$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa File: 8935d049-ac61-3720-adee-5caafdfdacfa.roa (raw, json) Hash identifier: 1M1MoNB7HFuREqwGpSWj8eZd15uqTvKK+G19Q3GqlwE= Subject key identifier: 27:82:52:A6:25:88:E5:31:D7:73:07:A8:2C:83:EA:89:7C:97:E0:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F621A95099D77F6D50800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.20.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:62:1a:95:09:9d:77:f6:d5:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7de15390-2d9e-4626-8e2d-643e850d30f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c9:95:27:e4:6a:6d:34:f1:3e:40:86:24:4f: 54:0f:02:fb:87:0d:37:87:a8:23:16:b9:70:21:2e: 55:4e:a7:78:54:cc:14:4f:a3:48:b9:52:2e:8f:8d: 7f:b4:37:42:bc:bc:63:74:b3:7c:2b:9a:41:70:34: 1f:42:fb:ed:ec:4a:e3:db:b4:4b:62:a0:a8:97:06: 58:c0:71:76:cb:e9:d6:40:51:76:84:71:97:7d:b9: d6:7c:74:12:69:9a:97:cc:1b:62:b1:1e:c0:34:41: c6:26:3e:3c:1d:cd:27:b2:57:2d:71:36:42:fc:4f: 07:47:12:74:d4:d1:8a:70:6d:c8:9b:de:13:ea:20: 2c:72:cf:57:24:6e:ea:c0:6e:11:3f:19:4a:c1:49: bc:02:a7:e1:ef:ea:87:9b:43:74:4f:4a:b1:53:c5: fb:fc:9c:23:7d:93:7f:3c:e4:9a:05:a5:cf:de:90: 8f:af:ca:9b:64:fe:33:08:63:0d:00:41:6b:4f:64: 9e:ef:c4:29:c3:1c:f3:74:ba:cd:c7:0d:94:7d:db: e4:03:84:79:cf:09:db:29:cc:67:a1:3a:8f:94:56: 64:80:f3:00:02:f1:d1:35:f1:31:c8:8b:0d:de:6d: 48:f4:17:9b:10:6c:da:4b:31:8c:aa:0d:42:46:3b: 2d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:82:52:A6:25:88:E5:31:D7:73:07:A8:2C:83:EA:89:7C:97:E0:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:5c:19:de:1c:73:ff:8f:ce:58:d1:34:89:e6:db:3f:4d:b2: 32:f8:fc:d4:16:73:56:19:19:8c:9e:42:bc:f2:52:7c:7f:85: e2:b9:6a:df:b6:32:75:58:0b:2f:62:76:dc:4f:aa:87:f2:df: 8c:cd:7a:7a:80:73:d6:b6:19:47:55:c0:e1:ec:61:06:0c:32: 51:39:70:60:23:c1:80:b8:71:0e:44:64:80:3d:36:1f:60:6a: 51:52:fe:2a:78:8b:cf:26:f6:e6:e9:f1:44:ba:5a:8f:1b:d8: 1d:73:7f:5e:80:4d:9a:78:0f:f9:6d:76:12:de:5d:e2:11:64: 6a:cd:15:51:be:61:b6:6d:17:29:56:68:36:70:53:60:c4:49: a0:ce:29:4b:39:b2:41:bb:b6:12:db:5d:23:fe:b0:72:5a:09: e6:d9:02:80:08:6b:a1:99:f9:a9:93:4f:40:8b:22:f1:87:33: 9c:43:24:3d:41:74:0b:9f:e4:05:53:c0:57:80:e7:74:42:86: b1:c1:88:34:cb:37:3c:80:8f:a9:e4:84:69:17:32:b0:d8:8f: 9f:08:e5:11:e9:ab:00:5d:f4:8e:b1:e3:26:3b:a8:ba:01:69: d2:5a:1f:ee:f9:c5:5c:7c:ea:35:71:5d:4f:a0:5e:7d:7d:0a: 88:59:8c:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf2IalQmdd/bVCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2RlMTUzOTAtMmQ5ZS00NjI2LThlMmQtNjQzZTg1MGQzMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cmVJ+RqbTTxPkCGJE9UDwL7hw03h6gjFrlw IS5VTqd4VMwUT6NIuVIuj41/tDdCvLxjdLN8K5pBcDQfQvvt7Erj27RLYqColwZY wHF2y+nWQFF2hHGXfbnWfHQSaZqXzBtisR7ANEHGJj48Hc0nslctcTZC/E8HRxJ0 1NGKcG3Im94T6iAscs9XJG7qwG4RPxlKwUm8Aqfh7+qHm0N0T0qxU8X7/JwjfZN/ POSaBaXP3pCPr8qbZP4zCGMNAEFrT2Se78QpwxzzdLrNxw2UfdvkA4R5zwnbKcxn oTqPlFZkgPMAAvHRNfExyIsN3m1I9BebEGzaSzGMqg1CRjstyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeCUqYliOUx13MHqCyD6ol8l+D5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODkzNWQwNDktYWM2MS0z NzIwLWFkZWUtNWNhYWZkZmRhY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpcGd4cc/+PzljRNInm2z9NsjL4/NQWc1YZGYyeQrzyUnx/heK5at+2 MnVYCy9idtxPqofy34zNenqAc9a2GUdVwOHsYQYMMlE5cGAjwYC4cQ5EZIA9Nh9g alFS/ip4i88m9ubp8US6Wo8b2B1zf16ATZp4D/ltdhLeXeIRZGrNFVG+YbZtFylW aDZwU2DESaDOKUs5skG7thLbXSP+sHJaCebZAoAIa6GZ+amTT0CLIvGHM5xDJD1B dAuf5AVTwFeA53RChrHBiDTLNzyAj6nkhGkXMrDYj58I5RHpqwBd9I6x4yY7qLoB adJaH+75xVx86jVxXU+gXn19CohZjL4= -----END CERTIFICATE-----Generated at Tue Oct 13 09:12:44 2026 by rpki-client