$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4140ed5a-1f2a-38e6-a83d-4ea610ec188d.roa File: 4140ed5a-1f2a-38e6-a83d-4ea610ec188d.roa (raw, json) Hash identifier: 2DHKThJC7EGq+6nxwzhRzvf6loV/fShcKlfXWP+Vhnw= Subject key identifier: 4F:C7:46:D6:31:E1:A4:DB:5C:E3:64:84:01:FF:F1:E0:EC:66:A8:49 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4A60C3FE53AC2F1D66502780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4140ed5a-1f2a-38e6-a83d-4ea610ec188d.roa Signing time: Fri 25 Sep 2026 09:00:14 +0000 ROA not before: Fri 25 Sep 2026 09:00:14 +0000 ROA not after: Thu 24 Dec 2026 10:00:14 +0000 asID: 7029 IP address blocks: 98.23.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:60:c3:fe:53:ac:2f:1d:66:50:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 09:00:14 2026 GMT Not After : Dec 24 10:00:14 2026 GMT Subject: CN=77570a6f-97be-43b9-bb7e-ad6255876bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:74:35:94:e7:15:c9:4e:bc:12:3a:81:23: 92:21:d0:3f:11:3f:76:70:a5:84:cc:95:81:25:8a: de:92:99:94:bd:21:a7:43:37:7d:61:8f:9a:49:93: c5:4d:73:e9:ee:31:63:d7:09:8d:2f:dd:aa:0d:5b: 96:7e:92:de:c3:c4:a5:ca:0e:01:0b:97:e1:e8:a2: f4:74:b8:3a:7b:cd:a9:8c:32:6f:e6:23:19:82:91: 38:a9:60:5e:b8:b6:65:85:b3:aa:a0:57:bc:94:36: 21:3b:f9:eb:3c:ad:e1:c0:71:05:2e:b0:2e:1e:f8: 18:4b:ef:83:e6:a1:ef:8e:1b:24:2d:d6:69:39:e4: ce:06:5f:27:37:cf:ec:e7:a5:55:cf:9e:ff:99:89: 1b:0e:bf:0d:13:dc:c8:80:96:de:80:d9:9c:6e:1c: f0:94:29:6b:0e:e3:c5:e9:77:5b:dc:40:1a:51:e8: e7:2c:70:9e:b7:e4:90:9b:65:bd:72:e1:c7:f8:86: dd:55:40:4a:37:07:fa:96:ce:b6:f3:2e:81:92:af: 45:81:77:6c:2d:50:fe:d6:e6:85:8a:fa:bb:42:2d: 1b:15:00:82:e7:46:b9:1e:d6:8b:de:fe:08:54:08: 40:b4:f2:5b:a8:67:84:54:8f:1a:96:b0:e8:e7:7f: 55:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C7:46:D6:31:E1:A4:DB:5C:E3:64:84:01:FF:F1:E0:EC:66:A8:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4140ed5a-1f2a-38e6-a83d-4ea610ec188d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:38:79:b1:8d:06:55:d5:8d:0a:65:7e:60:e3:dc:83:7f:79: 21:74:72:f9:1c:04:cc:0f:36:30:4d:3b:9d:95:23:0a:7b:dd: 22:d6:bc:9c:42:34:52:0b:34:aa:70:cd:32:e9:4f:bd:99:c5: 24:d2:32:9a:b9:4b:1d:b6:b2:57:27:82:9b:0e:57:65:e2:d4: 98:8e:e7:81:ce:c7:91:9e:aa:04:a1:4b:94:12:3e:0d:a0:31: 64:77:f4:2a:be:23:19:b4:1c:85:a7:3b:31:34:e4:63:f0:31: 81:29:74:8c:f1:01:b8:d9:68:58:6c:ac:66:8c:5a:69:63:7c: f5:a0:43:34:07:47:9a:0a:59:aa:71:5e:e6:ea:ec:48:4c:d6: c3:2e:80:70:4c:8a:7e:6e:23:e6:9c:d7:ca:92:a7:a7:76:91: a4:c8:a9:18:48:b6:73:00:0d:01:a2:5c:e7:2d:1c:9b:2c:05: 6b:70:e2:06:37:49:4b:b6:41:26:b7:75:70:a5:dc:3a:0f:94: a4:19:13:e3:f8:b7:7a:bb:eb:90:4d:5a:4b:f9:e8:e5:e9:5a: 66:92:7d:29:f3:8a:f4:21:39:0e:db:3f:2f:b0:1e:0a:ed:e5: 0e:fd:dd:71:52:90:4d:1d:d2:8e:31:68:59:89:dc:20:4e:8d: 0b:6e:46:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9KYMP+U6wvHWZQJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTA5MDAxNFoXDTI2MTIyNDEwMDAxNFowLzEtMCsGA1UEAxMk Nzc1NzBhNmYtOTdiZS00M2I5LWJiN2UtYWQ2MjU1ODc2YmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAR0NZTnFclOvBI6gSOSIdA/ET92cKWEzJWB JYrekpmUvSGnQzd9YY+aSZPFTXPp7jFj1wmNL92qDVuWfpLew8Slyg4BC5fh6KL0 dLg6e82pjDJv5iMZgpE4qWBeuLZlhbOqoFe8lDYhO/nrPK3hwHEFLrAuHvgYS++D 5qHvjhskLdZpOeTOBl8nN8/s56VVz57/mYkbDr8NE9zIgJbegNmcbhzwlClrDuPF 6Xdb3EAaUejnLHCet+SQm2W9cuHH+IbdVUBKNwf6ls628y6Bkq9FgXdsLVD+1uaF ivq7Qi0bFQCC50a5HtaL3v4IVAhAtPJbqGeEVI8alrDo539VHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/HRtYx4aTbXONkhAH/8eDsZqhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDE0MGVkNWEtMWYyYS0z OGU2LWE4M2QtNGVhNjEwZWMxODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM4ebGNBlXVjQplfmDj3IN/eSF0cvkcBMwPNjBNO52VIwp73SLWvJxC NFILNKpwzTLpT72ZxSTSMpq5Sx22slcngpsOV2Xi1JiO54HOx5GeqgShS5QSPg2g MWR39Cq+Ixm0HIWnOzE05GPwMYEpdIzxAbjZaFhsrGaMWmljfPWgQzQHR5oKWapx Xubq7EhM1sMugHBMin5uI+ac18qSp6d2kaTIqRhItnMADQGiXOctHJssBWtw4gY3 SUu2QSa3dXCl3DoPlKQZE+P4t3q765BNWkv56OXpWmaSfSnzivQhOQ7bPy+wHgrt 5Q793XFSkE0d0o4xaFmJ3CBOjQtuRsg= -----END CERTIFICATE-----Generated at Wed Oct 14 03:13:44 2026 by rpki-client