$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/752baa26-2a71-34df-82d7-547a2a8ddd96.roa File: 752baa26-2a71-34df-82d7-547a2a8ddd96.roa (raw, json) Hash identifier: rh8o9S3imoLUgW+P3VpbaBf5z34vUiyXHydY0pVUs8U= Subject key identifier: 65:0B:74:F5:9E:C4:DE:F9:9A:0D:5C:7D:16:D1:E5:BF:97:91:34:7E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D91DD82E1540B97163920 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/752baa26-2a71-34df-82d7-547a2a8ddd96.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.20.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:91:dd:82:e1:54:0b:97:16:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=0db5599c-b2d5-4fd8-baf2-426920cde22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c1:5c:aa:92:1e:74:c5:e0:e1:ae:a0:e7:78: 41:97:4b:16:22:89:65:67:96:91:96:d9:6f:e5:64: ae:38:b0:b7:b9:4e:f8:09:fa:6a:a8:3d:c8:b7:11: 22:ee:43:aa:81:c4:00:3d:f8:e2:df:8e:5d:61:98: b3:0d:02:ef:b8:0f:ed:cf:e6:46:bf:3f:e6:c8:2c: 4e:31:e4:92:8f:7f:45:13:63:db:97:9c:db:66:b5: 3a:e4:55:85:6a:82:0d:96:4f:5c:66:f4:81:ec:36: 1d:4e:a9:6a:b3:e6:dc:38:4f:1d:16:1c:30:d9:75: d3:1f:4e:cd:d8:4d:e6:0a:c5:89:f3:1a:b3:f4:d2: ea:f2:aa:90:e2:27:e6:0f:2d:7a:92:13:e0:43:78: c5:3c:37:27:3c:7c:6a:56:5a:9b:d6:cf:d9:c8:24: 60:c7:e1:52:ca:e2:1a:44:0a:44:82:40:31:a0:d1: 3d:5d:51:3f:9a:40:f8:73:d1:d3:ae:93:f5:9d:01: ce:08:47:72:44:c8:ca:e7:22:67:01:24:3f:c0:17: c0:f0:15:e1:31:b7:34:89:5b:2f:b7:94:b6:18:53: d2:f1:ee:78:4a:8d:60:9e:fb:52:5c:54:cd:4e:3a: 1e:94:4d:70:0a:30:f4:a7:0c:eb:14:3b:b1:4e:50: d0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0B:74:F5:9E:C4:DE:F9:9A:0D:5C:7D:16:D1:E5:BF:97:91:34:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/752baa26-2a71-34df-82d7-547a2a8ddd96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:46:14:ad:c1:75:59:61:7d:69:ad:19:35:65:fc:0b:ee:1b: 1e:d1:e6:98:d4:57:58:e0:f9:92:7d:d9:c4:39:d5:82:54:36: 51:38:43:80:5b:90:65:d7:db:4f:0a:b6:98:3c:7d:af:32:47: dd:08:4d:21:41:c2:fc:fe:af:f4:a7:e3:81:58:4e:5f:e0:a4: 6e:10:0a:77:93:47:5b:0b:1a:c2:68:a8:3b:36:88:6f:0b:9c: 6b:8d:bd:f3:cf:03:c8:a7:71:f8:23:1f:e3:61:30:33:d5:9a: 7d:5e:74:29:18:e9:0b:a6:b6:5a:dc:40:55:20:69:19:08:a6: 57:b5:46:81:d0:60:f6:45:28:25:62:a7:92:81:bd:28:9c:17: 37:4d:b8:1a:40:cf:89:d4:8f:13:eb:51:2a:69:21:e6:20:b1: 5e:78:6a:3f:10:05:ce:3e:12:f1:d8:0e:d0:27:1b:8a:bb:f4: f5:50:af:fd:40:d2:c6:56:b3:91:43:70:28:6f:26:9e:fc:37: e8:e4:2c:2b:f5:53:38:b1:d1:3c:c8:e4:da:11:ed:c1:b1:56: 80:94:50:1f:98:09:84:8c:ed:26:2b:3b:81:79:63:c8:26:d4: 12:2f:a6:54:de:3d:3a:7a:31:46:bf:ea:12:70:0e:19:60:c3: 25:ca:b9:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZHdguFUC5cWOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MGRiNTU5OWMtYjJkNS00ZmQ4LWJhZjItNDI2OTIwY2RlMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8FcqpIedMXg4a6g53hBl0sWIollZ5aRltlv 5WSuOLC3uU74CfpqqD3ItxEi7kOqgcQAPfji345dYZizDQLvuA/tz+ZGvz/myCxO MeSSj39FE2Pbl5zbZrU65FWFaoINlk9cZvSB7DYdTqlqs+bcOE8dFhww2XXTH07N 2E3mCsWJ8xqz9NLq8qqQ4ifmDy16khPgQ3jFPDcnPHxqVlqb1s/ZyCRgx+FSyuIa RApEgkAxoNE9XVE/mkD4c9HTrpP1nQHOCEdyRMjK5yJnASQ/wBfA8BXhMbc0iVsv t5S2GFPS8e54So1gnvtSXFTNTjoelE1wCjD0pwzrFDuxTlDQPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGULdPWexN75mg1cfRbR5b+XkTR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzUyYmFhMjYtMmE3MS0z NGRmLTgyZDctNTQ3YTJhOGRkZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZGFK3BdVlhfWmtGTVl/AvuGx7R5pjUV1jg+ZJ92cQ51YJUNlE4Q4Bb kGXX208Ktpg8fa8yR90ITSFBwvz+r/Sn44FYTl/gpG4QCneTR1sLGsJoqDs2iG8L nGuNvfPPA8incfgjH+NhMDPVmn1edCkY6QumtlrcQFUgaRkIple1RoHQYPZFKCVi p5KBvSicFzdNuBpAz4nUjxPrUSppIeYgsV54aj8QBc4+EvHYDtAnG4q79PVQr/1A 0sZWs5FDcChvJp78N+jkLCv1Uzix0TzI5NoR7cGxVoCUUB+YCYSM7SYrO4F5Y8gm 1BIvplTePTp6MUa/6hJwDhlgwyXKubc= -----END CERTIFICATE-----Generated at Tue Oct 13 06:21:26 2026 by rpki-client