$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa File: bf629dc2-f852-3d47-a607-0e222991c7a9.roa (raw, json) Hash identifier: NEsHWVprscM4W/6pW4huA2K0NwKVJnV7GUdkB8zcLfQ= Subject key identifier: 39:3A:F6:58:47:5A:B9:D6:25:A6:78:98:9E:C1:C0:F7:C6:88:78:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED43255A5C3C26A59FF7ED8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 98.17.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:55:a5:c3:c2:6a:59:ff:7e:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=0b5567dc-d706-4baf-92b5-9c92e5154c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2d:78:e3:8d:46:f8:2b:47:36:65:c7:28:35: 84:75:39:cf:65:8a:b8:ea:a9:94:5e:0c:b1:b6:8e: 0f:99:1e:11:73:14:f3:f8:f3:c0:74:3a:46:f9:6e: 18:83:6f:f7:5b:ea:df:05:f5:11:66:8e:fa:4a:16: 07:5b:81:49:5b:94:91:1f:a6:a8:a8:3c:d3:7c:1c: 3b:cf:38:95:a1:d3:1b:d9:e1:20:39:92:dc:39:0c: 80:37:c8:38:48:6e:49:22:3c:f4:50:9c:84:3d:e6: 73:33:f8:f0:6a:aa:9a:3a:8a:17:9c:fa:c3:d6:6a: 84:ea:c2:65:0d:c0:a2:99:bc:b5:4f:6a:2e:da:b0: c3:0c:10:6e:14:01:dc:83:d3:b2:9b:f0:c0:20:e4: c3:73:fa:37:de:39:e2:fe:0f:f9:b6:56:61:ea:1e: 4c:9b:c2:97:76:53:7c:f6:40:6c:b2:da:98:1c:4f: 1d:4d:ba:23:9c:af:dd:8d:ff:aa:58:77:66:d2:51: a5:96:47:3a:f4:8f:40:ea:43:d3:99:47:f6:73:5b: e3:16:c3:ff:50:9f:d2:bb:80:eb:c7:9c:02:f5:05: 2b:11:f5:fe:ef:7a:b0:26:44:75:ae:ed:e3:b3:24: 2b:86:09:81:c8:0f:7d:4b:a7:3c:74:15:62:f2:fc: 38:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3A:F6:58:47:5A:B9:D6:25:A6:78:98:9E:C1:C0:F7:C6:88:78:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6a:70:1f:96:23:ca:cc:fe:8d:28:5f:85:f3:b0:61:6b:e1: ff:fd:03:71:e1:7a:fb:05:f9:be:3a:57:55:2e:5d:6f:01:80: 2d:ec:56:a6:76:e7:27:de:69:7e:c0:60:89:ff:be:a7:68:f0: 58:69:49:2b:1a:ef:bd:e7:d2:68:06:8d:9d:fe:c4:9c:83:7d: 92:05:d6:a0:52:92:96:33:0c:4f:b7:de:15:47:cf:e1:e7:bd: f3:36:87:4c:2f:30:38:71:7c:c5:e3:01:2c:92:49:e5:48:b9: 81:16:eb:a1:ab:1f:a8:4f:e0:0e:98:8d:88:2c:33:30:6c:19: b3:16:4a:fb:55:61:86:5e:10:fb:95:88:5c:5e:d8:b8:ca:08: d1:00:66:bc:47:51:d3:85:c8:1d:e7:1a:08:98:97:41:56:4a: 18:5d:75:99:2a:b1:b1:ff:f9:cf:4e:ce:1c:85:88:04:60:08: 68:f6:fc:83:bc:25:e9:33:d4:29:45:14:b4:77:b3:bf:12:0c: 37:13:87:9e:f4:25:bb:0a:7b:ce:79:91:26:00:bf:08:35:61: 55:91:1c:71:d9:4b:1a:95:6d:2e:8d:0c:60:65:6d:66:d3:22: b4:72:ad:d6:93:09:a5:f1:ef:1e:a2:27:c0:65:a7:f8:86:90: ec:17:29:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlWlw8JqWf9+2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk MGI1NTY3ZGMtZDcwNi00YmFmLTkyYjUtOWM5MmU1MTU0YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y14441G+CtHNmXHKDWEdTnPZYq46qmUXgyx to4PmR4RcxTz+PPAdDpG+W4Yg2/3W+rfBfURZo76ShYHW4FJW5SRH6aoqDzTfBw7 zziVodMb2eEgOZLcOQyAN8g4SG5JIjz0UJyEPeZzM/jwaqqaOooXnPrD1mqE6sJl DcCimby1T2ou2rDDDBBuFAHcg9Oym/DAIOTDc/o33jni/g/5tlZh6h5Mm8KXdlN8 9kBsstqYHE8dTbojnK/djf+qWHdm0lGllkc69I9A6kPTmUf2c1vjFsP/UJ/Su4Dr x5wC9QUrEfX+73qwJkR1ru3jsyQrhgmByA99S6c8dBVi8vw49QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk69lhHWrnWJaZ4mJ7BwPfGiHjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmY2MjlkYzItZjg1Mi0z ZDQ3LWE2MDctMGUyMjI5OTFjN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtqcB+WI8rM/o0oX4XzsGFr4f/9A3HhevsF+b46V1UuXW8BgC3sVqZ2 5yfeaX7AYIn/vqdo8FhpSSsa773n0mgGjZ3+xJyDfZIF1qBSkpYzDE+33hVHz+Hn vfM2h0wvMDhxfMXjASySSeVIuYEW66GrH6hP4A6YjYgsMzBsGbMWSvtVYYZeEPuV iFxe2LjKCNEAZrxHUdOFyB3nGgiYl0FWShhddZkqsbH/+c9OzhyFiARgCGj2/IO8 Jekz1ClFFLR3s78SDDcTh570JbsKe855kSYAvwg1YVWRHHHZSxqVbS6NDGBlbWbT IrRyrdaTCaXx7x6iJ8Blp/iGkOwXKQQ= -----END CERTIFICATE-----Generated at Thu Aug 27 11:37:51 2026 by rpki-client