$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa File: 2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa (raw, json) Hash identifier: 4ccqb2wi6OxDQp633E+RhiDUoF/rgfFwUh4/FQeIM94= Subject key identifier: AB:5D:20:81:77:1C:3C:4E:BD:1E:98:AF:53:11:B5:60:EA:38:59:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F778324B2FC159F9709D38060 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 98.16.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:24:b2:fc:15:9f:97:09:d3:80:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=711dbd77-bb17-4b98-bece-7b705be0925c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b6:dc:98:c7:11:88:9c:66:b7:c9:7f:01:bf: e4:f3:79:39:d1:b3:54:73:c0:71:9d:d0:26:53:23: 5a:6d:29:6e:1d:0c:77:30:dd:48:ab:37:12:cf:9b: 3f:fa:01:b2:12:3b:a0:13:66:51:d6:ef:f1:b0:ad: ff:7b:bf:64:a5:c5:ea:4a:60:23:ae:3e:fc:d2:9f: 1a:40:4d:29:e0:98:9d:f1:c8:4f:fc:53:df:0d:ec: 14:42:2e:1d:18:4b:80:04:b1:c2:ee:e6:c2:b3:4b: bd:d5:4a:02:b7:0e:4c:dc:5d:86:ff:ff:f7:2f:6e: ec:d0:a3:a9:ee:d4:c0:2c:c0:c0:97:29:49:59:46: 23:47:84:c7:c2:e4:01:5b:2e:07:8a:4f:47:92:b7: d1:41:be:9a:0f:3a:0e:b5:30:76:db:f7:57:46:9d: 0a:a4:45:e3:04:f2:ba:e9:8a:00:79:13:05:1e:21: 9f:32:49:e7:75:f4:c4:62:3e:84:d2:ec:2e:50:c9: 23:67:c5:a2:fa:24:37:e5:eb:11:1c:de:ac:fe:a7: de:fb:ab:09:89:ed:65:ff:a0:46:c5:b8:05:ab:5d: ed:52:3a:d4:4f:6c:1a:c2:f2:89:ca:a2:3f:dc:92: 93:97:c8:33:47:38:0c:bc:8d:57:13:42:71:7e:27: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5D:20:81:77:1C:3C:4E:BD:1E:98:AF:53:11:B5:60:EA:38:59:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:f5:88:3b:44:fb:2a:6d:48:8c:1a:be:d8:1e:7e:9e:a1:d6: c5:14:91:fa:98:5a:f4:45:e0:41:e3:44:3a:35:4d:fe:38:8e: 2a:2e:a6:c6:f9:0f:38:50:23:4b:ac:86:09:b1:61:b5:cc:d7: 16:72:8b:a8:d2:c4:a8:42:3a:04:1f:d5:13:57:63:a2:3d:05: 9e:de:dd:5f:d4:5b:49:37:2f:00:9b:eb:31:91:df:6d:dd:70: 26:32:53:fc:29:94:73:1d:e9:8f:44:e1:d4:6b:e2:e3:d0:0d: d4:27:ca:e2:05:ce:a9:31:e8:7c:3d:e6:65:5c:99:51:8c:c5: c5:74:c1:c9:43:90:9e:76:62:19:d8:db:8e:16:8c:de:4b:f0: a6:6f:fa:df:24:fd:4b:7b:1a:a7:aa:71:36:0d:c2:bf:5d:15: 9e:8b:f3:72:00:90:4d:8c:f0:08:f8:3b:c2:e5:4d:8c:5d:66: 84:69:de:78:4e:d9:0e:36:97:88:dc:c8:72:07:45:87:1b:4e: d7:a1:04:13:32:33:94:66:0f:7d:24:ac:78:4d:e7:96:7f:49: 5a:63:b0:7b:11:ad:95:5a:54:45:9e:03:76:0e:73:99:83:ff: 99:d3:fc:f9:7e:30:12:5d:67:23:ec:1c:91:6d:10:50:2a:e0: 0d:86:ce:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gySy/BWflwnTgGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NzExZGJkNzctYmIxNy00Yjk4LWJlY2UtN2I3MDViZTA5MjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rbcmMcRiJxmt8l/Ab/k83k50bNUc8BxndAm UyNabSluHQx3MN1IqzcSz5s/+gGyEjugE2ZR1u/xsK3/e79kpcXqSmAjrj780p8a QE0p4Jid8chP/FPfDewUQi4dGEuABLHC7ubCs0u91UoCtw5M3F2G///3L27s0KOp 7tTALMDAlylJWUYjR4THwuQBWy4Hik9HkrfRQb6aDzoOtTB22/dXRp0KpEXjBPK6 6YoAeRMFHiGfMknndfTEYj6E0uwuUMkjZ8Wi+iQ35esRHN6s/qfe+6sJie1l/6BG xbgFq13tUjrUT2wawvKJyqI/3JKTl8gzRzgMvI1XE0JxfifMeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtdIIF3HDxOvR6Yr1MRtWDqOFkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjEyOTUzOGItYzg1ZC0z ZDFiLTgzM2ItMGRkYmRlMmE0ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP1iDtE+yptSIwavtgefp6h1sUUkfqYWvRF4EHjRDo1Tf44jioupsb5 DzhQI0ushgmxYbXM1xZyi6jSxKhCOgQf1RNXY6I9BZ7e3V/UW0k3LwCb6zGR323d cCYyU/wplHMd6Y9E4dRr4uPQDdQnyuIFzqkx6Hw95mVcmVGMxcV0wclDkJ52YhnY 244WjN5L8KZv+t8k/Ut7GqeqcTYNwr9dFZ6L83IAkE2M8Aj4O8LlTYxdZoRp3nhO 2Q42l4jcyHIHRYcbTtehBBMyM5RmD30krHhN55Z/SVpjsHsRrZVaVEWeA3YOc5mD /5nT/Pl+MBJdZyPsHJFtEFAq4A2Gzq4= -----END CERTIFICATE-----Generated at Tue Oct 13 16:03:22 2026 by rpki-client