$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa File: 2a428851-c296-3ffd-83aa-596e36f896f0.roa (raw, json) Hash identifier: 5tGSd/nyi/FTb1y/KKKBO2gT4QqugZgycq3JIJjFnt4= Subject key identifier: F6:DA:AB:4F:BA:3E:F3:73:DB:FF:C2:D2:5A:32:E7:52:CD:A4:9E:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1C89EE988346468DAC500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 98.16.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:c8:9e:e9:88:34:64:68:da:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=e981b9b8-642f-404c-8554-4d659c3f5805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:83:82:01:92:55:57:56:57:62:83:6c:bc:bb: b3:98:19:08:04:51:00:95:db:33:fb:0c:93:08:75: 99:f8:34:fb:98:74:d5:19:e3:65:d5:15:de:a9:80: 9f:7c:c7:fe:4c:43:09:77:aa:a4:5d:62:ad:bf:38: 51:d4:07:c5:18:ca:88:d5:8f:37:d4:0e:17:b6:d9: 6f:db:9c:61:4d:8d:be:a4:10:1d:cc:7d:ad:3e:2f: 3e:e9:f6:09:c4:72:dd:c5:5a:fc:00:53:9c:96:f8: 5a:11:b1:b6:6e:8d:63:c1:f4:58:31:30:ef:1c:6d: ad:28:48:f0:9d:03:a2:61:fc:b1:be:0b:31:ca:73: 38:bc:e6:af:e0:86:11:91:f9:e0:16:63:ba:21:38: f6:54:1d:24:90:f3:75:d7:a3:d2:d2:1e:4e:13:3a: 5c:e1:46:e6:c1:61:35:07:c8:8e:40:b6:cc:73:0e: fb:24:7e:ca:ad:61:a0:da:43:55:ed:d8:4a:fc:da: d1:92:7e:00:c4:07:fb:eb:76:2d:76:20:3c:30:03: de:c4:7b:e7:84:a6:7d:4d:e3:77:2d:87:41:47:6d: 6d:c5:1b:4d:f2:eb:2b:0b:7a:6b:19:ca:52:a4:62: 0f:44:f7:d9:d8:d9:39:14:29:78:06:27:a6:62:01: 81:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DA:AB:4F:BA:3E:F3:73:DB:FF:C2:D2:5A:32:E7:52:CD:A4:9E:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4d:a1:95:4e:e5:7c:c0:a6:06:13:80:b2:aa:4d:cf:05:cc: 07:21:fb:ee:5d:70:c1:71:b5:6b:1d:a7:7e:c4:6d:67:c5:d1: 9e:98:33:9a:8e:0c:23:9b:81:90:14:be:80:bb:0b:28:8d:e0: b0:9e:67:e6:ec:e0:41:26:b3:d9:c2:06:41:8c:ad:d0:56:9b: 0c:67:28:92:fc:f4:34:b2:e3:f8:d3:98:81:31:48:25:61:bb: 80:cf:61:17:cb:d1:8b:b5:a0:b6:03:22:2a:21:e8:02:99:1c: 63:43:f6:d5:bb:bc:b2:aa:3c:a2:b4:da:eb:cd:c9:fd:08:bb: c7:6c:17:4e:a0:f9:a1:7e:28:91:54:e1:66:11:bd:38:c7:2b: b1:ed:1d:02:80:4d:cc:c3:e5:0f:d8:5c:9b:51:9f:0a:7c:4f: 53:ac:cf:c4:fa:f8:4b:bd:dd:3a:7f:57:37:0a:1f:66:a5:57: 5e:ad:80:5f:c6:f8:0d:b0:a2:76:f4:be:c2:cf:2f:cc:5c:74: 01:69:c7:c9:ef:2a:8f:f4:f6:50:47:19:a2:71:ac:c1:e1:6c: 93:db:39:7e:69:27:83:77:78:20:75:42:b2:b3:de:ed:82:8a: 18:a5:8c:77:13:7f:3e:07:48:c0:5f:cb:80:36:6c:1d:70:16: c7:49:6c:9a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6yscie6Yg0ZGjaxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZTk4MWI5YjgtNjQyZi00MDRjLTg1NTQtNGQ2NTljM2Y1ODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44OCAZJVV1ZXYoNsvLuzmBkIBFEAldsz+wyT CHWZ+DT7mHTVGeNl1RXeqYCffMf+TEMJd6qkXWKtvzhR1AfFGMqI1Y831A4Xttlv 25xhTY2+pBAdzH2tPi8+6fYJxHLdxVr8AFOclvhaEbG2bo1jwfRYMTDvHG2tKEjw nQOiYfyxvgsxynM4vOav4IYRkfngFmO6ITj2VB0kkPN116PS0h5OEzpc4UbmwWE1 B8iOQLbMcw77JH7KrWGg2kNV7dhK/NrRkn4AxAf763YtdiA8MAPexHvnhKZ9TeN3 LYdBR21txRtN8usrC3prGcpSpGIPRPfZ2Nk5FCl4BiemYgGBSwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPbaq0+6PvNz2//C0loy51LNpJ7tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0Mjg4NTEtYzI5Ni0z ZmZkLTgzYWEtNTk2ZTM2Zjg5NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDYhAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAU2hlU7lfMCmBhOAsqpNzwXMByH77l1wwXG1ax2nfsRtZ8XRnpgzmo4M I5uBkBS+gLsLKI3gsJ5n5uzgQSaz2cIGQYyt0FabDGcokvz0NLLj+NOYgTFIJWG7 gM9hF8vRi7WgtgMiKiHoApkcY0P21bu8sqo8orTa683J/Qi7x2wXTqD5oX4okVTh ZhG9OMcrse0dAoBNzMPlD9hcm1GfCnxPU6zPxPr4S73dOn9XNwofZqVXXq2AX8b4 DbCidvS+ws8vzFx0AWnHye8qj/T2UEcZonGsweFsk9s5fmkng3d4IHVCsrPe7YKK GKWMdxN/PgdIwF/LgDZsHXAWx0lsmg== -----END CERTIFICATE-----Generated at Thu Aug 27 09:47:00 2026 by rpki-client