$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ac49d42-bf91-3842-a904-8fbd86d18b82.roa File: 8ac49d42-bf91-3842-a904-8fbd86d18b82.roa (raw, json) Hash identifier: 65p9Ny/VOXWjhgx5+maNB/hx12WsvdiiHvybfA2L1j4= Subject key identifier: 8C:BA:04:3B:85:8A:86:4E:25:41:9E:B4:58:E3:B0:CD:7A:C7:7E:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4A6210320AC74B0A36F06440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ac49d42-bf91-3842-a904-8fbd86d18b82.roa Signing time: Fri 25 Sep 2026 09:02:51 +0000 ROA not before: Fri 25 Sep 2026 09:02:51 +0000 ROA not after: Thu 24 Dec 2026 10:02:51 +0000 asID: 7029 IP address blocks: 98.23.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:62:10:32:0a:c7:4b:0a:36:f0:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 09:02:51 2026 GMT Not After : Dec 24 10:02:51 2026 GMT Subject: CN=4f277f60-9eca-4342-b16e-3aa4e9537cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1b:a3:46:ea:f3:e0:7b:47:47:9f:0b:4b:01: 0c:d2:78:27:53:46:b9:d8:ca:ef:c5:94:64:07:b3: d5:85:4e:31:6a:20:9c:b6:a3:ef:07:e4:c4:8c:11: 03:9c:c2:b7:b4:d3:ea:52:87:bc:b0:0c:ee:ec:c6: 00:15:08:dc:87:da:fa:cc:7c:b4:94:f8:22:4e:5c: 8a:74:0d:af:37:48:69:aa:80:ed:00:cb:2a:bc:48: 51:de:2a:3a:03:56:eb:90:4d:6f:af:7d:b1:14:e0: b1:2b:b7:8b:b4:bd:8d:e3:d5:70:46:e8:d3:17:05: e3:7d:78:5a:37:2e:c0:d0:a7:7f:03:d1:75:1f:e7: 6e:8b:4e:cc:f2:9b:7c:1d:5a:e6:31:7f:24:1c:3e: 4b:ee:36:4a:a4:d8:4f:74:11:5a:7e:a4:38:84:2d: f5:90:20:cc:0a:a5:31:53:c5:b5:d2:11:74:e2:40: d3:0d:94:5e:48:bd:e8:7a:aa:b3:8c:18:b0:52:1c: 3e:7d:11:34:8e:f4:99:f2:a1:da:65:15:9f:80:08: 39:23:29:46:1e:4d:f8:4c:5a:88:51:07:4a:c5:5f: 6f:59:f7:82:2e:e3:46:a1:cc:36:4a:a0:2a:39:7f: bf:53:f5:08:f7:ff:ee:d6:c2:44:5f:4d:78:fb:c0: 9f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BA:04:3B:85:8A:86:4E:25:41:9E:B4:58:E3:B0:CD:7A:C7:7E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ac49d42-bf91-3842-a904-8fbd86d18b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b6:43:0e:5f:6f:7c:b5:bb:9a:6f:fc:9c:ae:15:cb:ab:71: 59:b8:71:24:28:f4:a4:56:91:07:46:08:3d:8a:56:b8:b1:2f: 59:73:71:d9:18:d4:79:47:af:d5:36:2e:c7:8a:b2:48:55:d6: f0:ac:ba:19:2d:0e:f1:ad:fb:8a:12:54:94:30:a1:40:d2:2b: b5:5b:ad:0d:d8:f2:d7:11:27:5c:df:8f:66:f6:2a:b4:be:b1: e1:c5:1f:64:e7:68:fe:79:0a:ac:9b:eb:19:c4:08:9b:07:c8: 71:9a:15:27:b8:d4:bb:a3:98:aa:81:e1:15:db:2c:58:44:09: 62:e8:a9:69:4b:93:43:13:d5:b1:e5:e3:ed:af:bd:fc:fd:ec: c7:48:35:d6:96:1d:48:45:82:31:da:60:0d:bd:67:55:78:34: 8a:8c:4c:5b:21:25:c3:6f:0f:43:5b:70:ce:a2:8e:8b:83:98: 4a:21:c5:4e:5e:22:e3:d2:98:d6:9b:8d:94:0f:af:d9:49:3f: 2a:14:3d:bc:d0:49:32:13:32:b2:68:39:8a:fa:1f:cc:88:00: 37:71:a8:49:27:d8:95:c1:f8:b1:14:b0:38:97:70:e5:75:4d: fb:1e:b3:d9:7d:f3:79:67:88:39:a7:9f:89:8a:9a:cc:96:aa: b1:e8:c3:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9KYhAyCsdLCjbwZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTA5MDI1MVoXDTI2MTIyNDEwMDI1MVowLzEtMCsGA1UEAxMk NGYyNzdmNjAtOWVjYS00MzQyLWIxNmUtM2FhNGU5NTM3Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBujRurz4HtHR58LSwEM0ngnU0a52MrvxZRk B7PVhU4xaiCctqPvB+TEjBEDnMK3tNPqUoe8sAzu7MYAFQjch9r6zHy0lPgiTlyK dA2vN0hpqoDtAMsqvEhR3io6A1brkE1vr32xFOCxK7eLtL2N49VwRujTFwXjfXha Ny7A0Kd/A9F1H+dui07M8pt8HVrmMX8kHD5L7jZKpNhPdBFafqQ4hC31kCDMCqUx U8W10hF04kDTDZReSL3oeqqzjBiwUhw+fRE0jvSZ8qHaZRWfgAg5IylGHk34TFqI UQdKxV9vWfeCLuNGocw2SqAqOX+/U/UI9//u1sJEX014+8CfxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIy6BDuFioZOJUGetFjjsM16x35gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGFjNDlkNDItYmY5MS0z ODQyLWE5MDQtOGZiZDg2ZDE4YjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhcuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq2Qw5fb3y1u5pv/JyuFcurcVm4cSQo9KRWkQdGCD2KVrixL1lzcdkY 1HlHr9U2LseKskhV1vCsuhktDvGt+4oSVJQwoUDSK7VbrQ3Y8tcRJ1zfj2b2KrS+ seHFH2TnaP55Cqyb6xnECJsHyHGaFSe41LujmKqB4RXbLFhECWLoqWlLk0MT1bHl 4+2vvfz97MdINdaWHUhFgjHaYA29Z1V4NIqMTFshJcNvD0NbcM6ijouDmEohxU5e IuPSmNabjZQPr9lJPyoUPbzQSTITMrJoOYr6H8yIADdxqEkn2JXB+LEUsDiXcOV1 Tfses9l983lniDmnn4mKmsyWqrHow1k= -----END CERTIFICATE-----Generated at Tue Oct 13 17:32:19 2026 by rpki-client