$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa File: c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa (raw, json) Hash identifier: BYJ+A6GIbKYEirhX0MFK+czAGxp562nxTP8dqQiHdDg= Subject key identifier: 3E:2D:EC:B7:09:30:1F:26:92:62:91:40:46:2A:5C:7A:1A:F8:88:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49861EBE4812F2D8E61CCE20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.22.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:1e:be:48:12:f2:d8:e6:1c:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6f98e051-8187-4788-a0b1-17ceedac5e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fd:7e:40:78:95:8b:d9:6a:c0:76:e0:0b:e0: 0d:4a:bb:05:ec:c6:4b:be:43:b0:09:34:55:0c:41: dc:9a:ab:c1:67:4e:56:fe:5f:52:d0:93:68:0c:cc: 2d:09:a0:46:a3:05:55:7a:c6:35:e9:7e:e6:33:ae: 45:51:c6:9c:e8:4d:90:85:9e:b9:d6:1a:5e:a5:dc: 7b:34:fc:e1:88:4f:82:27:2e:ad:3c:3c:09:49:e6: 11:fd:ad:9d:25:aa:f8:0c:8c:77:65:49:52:b4:19: 21:9a:d9:a6:51:8a:1f:be:92:71:dd:2b:29:85:a9: 42:3a:94:f8:ad:86:ed:67:60:1c:d4:69:4f:f8:57: f9:3c:05:ab:c0:7f:3a:cd:08:a0:da:af:ad:30:4c: 31:2d:03:14:3d:44:39:a4:b5:dc:25:85:94:cc:2c: c1:0f:36:9c:a5:06:26:8f:c1:74:76:c5:9f:b6:c9: 4f:b1:28:4b:40:28:e3:f6:a6:7a:88:3f:cf:79:8c: 70:a4:12:9c:32:5b:2c:9b:57:ba:91:7a:85:5d:20: 52:70:5d:35:63:47:3e:5d:0d:6f:be:aa:d2:4a:6d: d6:6c:0b:3f:21:c5:e6:a5:f1:21:4a:4d:2a:b0:26: fe:22:4c:0b:4f:ee:02:36:cc:a0:52:17:c2:d6:dc: 95:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2D:EC:B7:09:30:1F:26:92:62:91:40:46:2A:5C:7A:1A:F8:88:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:cb:59:49:e2:80:d9:ae:21:6e:e0:a0:22:d2:0d:5d:85:32: 09:60:0b:3c:0b:64:00:56:a5:61:d3:de:90:12:2a:4a:cb:bb: 69:55:f8:f6:2a:81:75:7d:1c:11:83:34:ab:a9:3a:10:53:de: c7:70:34:a3:3a:3a:4e:82:12:f8:1b:82:90:ec:9e:8e:69:af: fa:90:87:cb:5c:66:06:ad:aa:f2:bf:a1:e6:a6:30:c1:38:2a: dc:b8:fb:7e:e5:c9:c1:bb:c2:bb:ad:2b:4b:6d:30:70:0c:30: 99:6d:72:b3:4d:f6:9c:c1:33:65:59:2d:7e:fd:c0:86:ea:d9: 99:66:63:5e:be:f1:b5:a5:df:1b:18:ce:8e:46:11:eb:b6:7c: 57:56:e9:79:e0:5b:1f:d7:0e:ed:96:96:d4:09:6d:c6:e9:2c: f4:0a:b3:eb:57:f2:ca:8c:68:40:3b:ba:38:c3:4c:b6:cd:bb: e5:21:cf:fa:f9:c0:90:6e:36:0b:c8:d7:ab:96:01:d8:e3:de: 0b:b0:77:b4:21:a9:92:71:7b:c3:22:a6:e5:23:f0:42:67:25: fe:24:fd:1c:f3:ca:5d:85:86:72:6e:e3:11:ae:c7:7c:12:ef: a1:a2:be:e4:6a:a0:2d:bd:54:47:0b:b5:cd:1e:a7:c9:e4:15: 2b:52:f6:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhh6+SBLy2OYcziAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmY5OGUwNTEtODE4Ny00Nzg4LWEwYjEtMTdjZWVkYWM1ZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv1+QHiVi9lqwHbgC+ANSrsF7MZLvkOwCTRV DEHcmqvBZ05W/l9S0JNoDMwtCaBGowVVesY16X7mM65FUcac6E2QhZ651hpepdx7 NPzhiE+CJy6tPDwJSeYR/a2dJar4DIx3ZUlStBkhmtmmUYofvpJx3SsphalCOpT4 rYbtZ2Ac1GlP+Ff5PAWrwH86zQig2q+tMEwxLQMUPUQ5pLXcJYWUzCzBDzacpQYm j8F0dsWftslPsShLQCjj9qZ6iD/PeYxwpBKcMlssm1e6kXqFXSBScF01Y0c+XQ1v vqrSSm3WbAs/IcXmpfEhSk0qsCb+IkwLT+4CNsygUhfC1tyVAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4t7LcJMB8mkmKRQEYqXHoa+IiLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzljMzA0MWYtYjRlMC0z NTk4LTg4ZTgtNmFhMGJmNzQ0MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHLWUnigNmuIW7goCLSDV2FMglgCzwLZABWpWHT3pASKkrLu2lV+PYq gXV9HBGDNKupOhBT3sdwNKM6Ok6CEvgbgpDsno5pr/qQh8tcZgatqvK/oeamMME4 Kty4+37lycG7wrutK0ttMHAMMJltcrNN9pzBM2VZLX79wIbq2ZlmY16+8bWl3xsY zo5GEeu2fFdW6XngWx/XDu2WltQJbcbpLPQKs+tX8sqMaEA7ujjDTLbNu+Uhz/r5 wJBuNgvI16uWAdjj3guwd7QhqZJxe8MipuUj8EJnJf4k/Rzzyl2FhnJu4xGux3wS 76GivuRqoC29VEcLtc0ep8nkFStS9uA= -----END CERTIFICATE-----Generated at Tue Oct 13 17:45:46 2026 by rpki-client