$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa File: 201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa (raw, json) Hash identifier: dEJ7xjv42M+qVVwhQKIcmKr14HhQB9CND78Ddzm9HvE= Subject key identifier: 87:4F:9D:0C:B9:A7:2A:07:D4:6C:FC:2F:80:40:5F:90:2B:81:EE:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F778358491EC8BF4FCD7BB8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 98.22.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:58:49:1e:c8:bf:4f:cd:7b:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=4f8e56fc-9a05-4762-9474-02e5b8e117bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4a:2e:a3:84:ba:e9:86:90:09:8f:96:74:84: 0f:ed:33:6d:cf:cb:7c:30:50:61:ee:24:84:01:45: cf:c5:7e:13:a4:6e:21:e0:ab:02:d4:29:2f:81:83: 15:a8:8e:c2:a9:e8:09:9e:e5:f8:71:ca:e3:9a:d6: 4b:21:d8:df:fb:17:26:95:a0:dd:f8:bf:e9:f4:cc: 5c:39:16:72:73:94:b7:13:71:14:93:ff:2d:72:43: 72:ee:3b:61:80:c3:b3:d7:17:27:76:2a:83:94:a1: 35:53:3f:5b:89:01:fa:5b:c5:81:66:7d:7f:88:f7: a0:9a:48:1e:d8:fd:6e:fd:24:f4:bd:30:43:4a:54: 51:39:c0:cc:79:f3:7e:65:65:35:3a:19:8c:40:be: 20:05:90:b9:ef:dc:92:55:d0:44:4c:d4:90:37:9b: d8:83:92:72:b1:f4:33:99:0a:ea:18:30:14:3e:3f: 3a:67:d7:73:05:f6:72:44:86:34:f6:52:eb:cd:59: 89:cb:44:f9:74:5b:9a:6b:84:58:b0:59:ca:d7:81: 75:f3:d0:67:a4:f6:a5:88:4a:72:f4:c4:35:ad:ae: 2e:21:df:0b:74:22:b9:6d:b4:1c:d6:8c:af:0a:50: 66:ae:7f:70:f0:9c:8c:c1:ce:58:96:fe:a0:c2:c5: 50:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4F:9D:0C:B9:A7:2A:07:D4:6C:FC:2F:80:40:5F:90:2B:81:EE:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a9:38:11:de:71:43:e0:a8:5f:eb:c3:fb:85:b9:91:7a:60: cb:66:9c:97:5d:e8:2a:4b:23:dd:24:c6:ba:8f:ca:95:2f:93: 1c:15:4b:b7:b1:1b:28:7e:08:15:a2:57:ea:24:4f:a4:a0:d1: 6c:3f:2b:28:b0:fe:3d:b4:db:f6:42:dd:2f:11:b5:10:92:42: 8d:10:bf:ac:07:f9:7c:a4:50:f5:6c:6c:d2:47:2a:e4:64:72: ef:bd:3b:2b:f3:4a:ca:34:52:c7:b7:8f:17:a0:08:34:ba:61: 8b:57:8d:d0:12:a9:47:07:74:2c:28:a6:48:99:c3:c2:8b:c8: 8d:4f:9b:3d:5e:8a:5f:12:55:98:2e:2b:48:f0:39:af:c6:17: 60:8f:77:a0:fc:d9:82:83:ae:ca:38:e2:1d:18:70:1e:53:dc: 30:ef:70:6d:5b:fd:3d:e4:59:1d:b7:14:4c:1e:fc:41:53:67: ee:34:e7:6d:c5:a7:32:e4:a7:23:c6:e9:7b:7c:bf:2e:a4:50: 10:37:66:4f:b9:4f:3e:86:0c:f0:5f:da:2e:ac:0c:ce:e9:fa: 35:e5:0a:33:15:7e:4a:1f:8a:da:3e:be:a1:01:40:8e:66:2b: 89:e4:68:c2:99:a9:da:91:b1:e1:fc:16:db:8d:a8:fc:6d:38: 0b:3f:b0:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g1hJHsi/T817uMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NGY4ZTU2ZmMtOWEwNS00NzYyLTk0NzQtMDJlNWI4ZTExN2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Uouo4S66YaQCY+WdIQP7TNtz8t8MFBh7iSE AUXPxX4TpG4h4KsC1CkvgYMVqI7CqegJnuX4ccrjmtZLIdjf+xcmlaDd+L/p9Mxc ORZyc5S3E3EUk/8tckNy7jthgMOz1xcndiqDlKE1Uz9biQH6W8WBZn1/iPegmkge 2P1u/ST0vTBDSlRROcDMefN+ZWU1OhmMQL4gBZC579ySVdBETNSQN5vYg5JysfQz mQrqGDAUPj86Z9dzBfZyRIY09lLrzVmJy0T5dFuaa4RYsFnK14F189BnpPaliEpy 9MQ1ra4uId8LdCK5bbQc1oyvClBmrn9w8JyMwc5Ylv6gwsVQiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdPnQy5pyoH1Gz8L4BAX5Arge5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjAxYmM1OGYtNzA0ZC0z OGJiLTk3MzEtMGY0Y2E0YjBkMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGpOBHecUPgqF/rw/uFuZF6YMtmnJdd6CpLI90kxrqPypUvkxwVS7ex Gyh+CBWiV+okT6Sg0Ww/Kyiw/j202/ZC3S8RtRCSQo0Qv6wH+XykUPVsbNJHKuRk cu+9OyvzSso0Use3jxegCDS6YYtXjdASqUcHdCwopkiZw8KLyI1Pmz1eil8SVZgu K0jwOa/GF2CPd6D82YKDrso44h0YcB5T3DDvcG1b/T3kWR23FEwe/EFTZ+40523F pzLkpyPG6Xt8vy6kUBA3Zk+5Tz6GDPBf2i6sDM7p+jXlCjMVfkofito+vqEBQI5m K4nkaMKZqdqRseH8FtuNqPxtOAs/sIE= -----END CERTIFICATE-----Generated at Wed Oct 14 11:54:30 2026 by rpki-client