$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cd0b59c-6aa7-306d-a704-5429b41ddc02.roa File: 4cd0b59c-6aa7-306d-a704-5429b41ddc02.roa (raw, json) Hash identifier: 4bNEsW3AXucaN1jJkE4rtf/R/jEzIuSQ4muP+wj+O3g= Subject key identifier: 47:BF:6F:16:C0:93:32:B6:88:C7:28:16:B1:D2:9F:73:C2:9D:A0:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4AD7E1594D66EFD381334EF0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cd0b59c-6aa7-306d-a704-5429b41ddc02.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 7029 IP address blocks: 98.18.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:e1:59:4d:66:ef:d3:81:33:4e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=9f6ba2bd-9372-4223-b311-aa45308ecf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3b:32:40:24:72:c7:77:33:23:f0:3c:bc:88: 9d:08:c7:2a:59:ba:f0:f5:11:ac:60:6a:90:19:1e: 97:ac:21:52:1b:e7:46:3a:9f:2a:bc:17:8a:d6:9f: 2c:9c:ae:82:43:b0:9c:dc:a7:c6:cf:0e:58:05:fe: e6:e3:8e:6c:fa:f4:2b:aa:23:e9:cc:a0:17:b8:e2: 31:b0:42:3f:d0:82:22:ea:f1:ec:7f:1a:9a:95:50: fa:ba:33:91:1b:2f:e9:b4:8c:a9:20:9f:c0:72:45: 9f:87:5f:7d:d0:1b:d7:a8:5f:90:96:0f:ee:f1:a6: 3a:2c:1d:8f:0a:b2:34:46:ba:e4:94:e6:5f:d2:86: 3c:af:3e:89:a9:18:8a:a1:ad:96:92:23:b4:27:cd: f3:9a:39:9d:ed:d6:26:65:0d:ea:5d:23:27:7c:0d: 70:e8:3f:ec:85:4f:b6:1b:06:69:05:b1:45:1f:43: 01:8b:98:bc:4c:64:0b:72:5a:af:b1:19:47:a0:73: fb:36:36:c8:0c:f2:ba:b7:cb:91:10:b5:49:06:91: e6:24:f8:8c:15:5d:d0:76:8b:cf:ed:48:72:c4:02: de:68:cd:17:8c:75:29:45:c3:8e:40:63:c4:a4:0b: 23:5c:da:27:00:b4:af:57:c9:de:09:bc:e9:34:9d: 7f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BF:6F:16:C0:93:32:B6:88:C7:28:16:B1:D2:9F:73:C2:9D:A0:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cd0b59c-6aa7-306d-a704-5429b41ddc02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:fc:80:1e:f7:09:a8:2e:3e:b2:eb:fb:ff:bd:48:80:bb:01: 34:e0:7b:a1:94:9e:91:2d:f7:52:65:32:0e:2e:21:34:9b:46: b3:e4:71:d7:2a:69:d3:09:1a:d8:44:08:52:a4:c5:17:92:ad: 28:d4:8f:29:63:2a:43:24:7c:db:c7:45:51:73:bf:20:02:9d: 1f:b5:96:b5:c8:a8:8f:c9:4e:fd:9b:a3:a0:86:97:86:95:6b: 36:4f:61:e3:da:5b:9f:f1:b7:50:90:8e:7a:3c:f7:86:b2:72: 5c:58:dc:e2:6b:a2:b7:e5:a4:65:aa:0d:7c:f5:f0:5d:64:69: 2f:1a:c7:b1:af:12:d2:21:cd:3c:07:11:2b:4f:60:b7:d3:31: 54:bd:ee:16:8e:04:22:58:d7:d4:69:ee:45:34:23:48:a5:47: 19:18:a3:8e:9d:58:8c:e4:19:66:16:38:91:8b:94:4e:e4:54: 00:91:37:44:ca:c8:62:93:c3:cb:ee:5b:da:e2:29:1e:3b:95: 4f:21:01:30:6b:f7:75:78:f4:d6:82:85:d1:c0:de:5d:0c:e2: ed:ef:2e:f2:47:85:1a:5b:b4:2f:64:97:46:ed:dc:cc:0d:75: d9:29:34:02:d3:b4:44:4e:0c:9d:be:b4:eb:44:da:4d:eb:9b: 51:1c:9d:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1+FZTWbv04EzTvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk OWY2YmEyYmQtOTM3Mi00MjIzLWIzMTEtYWE0NTMwOGVjZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzsyQCRyx3czI/A8vIidCMcqWbrw9RGsYGqQ GR6XrCFSG+dGOp8qvBeK1p8snK6CQ7Cc3KfGzw5YBf7m445s+vQrqiPpzKAXuOIx sEI/0IIi6vHsfxqalVD6ujORGy/ptIypIJ/AckWfh1990BvXqF+Qlg/u8aY6LB2P CrI0RrrklOZf0oY8rz6JqRiKoa2WkiO0J83zmjmd7dYmZQ3qXSMnfA1w6D/shU+2 GwZpBbFFH0MBi5i8TGQLclqvsRlHoHP7NjbIDPK6t8uRELVJBpHmJPiMFV3QdovP 7UhyxALeaM0XjHUpRcOOQGPEpAsjXNonALSvV8neCbzpNJ1/9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe/bxbAkzK2iMcoFrHSn3PCnaCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGNkMGI1OWMtNmFhNy0z MDZkLWE3MDQtNTQyOWI0MWRkYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf8gB73CaguPrLr+/+9SIC7ATTge6GUnpEt91JlMg4uITSbRrPkcdcq adMJGthECFKkxReSrSjUjyljKkMkfNvHRVFzvyACnR+1lrXIqI/JTv2bo6CGl4aV azZPYePaW5/xt1CQjno894ayclxY3OJrorflpGWqDXz18F1kaS8ax7GvEtIhzTwH EStPYLfTMVS97haOBCJY19Rp7kU0I0ilRxkYo46dWIzkGWYWOJGLlE7kVACRN0TK yGKTw8vuW9riKR47lU8hATBr93V49NaChdHA3l0M4u3vLvJHhRpbtC9kl0bt3MwN ddkpNALTtERODJ2+tOtE2k3rm1EcnYs= -----END CERTIFICATE-----Generated at Tue Oct 13 06:21:06 2026 by rpki-client