$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa File: 2df1ec2d-c15c-37ee-9be8-f210775488b5.roa (raw, json) Hash identifier: D60z8i/GDzjGYC2qHYFWaCpys8++jIrjVp75VHEZQwY= Subject key identifier: 96:1C:23:F2:DF:59:D6:F8:57:8E:C3:47:78:15:2C:F3:88:52:32:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F62930C78FB0C589F25A1C500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 98.17.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0c:78:fb:0c:58:9f:25:a1:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=9d109f8d-7f83-4ee7-8993-efffa279b9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:eb:b8:91:ed:2d:55:45:81:76:51:78:d0: eb:b2:4b:25:61:20:a8:84:0c:ba:1e:f4:26:03:30: af:82:1e:33:ae:ac:8b:f2:30:4d:92:1e:70:6a:17: bf:b2:67:4f:7e:00:2a:ea:e4:cb:e1:64:e1:f1:e4: 34:d1:cc:34:91:d7:88:6a:41:9b:5d:33:e2:1e:83: 6e:6e:06:c1:27:aa:ab:b2:06:0a:64:67:e0:3b:34: 30:15:17:89:70:58:a3:18:f7:43:ca:37:d3:b2:38: ec:25:f3:ed:aa:70:bd:e1:d5:ba:b1:b1:a1:d7:56: 83:04:4d:e3:a3:49:e1:95:1d:ab:fd:fb:86:8d:b2: ad:af:e5:f8:5c:03:ac:c0:41:54:e3:30:c9:42:3c: 36:05:63:fe:9e:60:ad:2d:c7:51:c9:91:57:82:4e: 90:46:ce:c2:87:4a:90:1f:d7:ec:ed:9e:95:98:9d: a6:e4:ad:0c:19:95:45:93:4f:a6:b7:81:e0:62:08: b5:64:3f:d8:fb:89:11:14:0d:85:56:1a:36:00:c0: e7:02:66:69:0b:3b:98:b7:3e:92:55:ac:41:cf:c6: e7:f8:fb:00:7a:db:f0:f8:1a:14:e1:a6:3d:26:ed: 87:b8:31:8b:89:c9:ff:5a:f3:b7:76:f9:f4:c7:ab: 1a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1C:23:F2:DF:59:D6:F8:57:8E:C3:47:78:15:2C:F3:88:52:32:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:24:45:0a:f5:c5:65:0f:e5:ad:00:8a:f6:57:f9:e7:e5:70: 45:60:ad:d9:2a:be:54:57:fd:37:7d:9b:0d:3e:55:1a:81:ed: 3c:4e:fc:a0:d5:98:91:01:7b:78:a2:ac:24:52:fa:6d:05:27: c9:a8:e8:2d:ce:3e:fd:b7:77:b0:76:b0:89:dc:8e:64:7e:f9: b8:02:26:0d:4a:21:dc:a9:02:a5:2f:be:9b:f3:69:43:1a:3d: 1f:3b:c4:de:72:46:1e:c0:e5:ad:be:1e:4c:9d:7b:3f:e6:2c: ed:1d:53:18:14:23:de:09:6f:f6:68:57:88:6a:73:1e:75:49: 2a:83:b7:cd:fd:93:e3:0c:26:8a:53:83:4c:c2:1c:74:8e:b7: 2e:a4:e0:91:57:bf:ac:41:a2:80:f8:c8:a7:8c:7f:72:af:93: 2f:dc:32:a8:94:3e:38:5a:e3:d5:ab:c5:36:03:94:26:6e:84: af:84:49:72:de:51:50:82:93:ff:7b:0a:0b:d4:49:aa:f0:13: 60:da:a6:69:13:b9:e6:b1:6d:d2:3a:74:7d:fe:37:6a:1e:3c: 73:76:9a:b0:99:1a:d0:56:44:f3:dd:86:55:be:20:36:2b:1c: bf:78:b9:37:39:3d:da:d6:cd:63:5b:0e:4d:5d:88:1e:c8:22: f0:4a:0d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwx4+wxYnyWhxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk OWQxMDlmOGQtN2Y4My00ZWU3LTg5OTMtZWZmZmEyNzliOWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxbruJHtLVVFgXZReNDrskslYSCohAy6HvQm AzCvgh4zrqyL8jBNkh5wahe/smdPfgAq6uTL4WTh8eQ00cw0kdeIakGbXTPiHoNu bgbBJ6qrsgYKZGfgOzQwFReJcFijGPdDyjfTsjjsJfPtqnC94dW6sbGh11aDBE3j o0nhlR2r/fuGjbKtr+X4XAOswEFU4zDJQjw2BWP+nmCtLcdRyZFXgk6QRs7Ch0qQ H9fs7Z6VmJ2m5K0MGZVFk0+mt4HgYgi1ZD/Y+4kRFA2FVho2AMDnAmZpCzuYtz6S VaxBz8bn+PsAetvw+BoU4aY9Ju2HuDGLicn/WvO3dvn0x6saewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYcI/LfWdb4V47DR3gVLPOIUjLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRmMWVjMmQtYzE1Yy0z N2VlLTliZTgtZjIxMDc3NTQ4OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYkRQr1xWUP5a0AivZX+eflcEVgrdkqvlRX/Td9mw0+VRqB7TxO/KDV mJEBe3iirCRS+m0FJ8mo6C3OPv23d7B2sIncjmR++bgCJg1KIdypAqUvvpvzaUMa PR87xN5yRh7A5a2+Hkydez/mLO0dUxgUI94Jb/ZoV4hqcx51SSqDt839k+MMJopT g0zCHHSOty6k4JFXv6xBooD4yKeMf3Kvky/cMqiUPjha49WrxTYDlCZuhK+ESXLe UVCCk/97CgvUSarwE2DapmkTueaxbdI6dH3+N2oePHN2mrCZGtBWRPPdhlW+IDYr HL94uTc5PdrWzWNbDk1diB7IIvBKDZo= -----END CERTIFICATE-----Generated at Tue Oct 13 17:43:20 2026 by rpki-client