$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baed1b7e-1e45-3e0a-95c0-37feb57a0000.roa File: baed1b7e-1e45-3e0a-95c0-37feb57a0000.roa (raw, json) Hash identifier: /s+mqq9A8aZ7gTwpFY8NFAlJNeRT6OCx/J4VmBDVFV4= Subject key identifier: 19:7B:CF:8C:E6:F3:A9:EA:93:27:94:8E:C5:0A:B8:C5:E8:11:49:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6292C7B89CACD48E6EE8E700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baed1b7e-1e45-3e0a-95c0-37feb57a0000.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 98.17.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:c7:b8:9c:ac:d4:8e:6e:e8:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=7f44c3e9-c2af-4e9c-b41f-adb9245c2e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:11:0c:c9:1b:4f:90:a4:58:1b:ec:14:a7:e2: 10:37:a4:54:01:23:2e:93:cc:ad:f9:1c:fb:6a:c2: e4:bf:d8:8c:f9:4a:43:73:3e:fb:c6:bb:98:40:38: 2b:39:ea:cb:cf:b3:d2:29:09:39:ea:9f:50:63:83: b8:57:7b:2e:d3:20:0e:fb:6f:70:ca:5e:6c:8e:f1: 0a:7c:24:f7:ab:93:60:49:cd:16:b8:52:9e:5c:87: 01:dc:1c:1f:a8:b4:99:1c:4a:88:9d:58:b2:f6:e7: a8:59:7b:54:01:a8:2e:22:84:fe:70:3e:3b:63:1d: a5:c2:f5:0b:07:c6:71:c1:c8:cf:3f:74:1a:01:1b: 34:2d:5d:69:81:37:05:9f:ee:8c:44:c8:77:b1:5f: 66:13:6e:b2:7a:bf:24:48:ed:4c:3e:35:25:f9:79: cb:d9:84:ab:f5:3c:79:70:1c:e3:ca:67:1a:2e:27: 5c:4a:3e:c5:cb:62:69:68:62:24:75:53:47:e8:29: 7b:b4:fa:11:86:67:6a:d1:03:fd:d4:1f:23:3d:a7: 5b:4d:72:bd:40:40:59:99:bf:b9:1a:4d:07:44:fd: 1f:84:9d:2f:e3:7f:01:ca:c2:d7:81:17:bc:28:5d: 1b:16:5f:80:56:4d:7d:6c:05:de:25:b6:b6:2c:df: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7B:CF:8C:E6:F3:A9:EA:93:27:94:8E:C5:0A:B8:C5:E8:11:49:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baed1b7e-1e45-3e0a-95c0-37feb57a0000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:5e:e3:10:23:31:55:a8:eb:5a:27:1c:5f:ca:4c:02:e2:0f: f0:a1:ec:b6:2c:f8:dd:a2:47:10:1f:1d:bc:25:14:4f:dc:c9: 23:86:bb:ce:67:46:ed:75:c0:66:78:b5:d8:0f:9b:9b:87:2d: 4a:00:2b:7d:4a:30:fb:2b:0e:f7:d8:64:48:1c:1b:40:1f:c5: e9:e3:83:95:6e:31:98:50:da:03:66:60:4c:25:d5:8c:fe:00: 7b:e0:02:9b:ef:23:7e:00:93:c3:9e:b2:7d:87:bd:a2:e4:ce: ac:f2:3b:76:0f:3a:10:47:f2:eb:db:8e:25:dd:3a:4d:5a:a8: 4c:9f:39:ae:a8:be:b8:cc:19:bf:b9:93:9d:38:67:79:ed:00: 2b:c3:32:ec:ee:ac:0f:5c:23:6e:56:5a:ff:97:b5:99:7b:64: c4:70:55:55:43:f3:e0:cb:85:7b:79:54:5b:e4:da:e7:e7:60: c2:cb:3a:d1:73:66:e2:22:01:7f:2b:27:47:3a:f6:d0:a5:45: 2d:e6:55:b3:2a:a0:7a:c8:d4:b6:bd:90:29:dc:42:6f:f6:f8: 45:10:44:82:f0:e9:0e:95:ec:1d:41:c1:90:f9:38:d7:ed:d2: ee:a1:1c:22:cb:a8:77:ed:a4:9b:9d:43:ff:50:9e:f6:e7:a7: 50:e8:2c:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikse4nKzUjm7o5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk N2Y0NGMzZTktYzJhZi00ZTljLWI0MWYtYWRiOTI0NWMyZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxEMyRtPkKRYG+wUp+IQN6RUASMuk8yt+Rz7 asLkv9iM+UpDcz77xruYQDgrOerLz7PSKQk56p9QY4O4V3su0yAO+29wyl5sjvEK fCT3q5NgSc0WuFKeXIcB3BwfqLSZHEqInViy9ueoWXtUAaguIoT+cD47Yx2lwvUL B8ZxwcjPP3QaARs0LV1pgTcFn+6MRMh3sV9mE26yer8kSO1MPjUl+XnL2YSr9Tx5 cBzjymcaLidcSj7Fy2JpaGIkdVNH6Cl7tPoRhmdq0QP91B8jPadbTXK9QEBZmb+5 Gk0HRP0fhJ0v438BysLXgRe8KF0bFl+AVk19bAXeJba2LN+1IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBl7z4zm86nqkyeUjsUKuMXoEUkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmFlZDFiN2UtMWU0NS0z ZTBhLTk1YzAtMzdmZWI1N2EwMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHte4xAjMVWo61onHF/KTALiD/Ch7LYs+N2iRxAfHbwlFE/cySOGu85n Ru11wGZ4tdgPm5uHLUoAK31KMPsrDvfYZEgcG0Afxenjg5VuMZhQ2gNmYEwl1Yz+ AHvgApvvI34Ak8Oesn2HvaLkzqzyO3YPOhBH8uvbjiXdOk1aqEyfOa6ovrjMGb+5 k504Z3ntACvDMuzurA9cI25WWv+XtZl7ZMRwVVVD8+DLhXt5VFvk2ufnYMLLOtFz ZuIiAX8rJ0c69tClRS3mVbMqoHrI1La9kCncQm/2+EUQRILw6Q6V7B1BwZD5ONft 0u6hHCLLqHftpJudQ/9Qnvbnp1DoLKw= -----END CERTIFICATE-----Generated at Tue Oct 13 18:38:57 2026 by rpki-client