$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa File: 5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa (raw, json) Hash identifier: sIfAmJmVMX3e3Nd7J8c4GCR7J6Dkg+6cBpOKEPFM5wg= Subject key identifier: 66:95:A4:7A:A8:D0:C6:DE:C7:7C:BC:5C:27:C5:CB:90:3A:AB:B0:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A4D94035BB5B7A208907300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 98.16.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:94:03:5b:b5:b7:a2:08:90:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=e7582307-e134-43e4-ba1f-6aa7e3beddfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:8d:19:41:92:3f:f6:02:39:9f:92:70:87: 25:eb:ff:d1:45:5e:22:47:5e:d6:b8:4b:9d:f1:8d: fa:90:b8:d6:be:ab:42:cb:48:8d:6a:58:02:38:32: d6:f8:36:71:b6:b1:6a:cc:b8:f3:13:b1:6e:e6:97: e6:4b:5a:42:ff:c1:e7:27:bf:87:e4:a9:71:f3:1d: e8:f5:28:2e:ed:c9:f0:2a:c0:f2:05:70:60:01:90: c5:0d:2c:88:d6:65:28:d4:8a:c1:2a:e1:26:66:72: 3c:1a:d0:7e:66:1c:c5:67:c2:58:2a:4a:53:8a:5b: 33:0b:a9:c4:d6:ba:1c:65:6b:55:44:de:99:b4:ab: 82:a6:d8:3c:e5:58:5b:8c:d2:a8:88:57:5b:d7:c2: 5d:e1:a4:9e:3f:03:49:4f:10:94:05:47:84:ef:ea: 6e:59:81:de:97:81:13:44:42:53:69:ea:95:b1:2d: d1:e2:39:f5:24:0d:d2:49:56:3d:d6:7e:df:83:04: 55:0d:71:09:6c:e0:1a:ae:7f:23:73:2f:56:b3:76: e8:55:0c:7c:aa:73:a4:a9:c7:64:4b:d6:ae:50:ff: 5f:76:87:4c:da:ec:a7:2a:ca:c9:a1:4a:2b:78:12: 80:48:0d:e8:9e:66:a0:a3:41:54:0c:56:91:16:47: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:95:A4:7A:A8:D0:C6:DE:C7:7C:BC:5C:27:C5:CB:90:3A:AB:B0:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:66:09:67:7b:7d:85:da:db:73:59:c2:d6:75:06:95:44:4b: 8b:ab:e7:11:4a:61:f9:93:9e:83:f0:e8:0a:ab:40:09:15:b8: d3:c6:e8:26:0b:4c:fc:af:73:91:cf:c2:24:de:fd:0b:17:3d: 21:c5:2e:8a:cc:72:f8:3f:14:4e:a6:32:1c:db:a6:4f:4f:94: 07:6f:83:ee:b2:7d:c4:b9:e2:a2:50:9d:c5:b3:23:88:9d:63: 71:72:a9:e7:3c:74:a9:63:b2:68:a1:b1:a8:d0:12:2d:d5:b3: 30:dd:4b:60:8a:54:dc:9d:91:9d:7c:6a:ba:de:4a:8a:cb:b4: b0:0c:4a:4c:80:b9:35:c3:6f:58:22:6e:c0:62:1c:20:8c:5c: 16:a4:e4:10:a2:2e:46:27:48:98:30:02:e9:6a:30:96:34:a7: 05:7e:1b:3f:64:35:c1:ca:a2:7e:61:17:a4:8a:d8:d8:ae:4f: d6:75:0f:91:69:f1:a7:d7:4d:ea:9e:26:31:51:7a:2e:fa:b7: 97:8d:51:5e:4e:c3:76:5f:89:49:94:6d:5d:92:f3:7f:73:eb: 8c:72:ad:ee:a7:b3:30:8d:76:35:ec:3b:d5:1d:d1:a3:f1:61: 55:d2:43:43:a5:47:4f:d2:0f:c5:1b:a6:36:dc:b0:82:55:13: 3a:41:f8:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZQDW7W3ogiQcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZTc1ODIzMDctZTEzNC00M2U0LWJhMWYtNmFhN2UzYmVkZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/CNGUGSP/YCOZ+ScIcl6//RRV4iR17WuEud 8Y36kLjWvqtCy0iNalgCODLW+DZxtrFqzLjzE7Fu5pfmS1pC/8HnJ7+H5Klx8x3o 9Sgu7cnwKsDyBXBgAZDFDSyI1mUo1IrBKuEmZnI8GtB+ZhzFZ8JYKkpTilszC6nE 1rocZWtVRN6ZtKuCptg85VhbjNKoiFdb18Jd4aSePwNJTxCUBUeE7+puWYHel4ET REJTaeqVsS3R4jn1JA3SSVY91n7fgwRVDXEJbOAarn8jcy9Ws3boVQx8qnOkqcdk S9auUP9fdodM2uynKsrJoUoreBKASA3onmago0FUDFaRFkfOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaVpHqo0Mbex3y8XCfFy5A6q7AjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWFmMDNiYTMtZDZkYS0z ODBjLTllNzctY2JjNDgyZjZkZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRmCWd7fYXa23NZwtZ1BpVES4ur5xFKYfmTnoPw6AqrQAkVuNPG6CYL TPyvc5HPwiTe/QsXPSHFLorMcvg/FE6mMhzbpk9PlAdvg+6yfcS54qJQncWzI4id Y3Fyqec8dKljsmihsajQEi3VszDdS2CKVNydkZ18arreSorLtLAMSkyAuTXDb1gi bsBiHCCMXBak5BCiLkYnSJgwAulqMJY0pwV+Gz9kNcHKon5hF6SK2NiuT9Z1D5Fp 8afXTeqeJjFRei76t5eNUV5Ow3ZfiUmUbV2S839z64xyre6nszCNdjXsO9Ud0aPx YVXSQ0OlR0/SD8UbpjbcsIJVEzpB+Cw= -----END CERTIFICATE-----Generated at Tue Oct 13 16:01:13 2026 by rpki-client