$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a852d35-10bc-3008-beef-c1bbe589c711.roa File: 7a852d35-10bc-3008-beef-c1bbe589c711.roa (raw, json) Hash identifier: LJzZN+z6bRkq2iO1O5KR/JkC3mWk4Por/ZgqEv6WZQw= Subject key identifier: D9:A1:07:78:74:2D:E4:DC:CF:25:EC:7E:4C:9A:3A:83:E9:6E:C7:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F8479E395A4E45BF9ED49ED00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a852d35-10bc-3008-beef-c1bbe589c711.roa Signing time: Fri 16 Oct 2026 04:27:45 +0000 ROA not before: Fri 16 Oct 2026 04:27:45 +0000 ROA not after: Thu 14 Jan 2027 05:27:45 +0000 asID: 7029 IP address blocks: 98.20.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:84:79:e3:95:a4:e4:5b:f9:ed:49:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 16 04:27:45 2026 GMT Not After : Jan 14 05:27:45 2027 GMT Subject: CN=1ffbc083-d756-4112-9749-bc611f7bec7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:9d:7a:c4:b9:65:a2:1e:89:f0:3d:ed:5d: c0:1c:01:0f:61:b3:3b:e9:2e:ef:46:b9:d9:13:14: fd:43:34:43:d0:6b:1a:32:56:b6:bf:0a:23:95:e7: c5:41:96:47:49:03:f7:27:47:1f:05:3e:c2:33:09: 57:a7:e9:d6:c3:fd:a7:64:14:38:31:1c:1e:e1:6d: 2f:e7:43:60:9b:00:df:67:ff:a0:97:6d:42:72:59: 23:f8:f5:62:09:38:29:ec:60:cd:4c:b9:6a:17:02: 98:42:4b:82:79:1a:ea:7e:4f:8e:cb:b5:4d:a0:89: 17:16:ea:41:cb:cf:cd:09:ea:d1:36:c6:e0:6a:6e: 58:1b:d3:90:2d:ab:5b:50:0a:88:b0:63:b6:f8:8b: e1:e3:58:e1:91:7f:3d:d0:18:80:0d:b6:1a:3b:9d: 43:45:be:c7:93:d3:e0:ba:49:e0:ec:92:3a:5f:76: 87:e2:50:18:2c:59:e2:53:a2:85:68:ee:e5:33:c4: 5a:71:6a:d8:06:98:5d:ed:a5:e0:d4:83:5e:b3:fb: cf:f3:97:ec:d6:da:d3:91:53:9b:40:3f:62:fc:8c: 1d:47:62:8f:29:fd:50:81:51:d9:d9:44:4d:a6:c7: 4f:2d:61:5c:ff:58:2e:44:27:75:24:f9:81:a4:66: 97:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A1:07:78:74:2D:E4:DC:CF:25:EC:7E:4C:9A:3A:83:E9:6E:C7:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a852d35-10bc-3008-beef-c1bbe589c711.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:17:74:c2:5d:50:ac:98:a1:b5:ca:15:db:a6:ed:f1:2a:e0: 47:e7:0a:90:63:61:4e:e4:c6:2c:7e:7f:bb:3a:30:31:a5:fc: 0a:5d:04:01:df:2a:fa:08:a6:30:91:86:76:8b:cf:00:c6:fb: 5e:80:71:15:2c:a0:ec:9e:72:26:da:94:3b:67:9f:df:e0:c6: d5:ea:ec:f5:09:87:ab:c8:09:56:81:c4:3a:e9:d8:57:1c:8a: 4e:ca:04:08:93:32:a7:df:31:2b:5b:7f:9c:86:16:28:6e:b5: ef:1a:81:d0:19:28:13:c4:58:65:25:2f:1c:3a:61:b3:59:36: 3b:ce:08:5e:3d:52:54:87:91:b7:b2:cc:d1:61:6c:5d:f0:93: bc:de:08:ea:83:51:ac:14:a5:b8:29:a2:af:73:1e:3d:d3:a5: 64:84:4a:07:47:fd:f4:51:5d:b0:5c:0c:52:8a:54:85:5f:5b: 54:1f:4a:eb:f3:71:6a:09:77:07:e0:e1:17:2a:59:64:cc:e2: eb:b5:d7:99:77:43:1c:89:5f:3d:d8:c2:f5:87:aa:e4:e5:18: f8:ea:90:a2:44:c4:b3:a1:38:d7:94:6e:e7:04:c2:b3:56:66: ab:9f:10:75:ad:78:99:f6:1d:ea:90:b8:e3:1b:64:26:c3:7a: de:0d:ac:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+EeeOVpORb+e1J7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxNjA0Mjc0NVoXDTI3MDExNDA1Mjc0NVowLzEtMCsGA1UEAxMk MWZmYmMwODMtZDc1Ni00MTEyLTk3NDktYmM2MTFmN2JlYzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBOdesS5ZaIeifA97V3AHAEPYbM76S7vRrnZ ExT9QzRD0GsaMla2vwojlefFQZZHSQP3J0cfBT7CMwlXp+nWw/2nZBQ4MRwe4W0v 50NgmwDfZ/+gl21Cclkj+PViCTgp7GDNTLlqFwKYQkuCeRrqfk+Oy7VNoIkXFupB y8/NCerRNsbgam5YG9OQLatbUAqIsGO2+Ivh41jhkX890BiADbYaO51DRb7Hk9Pg ukng7JI6X3aH4lAYLFniU6KFaO7lM8RacWrYBphd7aXg1INes/vP85fs1trTkVOb QD9i/IwdR2KPKf1QgVHZ2URNpsdPLWFc/1guRCd1JPmBpGaXOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmhB3h0LeTczyXsfkyaOoPpbsfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2E4NTJkMzUtMTBiYy0z MDA4LWJlZWYtYzFiYmU1ODljNzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIXdMJdUKyYobXKFdum7fEq4EfnCpBjYU7kxix+f7s6MDGl/ApdBAHf KvoIpjCRhnaLzwDG+16AcRUsoOyecibalDtnn9/gxtXq7PUJh6vICVaBxDrp2Fcc ik7KBAiTMqffMStbf5yGFihute8agdAZKBPEWGUlLxw6YbNZNjvOCF49UlSHkbey zNFhbF3wk7zeCOqDUawUpbgpoq9zHj3TpWSESgdH/fRRXbBcDFKKVIVfW1QfSuvz cWoJdwfg4RcqWWTM4uu115l3QxyJXz3YwvWHquTlGPjqkKJExLOhONeUbucEwrNW ZqufEHWteJn2HeqQuOMbZCbDet4NrPk= -----END CERTIFICATE-----Generated at Sun Oct 18 12:01:33 2026 by rpki-client