$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa File: 23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa (raw, json) Hash identifier: raGWVohllaM2G6Op9ugNCZXoWiKayJiOr/417HvEHp4= Subject key identifier: 19:CE:1A:EA:C4:5C:E8:F6:A2:86:DB:55:A7:EE:C6:D9:49:7C:58:49 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B7E2721C55354E77A9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.20.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b7:e2:72:1c:55:35:4e:77:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=d7455ff2-a9d7-4375-9987-9b81127897ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:19:1e:c4:be:8a:fd:66:a6:4c:68:39:00: bf:dc:c7:cc:ce:50:5a:cc:94:d5:80:aa:b9:2f:77: 1b:6e:1b:2d:7a:21:fc:9f:1c:82:51:22:71:be:3c: 13:c8:36:bb:9d:59:3a:05:51:fe:e9:df:c3:66:29: 92:06:3e:c7:04:cd:90:a7:24:b2:f1:64:2f:d8:f5: 6c:b8:3f:f4:b8:b8:17:d7:17:a0:de:9e:e2:32:70: 3f:c8:cc:c4:23:03:75:f1:37:fb:ad:61:50:e2:a9: e9:d5:ae:b2:80:f6:86:22:f8:7a:32:ce:66:d2:40: 3a:23:6b:a7:f5:ab:00:d6:5b:e7:f2:9c:a1:89:9f: 24:e0:93:f5:77:47:fe:1c:35:2f:06:96:18:f0:da: 55:59:85:f2:fd:4c:3a:f8:12:2c:e2:9d:91:e4:1a: b0:dc:b1:dc:f9:94:0e:dc:f0:9f:6b:a3:6f:9f:c9: 4f:35:ad:f0:3b:a9:3c:b0:ca:dd:c3:cb:ee:3b:86: 40:9d:70:c2:d1:3a:f5:79:cd:25:0b:8b:0f:9f:f9: f8:ac:da:d0:da:eb:ba:33:45:9e:17:83:a9:90:17: 56:e4:de:d4:1e:ce:37:c4:03:34:b7:75:21:cc:91: ca:8d:5b:0a:54:97:7c:7f:61:84:b9:7e:ec:11:5b: ed:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CE:1A:EA:C4:5C:E8:F6:A2:86:DB:55:A7:EE:C6:D9:49:7C:58:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:bb:a7:3b:2f:12:88:7a:48:bc:e9:98:ac:ab:75:86:54:8f: cb:6d:a7:b0:90:19:f8:61:14:c0:6e:da:3d:58:cc:47:de:c9: 87:0a:05:9c:b8:e6:b2:57:7d:99:74:c3:27:33:09:87:d6:0f: ec:c6:8b:4c:c6:42:d2:ef:27:07:aa:dc:6e:09:6c:46:4d:dd: 3f:d3:fa:5e:22:da:5a:08:c7:0a:d8:cf:34:bf:07:42:52:0c: db:1d:d2:55:ed:68:64:ec:fc:1c:bf:24:4c:1e:0c:99:37:27: 26:75:b4:4e:40:85:f0:7e:d6:47:64:6c:a2:ec:9b:c4:27:cb: 9c:88:4a:01:48:ac:9a:cb:54:62:a6:58:3f:f3:13:2a:49:af: 41:32:e2:aa:8d:80:91:f2:c8:46:2a:9a:8f:37:50:5a:58:e5: 98:66:15:eb:50:b5:ff:f9:35:29:12:a8:59:20:7f:00:17:1b: 6c:cd:93:24:fd:cd:fb:52:fb:72:b0:71:c2:e7:a4:66:88:36: fb:09:c5:cb:3a:b9:a4:55:12:57:40:e2:04:a3:ad:e0:18:a3: a5:83:a4:58:86:06:91:72:0c:56:5f:c4:58:6a:c8:1c:bd:65: a2:36:26:55:50:a3:c4:de:8f:31:8a:fc:e0:5d:62:5b:f8:d5: 8d:f1:79:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rfichxVNU53qcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZDc0NTVmZjItYTlkNy00Mzc1LTk5ODctOWI4MTEyNzg5N2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOkZHsS+iv1mpkxoOQC/3MfMzlBazJTVgKq5 L3cbbhsteiH8nxyCUSJxvjwTyDa7nVk6BVH+6d/DZimSBj7HBM2QpySy8WQv2PVs uD/0uLgX1xeg3p7iMnA/yMzEIwN18Tf7rWFQ4qnp1a6ygPaGIvh6Ms5m0kA6I2un 9asA1lvn8pyhiZ8k4JP1d0f+HDUvBpYY8NpVWYXy/Uw6+BIs4p2R5Bqw3LHc+ZQO 3PCfa6Nvn8lPNa3wO6k8sMrdw8vuO4ZAnXDC0Tr1ec0lC4sPn/n4rNrQ2uu6M0We F4OpkBdW5N7UHs43xAM0t3UhzJHKjVsKVJd8f2GEuX7sEVvtYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnOGurEXOj2oobbVafuxtlJfFhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjNmNWI3ZTctMWU2NC0z Nzk0LTlhZTEtOWQ3N2YzMTVhZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy7pzsvEoh6SLzpmKyrdYZUj8ttp7CQGfhhFMBu2j1YzEfeyYcKBZy4 5rJXfZl0wyczCYfWD+zGi0zGQtLvJweq3G4JbEZN3T/T+l4i2loIxwrYzzS/B0JS DNsd0lXtaGTs/By/JEweDJk3JyZ1tE5AhfB+1kdkbKLsm8Qny5yISgFIrJrLVGKm WD/zEypJr0Ey4qqNgJHyyEYqmo83UFpY5ZhmFetQtf/5NSkSqFkgfwAXG2zNkyT9 zftS+3KwccLnpGaINvsJxcs6uaRVEldA4gSjreAYo6WDpFiGBpFyDFZfxFhqyBy9 ZaI2JlVQo8TejzGK/OBdYlv41Y3xeUk= -----END CERTIFICATE-----Generated at Tue Oct 13 06:23:34 2026 by rpki-client