$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48119c5-6c01-35c3-86e6-f94bca5d5b27.roa File: a48119c5-6c01-35c3-86e6-f94bca5d5b27.roa (raw, json) Hash identifier: 5PhF/LXC4MjcrHZS3MDMCsw6saVT9yGcAsf4V+odXZs= Subject key identifier: 25:DB:2D:E8:C1:93:75:87:52:59:CA:D6:46:62:61:22:ED:4C:FA:B0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D5CD527F6FC0CAC03C100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48119c5-6c01-35c3-86e6-f94bca5d5b27.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.23.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5c:d5:27:f6:fc:0c:ac:03:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=9b0c0484-a214-4178-ae44-7bd00ae056d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1c:31:20:e6:66:0b:3f:b9:41:85:30:26:1f: 6c:1a:b0:73:f6:32:db:16:5c:de:b4:6b:80:51:10: c3:1a:da:6f:08:2c:16:ce:c6:9b:30:13:78:30:89: e1:cc:36:a3:60:33:60:16:91:5d:5a:9f:ea:a4:7e: b0:c5:85:7b:08:3a:16:0b:2d:43:85:9f:ed:9d:5e: f5:9a:02:55:4f:e2:e2:8f:24:50:9f:cd:1a:5f:f8: 31:bc:72:c1:7e:77:68:e2:80:29:8c:b8:7a:ed:f8: 84:c9:ed:9c:90:5c:c5:8f:4f:71:6a:cf:4e:7e:ea: 4b:e0:99:fb:94:cb:80:fd:9e:3b:81:a4:c6:c0:f9: ad:51:e9:6f:fd:d0:50:0e:1d:0a:47:a8:95:3c:d0: 8c:ad:42:42:07:95:da:22:23:e3:01:4a:fe:57:c8: 1a:f5:17:27:f0:e5:ec:41:29:68:0c:06:9d:ce:8e: 65:ed:88:93:a6:b9:d3:06:d6:54:2a:87:4e:db:88: ef:8a:59:0c:cf:20:1d:17:a6:89:f2:aa:f8:c5:84: 8c:33:0d:f7:6d:30:58:b4:ed:62:95:3d:c7:5c:1b: cb:b8:7c:32:1f:72:5a:06:22:5b:c9:b0:8e:f4:64: 36:07:dc:cc:42:20:61:7c:45:85:33:f6:e9:68:68: b0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DB:2D:E8:C1:93:75:87:52:59:CA:D6:46:62:61:22:ED:4C:FA:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48119c5-6c01-35c3-86e6-f94bca5d5b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3f:c3:1f:43:c9:91:12:f7:94:f4:18:43:0e:8f:15:9d:db: df:71:66:36:4c:89:b1:8f:30:70:42:6f:a2:21:28:d1:f8:d8: b3:5c:f4:cf:b0:53:93:fe:aa:b1:d1:d3:b9:0c:08:e0:35:62: bd:f8:28:40:6d:64:ce:e2:07:15:9c:f0:e1:7c:21:57:dc:e9: 66:70:50:df:46:da:cc:39:22:d1:c8:91:e5:5c:22:05:30:2c: 50:45:21:fa:a7:4e:00:29:ea:07:34:78:f2:1e:71:e4:62:73: aa:93:9e:e0:71:68:05:f0:3e:1f:74:86:3a:aa:6f:11:a3:ca: 4d:2e:89:4a:fa:b7:71:75:d3:03:fe:27:5d:60:79:89:ac:2d: 22:88:4b:95:9f:19:e3:85:40:00:0e:4f:6b:a3:10:7c:5d:00: 70:e1:b9:a2:51:c9:0a:b7:1d:7e:a3:6a:f2:d8:33:10:a0:ac: 99:de:2d:f1:d0:eb:83:e3:1d:f2:8f:82:ec:7e:d8:7e:a0:94: 27:e9:19:7e:dc:05:49:f9:1e:7b:a8:cc:0c:0b:5e:4c:20:b3: 07:10:0f:61:00:46:da:0f:14:eb:1d:af:a4:80:92:ba:9e:d7: 94:70:cd:99:2f:bc:d1:09:39:56:a7:d6:73:0c:58:d5:12:e1: 50:2b:34:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVzVJ/b8DKwDwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OWIwYzA0ODQtYTIxNC00MTc4LWFlNDQtN2JkMDBhZTA1NmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhwxIOZmCz+5QYUwJh9sGrBz9jLbFlzetGuA URDDGtpvCCwWzsabMBN4MInhzDajYDNgFpFdWp/qpH6wxYV7CDoWCy1DhZ/tnV71 mgJVT+LijyRQn80aX/gxvHLBfndo4oApjLh67fiEye2ckFzFj09xas9OfupL4Jn7 lMuA/Z47gaTGwPmtUelv/dBQDh0KR6iVPNCMrUJCB5XaIiPjAUr+V8ga9Rcn8OXs QSloDAadzo5l7YiTprnTBtZUKodO24jvilkMzyAdF6aJ8qr4xYSMMw33bTBYtO1i lT3HXBvLuHwyH3JaBiJbybCO9GQ2B9zMQiBhfEWFM/bpaGiw9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXbLejBk3WHUlnK1kZiYSLtTPqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQ4MTE5YzUtNmMwMS0z NWMzLTg2ZTYtZjk0YmNhNWQ1YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc/wx9DyZES95T0GEMOjxWd299xZjZMibGPMHBCb6IhKNH42LNc9M+w U5P+qrHR07kMCOA1Yr34KEBtZM7iBxWc8OF8IVfc6WZwUN9G2sw5ItHIkeVcIgUw LFBFIfqnTgAp6gc0ePIeceRic6qTnuBxaAXwPh90hjqqbxGjyk0uiUr6t3F10wP+ J11geYmsLSKIS5WfGeOFQAAOT2ujEHxdAHDhuaJRyQq3HX6javLYMxCgrJneLfHQ 64PjHfKPgux+2H6glCfpGX7cBUn5HnuozAwLXkwgswcQD2EARtoPFOsdr6SAkrqe 15RwzZkvvNEJOVan1nMMWNUS4VArNDM= -----END CERTIFICATE-----Generated at Tue Oct 13 04:21:09 2026 by rpki-client