$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3589c91-3262-3196-ad31-24b9bfbd7415.roa File: a3589c91-3262-3196-ad31-24b9bfbd7415.roa (raw, json) Hash identifier: 28dojsEzPWJef8gBlYhKItN7lSnuNjNb89smMS/Ilto= Subject key identifier: 67:A5:F3:49:BE:B5:6D:A7:13:4F:B9:4A:50:54:9A:DF:05:BA:B8:0F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A5020F8C7188ABC3742F400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3589c91-3262-3196-ad31-24b9bfbd7415.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 98.19.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:20:f8:c7:18:8a:bc:37:42:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=1847de25-b8fd-4b1d-b929-f97ab2e06b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:38:4d:75:ad:93:23:b6:16:0c:ef:12:a8: 45:74:8b:19:f2:dc:ad:76:1b:30:2e:c3:a4:54:70: d5:ce:f7:c1:e7:21:14:f8:85:6d:8a:93:66:f7:c6: 1f:39:49:8f:50:a0:d3:aa:27:05:04:6c:37:f1:92: 8c:07:f7:da:b6:9c:0f:04:c1:61:68:2c:79:fd:eb: 5c:54:0d:1a:71:ba:4c:54:cd:80:8d:6a:99:84:64: fe:7f:b7:a2:26:00:0d:1b:8b:02:c1:15:7f:59:da: f1:15:39:75:0f:fe:80:7b:22:20:47:e6:97:71:2f: 9f:95:d6:e9:b9:00:65:bd:fd:5d:45:e3:7f:1a:4a: 16:bd:e0:8d:ac:74:c0:61:1d:db:48:8f:21:23:73: 10:75:d8:1f:74:81:c2:0c:d0:64:4e:99:37:4b:36: 1e:b3:fe:67:03:0e:93:75:e0:be:a5:64:75:7a:89: 0e:3e:3f:7d:e5:d5:af:05:80:54:99:ed:92:ea:e0: f2:7f:0b:50:91:e0:2c:ba:9b:da:d3:f2:df:10:ee: ed:a6:30:1e:32:72:0f:82:6d:ba:eb:8b:aa:90:48: e1:d9:43:7d:0b:6b:16:96:1e:fb:53:d6:f7:a0:98: bf:eb:09:ad:77:db:11:ca:99:80:22:2b:6a:0c:74: a9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A5:F3:49:BE:B5:6D:A7:13:4F:B9:4A:50:54:9A:DF:05:BA:B8:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3589c91-3262-3196-ad31-24b9bfbd7415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:52:e1:9e:a9:75:17:3c:86:14:50:a0:e1:92:98:a1:a7:ca: 6a:23:27:f0:2f:4b:65:54:19:23:6e:f8:de:c5:de:ed:51:9a: a5:c1:f5:2e:1d:63:f0:71:5c:0b:a5:80:7f:b0:72:b9:c3:04: 9d:68:80:d6:9b:37:87:1a:c3:e9:6e:67:b4:fa:4e:26:65:6a: 57:4d:08:5e:55:a0:c9:51:93:ac:4f:92:b0:1a:3e:e4:13:ba: 87:26:94:f1:4e:c7:c4:ed:89:f5:f3:ca:80:71:88:5d:13:65: d3:bd:19:80:c7:1d:a9:40:8f:3f:da:16:c9:e4:1e:71:44:eb: 13:28:77:be:6e:a3:ad:0b:29:3e:b3:d5:58:92:02:1b:6b:77: 4d:51:cb:69:bd:8d:c3:3e:81:6a:bd:6d:e2:1e:06:8d:24:9c: 9f:20:7c:b7:5b:8e:bc:3f:01:0a:a2:76:6a:b3:de:2e:94:3e: cc:9e:b5:27:b1:a1:c4:ed:c8:52:79:7d:df:53:96:78:79:5c: 69:64:da:cd:ab:5f:0b:11:f7:4e:14:88:63:40:98:6c:79:91: bb:0f:88:e4:c0:51:a1:66:fb:c7:4a:68:24:d1:3c:7b:56:99: 11:cc:f6:d6:0b:a1:36:2d:d0:6f:1d:7d:cc:7c:4f:8b:2d:a2: 20:98:b5:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UCD4xxiKvDdC9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MTg0N2RlMjUtYjhmZC00YjFkLWI5MjktZjk3YWIyZTA2YjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHM4TXWtkyO2FgzvEqhFdIsZ8tytdhswLsOk VHDVzvfB5yEU+IVtipNm98YfOUmPUKDTqicFBGw38ZKMB/fatpwPBMFhaCx5/etc VA0acbpMVM2AjWqZhGT+f7eiJgANG4sCwRV/WdrxFTl1D/6AeyIgR+aXcS+fldbp uQBlvf1dReN/GkoWveCNrHTAYR3bSI8hI3MQddgfdIHCDNBkTpk3SzYes/5nAw6T deC+pWR1eokOPj995dWvBYBUme2S6uDyfwtQkeAsupva0/LfEO7tpjAeMnIPgm26 64uqkEjh2UN9C2sWlh77U9b3oJi/6wmtd9sRypmAIitqDHSpeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGel80m+tW2nE0+5SlBUmt8FurgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTM1ODljOTEtMzI2Mi0z MTk2LWFkMzEtMjRiOWJmYmQ3NDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhO6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlS4Z6pdRc8hhRQoOGSmKGnymojJ/AvS2VUGSNu+N7F3u1RmqXB9S4d Y/BxXAulgH+wcrnDBJ1ogNabN4caw+luZ7T6TiZlaldNCF5VoMlRk6xPkrAaPuQT uocmlPFOx8TtifXzyoBxiF0TZdO9GYDHHalAjz/aFsnkHnFE6xMod75uo60LKT6z 1ViSAhtrd01Ry2m9jcM+gWq9beIeBo0knJ8gfLdbjrw/AQqidmqz3i6UPsyetSex ocTtyFJ5fd9Tlnh5XGlk2s2rXwsR904UiGNAmGx5kbsPiOTAUaFm+8dKaCTRPHtW mRHM9tYLoTYt0G8dfcx8T4stoiCYtSI= -----END CERTIFICATE-----Generated at Tue Oct 13 04:20:08 2026 by rpki-client