$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3fdb18-c9b3-3e0b-a097-51d803720b60.roa File: 4c3fdb18-c9b3-3e0b-a097-51d803720b60.roa (raw, json) Hash identifier: sSMePJd+OB7VQF+C7smcQ+TPyPK6UsvuAOKJHdxI0X8= Subject key identifier: 07:47:42:0C:E6:3E:B5:FD:C5:11:DC:A3:EE:6D:4B:B6:DD:13:68:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F62931941AC9589DA9FC84900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3fdb18-c9b3-3e0b-a097-51d803720b60.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 98.21.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:19:41:ac:95:89:da:9f:c8:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=cece2ab8-3aa8-42ca-b251-248e7dd03938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:57:8c:eb:ee:ee:95:2d:68:7c:97:1c:1f: e9:0c:31:62:bf:7c:7f:dd:31:59:15:d1:2c:12:30: 36:42:d8:0a:43:8c:95:d1:c4:81:4c:9c:8f:b4:18: d0:3d:31:8d:e2:0a:b9:6e:f9:9b:3c:e0:9d:18:b1: 83:30:f8:18:bd:c3:74:39:9f:7b:94:9b:4d:e4:65: 74:6c:d4:f6:27:c9:9a:32:37:d5:54:b2:30:7a:b8: cf:a9:bb:c6:44:8f:3e:cc:9d:44:31:11:66:22:00: bd:77:36:20:ec:6c:b7:fe:72:16:68:55:91:20:f3: 3f:02:8f:f6:d4:ae:68:e8:8a:66:7a:e8:d8:80:62: 9c:40:64:d6:d0:c2:e6:1a:a9:c8:98:1c:98:41:3e: fe:a5:ce:41:e3:10:44:04:ea:49:a4:e6:ca:44:85: 68:a8:98:82:c0:dd:83:d9:87:39:70:95:4c:ea:0a: 5c:03:77:96:58:9c:d4:9b:82:70:70:5c:36:32:bf: fa:1c:27:a3:74:10:03:7d:33:24:68:18:95:de:4a: bc:bd:66:82:e6:40:72:42:4d:b7:03:a1:47:db:a5: 63:20:56:d0:bc:1f:64:f8:a2:7f:e0:dd:90:d9:0f: a3:aa:b7:69:8e:9e:8d:be:ba:08:80:2f:5d:de:35: 87:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:47:42:0C:E6:3E:B5:FD:C5:11:DC:A3:EE:6D:4B:B6:DD:13:68:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3fdb18-c9b3-3e0b-a097-51d803720b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1b:42:81:2d:97:f4:ac:06:05:6d:6d:20:a4:43:0a:f7:11: 81:8a:71:6e:6e:4d:90:ca:98:f5:51:1d:88:67:e7:4b:fd:73: fb:68:14:9a:99:52:c9:e7:12:d3:0b:30:8b:b0:3e:9f:61:38: 41:56:20:0d:8c:8c:5a:5d:c7:ee:6b:f8:11:65:ff:86:db:88: 88:ae:61:d4:dc:d0:bf:ea:d1:d1:d4:84:53:2f:91:67:66:21: 3c:5b:66:77:ac:4b:dd:51:e9:b8:1a:25:08:11:6f:ea:d1:53: 50:4e:1c:66:7e:21:ab:d5:28:b7:d1:73:62:c2:e2:ac:ca:67: 54:1c:66:41:98:51:25:bf:5e:79:74:74:06:be:95:ed:5f:11: 89:2d:65:f3:1f:13:e3:b8:5a:53:c3:b1:d4:75:0e:50:c4:52: 56:8d:34:60:30:2f:3d:3f:c3:41:15:02:3a:ef:5c:83:6f:26: 19:2d:d4:69:10:cf:b0:3b:4c:87:a2:ae:90:24:34:fa:f4:28: 8b:d3:ab:c5:6b:92:58:73:ca:15:fb:96:3d:e3:c0:3a:89:7a: 6d:05:aa:d1:f7:f9:47:25:9d:ff:d8:73:f6:cb:05:66:25:cf: f7:d4:07:2e:1c:42:1f:c9:97:33:0f:48:5c:45:12:94:81:24: 31:e2:eb:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxlBrJWJ2p/ISQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk Y2VjZTJhYjgtM2FhOC00MmNhLWIyNTEtMjQ4ZTdkZDAzOTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqalXjOvu7pUtaHyXHB/pDDFiv3x/3TFZFdEs EjA2QtgKQ4yV0cSBTJyPtBjQPTGN4gq5bvmbPOCdGLGDMPgYvcN0OZ97lJtN5GV0 bNT2J8maMjfVVLIwerjPqbvGRI8+zJ1EMRFmIgC9dzYg7Gy3/nIWaFWRIPM/Ao/2 1K5o6IpmeujYgGKcQGTW0MLmGqnImByYQT7+pc5B4xBEBOpJpObKRIVoqJiCwN2D 2Yc5cJVM6gpcA3eWWJzUm4JwcFw2Mr/6HCejdBADfTMkaBiV3kq8vWaC5kByQk23 A6FH26VjIFbQvB9k+KJ/4N2Q2Q+jqrdpjp6NvroIgC9d3jWHfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdHQgzmPrX9xRHco+5tS7bdE2hKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMzZmRiMTgtYzliMy0z ZTBiLWEwOTctNTFkODAzNzIwYjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkbQoEtl/SsBgVtbSCkQwr3EYGKcW5uTZDKmPVRHYhn50v9c/toFJqZ UsnnEtMLMIuwPp9hOEFWIA2MjFpdx+5r+BFl/4bbiIiuYdTc0L/q0dHUhFMvkWdm ITxbZnesS91R6bgaJQgRb+rRU1BOHGZ+IavVKLfRc2LC4qzKZ1QcZkGYUSW/Xnl0 dAa+le1fEYktZfMfE+O4WlPDsdR1DlDEUlaNNGAwLz0/w0EVAjrvXINvJhkt1GkQ z7A7TIeirpAkNPr0KIvTq8VrklhzyhX7lj3jwDqJem0FqtH3+Uclnf/Yc/bLBWYl z/fUBy4cQh/JlzMPSFxFEpSBJDHi6/o= -----END CERTIFICATE-----Generated at Tue Oct 13 16:02:24 2026 by rpki-client