$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa365f0d-a7b2-3666-a15c-e04c60e19e6d.roa File: fa365f0d-a7b2-3666-a15c-e04c60e19e6d.roa (raw, json) Hash identifier: XT+Rf8jQqBumtvf0V3MhghcC5TxVxCslIgpSOWtAysc= Subject key identifier: 52:C5:DB:36:04:DB:F8:17:44:D2:B2:D1:9A:CE:E3:D5:89:A8:4D:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F62931BD6FEE2F6E198DF63A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa365f0d-a7b2-3666-a15c-e04c60e19e6d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 98.20.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:1b:d6:fe:e2:f6:e1:98:df:63:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=1905d2b7-73b9-418f-901d-3151e8bdbe2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:94:d7:6f:b6:6e:64:7c:d8:34:06:01:8d:38: 5c:9a:65:cc:55:00:2c:4d:84:77:13:16:de:17:ab: 40:dd:51:40:ff:65:b8:2a:28:76:d4:0f:99:53:77: 51:89:51:00:56:ed:02:3c:01:0c:45:c9:e9:ee:b2: 04:ec:61:61:f2:46:0c:31:0a:3f:af:f5:b4:b3:be: c2:01:15:42:57:29:34:98:e2:59:45:36:88:1a:81: 16:1a:49:55:89:d7:3a:cc:65:8b:44:c1:fb:2d:48: 8c:db:8a:2f:35:e8:f8:32:9d:15:da:e3:6f:55:d9: 6a:9c:c2:f2:f2:29:10:af:12:01:2e:8f:2b:05:99: 12:a2:82:b1:19:66:e7:ee:23:31:d7:3f:17:46:1a: 44:bb:2b:85:2b:33:31:7e:20:45:68:ad:5e:a0:ea: 1a:5f:41:ff:4e:65:df:da:89:63:61:f1:f1:e1:e4: 3e:6b:7a:d5:02:d8:db:7e:91:32:41:02:1d:07:a7: 12:03:14:d4:5e:65:3c:97:82:8a:c9:b2:10:3b:ad: 49:fc:18:e7:ff:15:d0:94:48:15:d7:39:7a:aa:8e: 4a:2b:f3:02:ab:cb:e1:70:9f:6d:78:37:df:2c:60: 2f:c0:53:4a:f0:a0:6b:e5:87:dc:49:cf:c2:a6:9b: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C5:DB:36:04:DB:F8:17:44:D2:B2:D1:9A:CE:E3:D5:89:A8:4D:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa365f0d-a7b2-3666-a15c-e04c60e19e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:64:65:4c:89:02:18:8c:2e:3b:dd:be:e5:c0:bd:9b:9a:47: 34:db:e1:7d:8d:b1:26:1c:ad:2b:88:60:e6:02:ff:fb:0c:1b: a9:4d:ab:6d:59:56:e4:74:fa:26:35:88:f9:57:bc:41:9b:85: 26:21:fc:56:3b:fc:35:15:88:fa:b5:b6:8b:08:62:4b:74:cd: 49:07:5c:92:3c:76:81:fb:df:d0:ae:a9:fe:dd:1f:11:a2:05: d3:ee:7c:f8:73:59:f0:00:20:f2:19:f3:c1:d6:a9:8e:3c:64: 1e:1e:f8:00:a8:f3:35:15:a2:90:7e:1c:71:01:30:55:94:06: fc:3c:ad:c7:b2:7e:0e:ad:49:cf:e2:a9:42:bc:cd:92:aa:4b: a6:15:cb:31:da:27:2c:f1:35:58:56:e7:66:2a:27:c6:00:f1: 93:8e:3a:e9:01:ad:a6:8e:01:60:ba:28:1d:d4:56:ab:81:a8: 03:93:ae:80:25:00:4d:58:a6:35:21:b1:be:60:88:fe:17:3d: b3:41:89:5e:2f:8f:15:05:f4:9b:fb:1c:d6:75:33:ec:b3:c5: 4c:11:06:d8:01:71:dc:f7:cd:f1:73:8f:cc:4b:63:f2:59:89: 00:27:f0:8e:2f:34:97:cf:46:c0:ae:19:a9:9a:e6:55:d7:7e: 4f:5b:4c:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxvW/uL24ZjfY6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MTkwNWQyYjctNzNiOS00MThmLTkwMWQtMzE1MWU4YmRiZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpTXb7ZuZHzYNAYBjThcmmXMVQAsTYR3Exbe F6tA3VFA/2W4Kih21A+ZU3dRiVEAVu0CPAEMRcnp7rIE7GFh8kYMMQo/r/W0s77C ARVCVyk0mOJZRTaIGoEWGklVidc6zGWLRMH7LUiM24ovNej4Mp0V2uNvVdlqnMLy 8ikQrxIBLo8rBZkSooKxGWbn7iMx1z8XRhpEuyuFKzMxfiBFaK1eoOoaX0H/TmXf 2oljYfHx4eQ+a3rVAtjbfpEyQQIdB6cSAxTUXmU8l4KKybIQO61J/Bjn/xXQlEgV 1zl6qo5KK/MCq8vhcJ9teDffLGAvwFNK8KBr5YfcSc/CppvgSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLF2zYE2/gXRNKy0ZrO49WJqE1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmEzNjVmMGQtYTdiMi0z NjY2LWExNWMtZTA0YzYwZTE5ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVkZUyJAhiMLjvdvuXAvZuaRzTb4X2NsSYcrSuIYOYC//sMG6lNq21Z VuR0+iY1iPlXvEGbhSYh/FY7/DUViPq1tosIYkt0zUkHXJI8doH739Cuqf7dHxGi BdPufPhzWfAAIPIZ88HWqY48ZB4e+ACo8zUVopB+HHEBMFWUBvw8rceyfg6tSc/i qUK8zZKqS6YVyzHaJyzxNVhW52YqJ8YA8ZOOOukBraaOAWC6KB3UVquBqAOTroAl AE1YpjUhsb5giP4XPbNBiV4vjxUF9Jv7HNZ1M+yzxUwRBtgBcdz3zfFzj8xLY/JZ iQAn8I4vNJfPRsCuGama5lXXfk9bTIU= -----END CERTIFICATE-----Generated at Tue Oct 13 13:06:22 2026 by rpki-client