8:75:9d: 9a:fc:cd:33:ee:55:60:f3:06:9b:5f:45:6f:40:83: 97:55:b4:dd:60:fa:8a:a7:3a:36:c1:3f:5b:b4:00: 32:36:39:d0:8b:27:1e:a6:50:d5:05:e9:b4:21:ac: e9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:72:E3:68:C7:4A:2E:86:C7:D7:30:D2:BA:C2:38:5D:63:6F:9D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:dc:bc:55:a3:e5:d5:f4:94:ad:17:50:93:71:a1:c4:5d:2e: 1d:52:89:84:98:01:dd:74:89:f2:64:e0:c2:44:2b:9b:ff:5f: 25:f4:7f:47:7c:1c:b5:b3:b8:2a:dc:28:b4:08:f3:a3:bb:f2: 25:42:5f:d0:31:c2:fe:c7:0e:df:c8:4a:c1:3f:b0:df:09:65: 6f:2a:7d:e9:d6:b8:25:4a:cc:ab:12:1d:e9:27:08:c4:42:8d: 5e:c6:b3:27:8c:0b:bb:71:24:77:c1:cb:2c:08:36:d8:e6:75: e8:f4:05:71:ba:56:ca:ef:7f:cb:14:5e:36:71:35:50:f8:8d: e9:2a:d6:3d:40:a8:7a:1a:07:cb:e1:d2:d0:2a:ce:82:b7:f2: 1d:9f:24:03:e8:31:64:e8:83:6e:cc:1f:24:b8:39:70:7e:36: a1:b4:61:cc:98:24:53:c4:56:0e:3e:a6:16:44:1d:81:12:ba: 5f:57:51:0c:15:ce:aa:01:9b:43:35:53:73:b3:77:ca:c1:e5: 3d:de:5a:bb:0f:04:cb:56:d0:8e:a5:e5:0b:a3:ff:cc:ba:4a: 80:70:30:84:04:b6:6b:dd:0c:44:b1:c8:0d:af:fe:d5:f0:fa: ee:67:9b:23:7f:82:c3:a2:f2:48:85:6f:ba:e3:6c:72:fe:8f: 6e:fb:d0:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikskfentW/+Lj6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YTAxYTE5YjAtODM3Yi00MDYxLWFhNjQtYmI4M2UzNGQ1ZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YkjBxz3Fd5Cvv3Khu3Pq3EN1kyEJyyayJRd MAVGTjhNo+BCf3Z1GcSdfhgcWPjN51gmlLyy4o0oufrnautPADQBXLYsrivZooNE z4pEvodCT7xz1EQVZ1FM+D1H+kY04zEv5nPHsE5tPAHj+ELrqOyM72I7grkoRtWm tiniTbaCfMkMXIg2GOOICJBgtmyNJ5qkcwT26q/P6eaWVseigzjBWghGh9Z9ThN4 oxMSidme73x8v+dabs08t54kgpUSYtH4SNdQVvcJqOfw3TTYdZ2a/M0z7lVg8wab X0VvQIOXVbTdYPqKpzo2wT9btAAyNjnQiyceplDVBem0IazptwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9y42jHSi6Gx9cw0rrCOF1jb51UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDYzOTdlNGEtNTk0NC0z Y2Y2LTljZDYtMjAyY2UyNDgwMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhT+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTcvFWj5dX0lK0XUJNxocRdLh1SiYSYAd10ifJk4MJEK5v/XyX0f0d8 HLWzuCrcKLQI86O78iVCX9Axwv7HDt/ISsE/sN8JZW8qfenWuCVKzKsSHeknCMRC jV7GsyeMC7txJHfByywINtjmdej0BXG6Vsrvf8sUXjZxNVD4jekq1j1AqHoaB8vh 0tAqzoK38h2fJAPoMWTog27MHyS4OXB+NqG0YcyYJFPEVg4+phZEHYESul9XUQwV zqoBm0M1U3Ozd8rB5T3eWrsPBMtW0I6l5Quj/8y6SoBwMIQEtmvdDESxyA2v/tXw +u5nmyN/gsOi8kiFb7rjbHL+j2770FY= -----END CERTIFICATE-----Generated at Tue Oct 13 17:43:22 2026 by rpki-client