$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2addebe0-5bf7-3362-ae7f-805bfa36eb2c.roa File: 2addebe0-5bf7-3362-ae7f-805bfa36eb2c.roa (raw, json) Hash identifier: uIBNTdjsKvE5cApLndv7+jLzUszi9RIDVbCqXK9vV/8= Subject key identifier: 58:56:E3:2E:05:B2:75:B9:CE:23:1C:2E:B6:CA:44:BF:A7:72:6D:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA787A67D6F0ACC44A01DA100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2addebe0-5bf7-3362-ae7f-805bfa36eb2c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.17.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:a6:7d:6f:0a:cc:44:a0:1d:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d97d1e6c-99bc-48a2-bf9f-e5b72323747d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:ba:55:3b:c7:d2:cb:f9:e0:5e:bf:c2:ff: b9:b5:66:1d:4a:19:f7:2a:2e:0b:27:73:8d:83:e9: b4:35:17:67:b3:1b:e6:38:ce:8d:f8:e5:e8:c4:85: 23:7f:5c:ef:cd:56:57:5d:43:60:5c:d4:93:b3:01: 08:1e:9d:de:b0:f1:93:58:c3:99:8b:a6:bf:23:25: 2a:bb:50:22:dc:7e:fa:33:a0:60:c6:30:87:45:e0: d8:81:2e:f8:80:5c:26:f7:37:be:d4:f0:7e:b6:48: fb:7d:9d:9d:cb:6c:4d:5e:f9:70:29:95:89:36:f9: e9:8f:a3:8c:79:79:60:6f:03:ff:57:03:9c:71:c6: b1:f3:33:1a:2f:13:10:c6:19:38:0e:dc:da:ae:c7: 87:92:1f:73:da:d6:2b:19:e3:83:1e:a0:bd:d8:33: 3a:cf:28:25:06:5e:3a:b3:b8:4e:4a:5a:8c:cc:ef: 97:0e:01:00:62:9a:58:cd:3c:bf:ec:0a:03:1c:75: 87:7a:d3:c7:68:af:f4:d7:90:7a:56:ef:27:10:a3: 31:9b:62:30:16:6c:0d:12:41:79:03:a7:58:0a:66: 6a:f1:cc:26:e3:26:e0:1e:39:85:78:02:10:ab:1f: 6c:d1:a6:fc:e0:b5:ed:cb:a0:91:f4:e3:ef:76:96: 73:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:56:E3:2E:05:B2:75:B9:CE:23:1C:2E:B6:CA:44:BF:A7:72:6D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2addebe0-5bf7-3362-ae7f-805bfa36eb2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:40:12:9a:84:f8:29:19:34:07:fb:4c:70:99:29:a6:42:ff: 5a:f0:58:51:dd:b3:8d:9c:e9:fe:f3:5d:67:3c:68:1d:75:df: c8:3f:68:ac:a9:ab:45:5c:aa:70:f3:4a:69:49:1c:9d:2f:ec: 14:8a:41:0c:7b:7b:08:01:5a:fc:c4:77:f3:aa:25:ae:39:ef: 14:3b:5b:99:55:0a:bb:d9:35:b6:a0:20:6c:14:fd:25:85:03: 66:80:fe:ef:03:be:9a:8f:54:48:4a:e5:4b:f7:0d:d6:da:b7: 2b:82:5b:3e:c9:c5:d9:ed:1f:f0:b7:0c:07:6e:a4:b0:70:cb: 74:ed:30:8a:ac:46:9c:a2:40:c5:29:f7:44:c1:e9:2e:eb:c1: a2:b0:d0:62:58:1c:9b:f0:24:f7:d6:6a:fa:22:b3:ff:95:ea: 93:66:72:98:f3:62:88:7a:a5:e1:a8:3c:99:27:f1:5d:c1:7b: dc:64:8d:62:d9:db:7b:44:8b:29:bf:a9:67:cd:b3:0b:c8:d5: 0f:56:9d:2c:8a:96:84:44:4e:14:a5:32:91:3a:24:83:5a:82: 59:1d:44:9f:78:01:6a:a9:92:20:1d:ec:47:de:fa:59:c5:7d: 1c:ef:e3:eb:6c:c4:95:29:aa:d8:56:44:ed:c5:3b:ff:fe:05: 36:c7:2d:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh6Z9bwrMRKAdoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDk3ZDFlNmMtOTliYy00OGEyLWJmOWYtZTViNzIzMjM3NDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVK6VTvH0sv54F6/wv+5tWYdShn3Ki4LJ3ON g+m0NRdnsxvmOM6N+OXoxIUjf1zvzVZXXUNgXNSTswEIHp3esPGTWMOZi6a/IyUq u1Ai3H76M6BgxjCHReDYgS74gFwm9ze+1PB+tkj7fZ2dy2xNXvlwKZWJNvnpj6OM eXlgbwP/VwOcccax8zMaLxMQxhk4DtzarseHkh9z2tYrGeODHqC92DM6zyglBl46 s7hOSlqMzO+XDgEAYppYzTy/7AoDHHWHetPHaK/015B6Vu8nEKMxm2IwFmwNEkF5 A6dYCmZq8cwm4ybgHjmFeAIQqx9s0ab84LXty6CR9OPvdpZzrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhW4y4FsnW5ziMcLrbKRL+ncm08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmFkZGViZTAtNWJmNy0z MzYyLWFlN2YtODA1YmZhMzZlYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRAEpqE+CkZNAf7THCZKaZC/1rwWFHds42c6f7zXWc8aB1138g/aKyp q0VcqnDzSmlJHJ0v7BSKQQx7ewgBWvzEd/OqJa457xQ7W5lVCrvZNbagIGwU/SWF A2aA/u8DvpqPVEhK5Uv3DdbatyuCWz7JxdntH/C3DAdupLBwy3TtMIqsRpyiQMUp 90TB6S7rwaKw0GJYHJvwJPfWavois/+V6pNmcpjzYoh6peGoPJkn8V3Be9xkjWLZ 23tEiym/qWfNswvI1Q9WnSyKloREThSlMpE6JINaglkdRJ94AWqpkiAd7Efe+lnF fRzv4+tsxJUpqthWRO3FO//+BTbHLbE= -----END CERTIFICATE-----Generated at Tue Sep 1 02:50:00 2026 by rpki-client