$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa File: d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa (raw, json) Hash identifier: 4istIHyCxGrdrlni+m9R3vA1JYlojUzvby+BIRnCKLM= Subject key identifier: 27:0F:44:F9:B8:85:D3:A9:3D:6E:9E:45:B0:8F:A7:C0:E2:85:03:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F549D7DE94A9BDFB2010A7260 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 54142 IP address blocks: 98.16.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:7d:e9:4a:9b:df:b2:01:0a:72:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=93cb543b-abbe-4428-b3d8-32e53ec95dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:b4:7a:b1:15:b5:ec:98:9d:ef:f1:9e:15: f0:fc:ea:84:e2:4b:be:af:8a:df:c2:61:14:1b:f4: da:99:dd:8e:9f:f9:b8:d7:60:41:40:d9:cb:f3:d2: 55:38:63:93:f6:0f:a8:46:bf:f6:f5:23:d1:bd:cb: 7a:24:54:f9:66:6d:8c:54:48:17:10:09:7b:05:db: 83:cf:bc:fb:0d:4a:ce:47:98:15:36:7d:02:9e:9d: ce:71:da:a1:82:e3:e9:f5:22:e4:a4:62:36:43:ac: ab:5b:5f:88:b4:45:47:d7:cd:5b:e7:1c:c7:42:75: 8e:87:a5:f9:be:5b:95:15:d7:bd:b6:ee:bc:45:69: f0:2a:91:88:88:07:8e:f4:fc:47:53:6f:90:d1:4d: a4:4b:5b:f0:cd:d3:46:5e:e4:3a:21:06:a2:2c:59: 6d:b5:9b:9d:db:6e:db:17:00:d8:ac:6c:39:2d:30: a5:9f:37:d2:63:65:e8:2b:11:17:74:f4:bb:3d:e8: 36:39:14:be:d2:02:64:af:6e:b1:a8:39:60:f1:d3: 51:37:d6:99:73:ba:38:1e:81:f9:69:75:04:7d:13: 3f:1d:91:11:5d:fe:96:8f:a5:c8:2c:0d:ba:eb:72: c3:18:c2:ab:ba:68:e1:1f:fe:65:fa:30:6f:0a:b3: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0F:44:F9:B8:85:D3:A9:3D:6E:9E:45:B0:8F:A7:C0:E2:85:03:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b9:a5:0a:c6:42:1e:aa:f8:6d:a8:fd:47:ab:55:9b:1a:6d: ed:aa:4c:9f:d8:b2:64:2a:0a:93:d5:a6:9e:a7:28:1e:a8:e6: 66:19:2c:4f:4f:a3:e4:fc:82:ca:e7:df:b8:42:56:15:84:46: b1:3d:bc:4a:a9:38:24:a6:1d:c5:4b:37:b6:0b:ec:2a:6a:ae: 7a:78:5f:c0:66:f4:56:f0:06:cd:e3:6d:b7:07:26:45:fe:57: 65:9b:dd:9c:93:3c:d1:c3:61:c2:22:f6:e7:9f:33:03:e1:30: 23:52:d3:21:1f:cb:6d:44:ce:4b:20:8b:2d:b6:46:c7:a3:30: b1:b1:01:e3:03:48:8e:31:35:2e:ab:7e:19:fd:79:58:c2:39: e1:de:5a:e8:99:62:59:50:b9:82:1f:b0:91:44:75:a7:f6:c7: 27:82:0c:64:de:8d:b9:0b:c4:78:78:c1:69:06:60:2b:7c:2f: 6e:04:f4:66:82:47:d2:1b:69:84:f3:9c:b8:67:7d:18:2b:94: 3b:35:69:af:00:05:90:fb:c5:37:87:72:34:c4:83:64:e5:9e: dd:33:50:e0:0e:5a:68:84:93:e3:25:ac:b0:30:e8:b5:e2:a8: 3c:71:7a:59:77:ca:b8:e1:d1:e5:7c:2c:c4:7e:f4:53:37:4f: 4c:07:79:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnX3pSpvfsgEKcmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OTNjYjU0M2ItYWJiZS00NDI4LWIzZDgtMzJlNTNlYzk1ZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LK0erEVteyYne/xnhXw/OqE4ku+r4rfwmEU G/Tamd2On/m412BBQNnL89JVOGOT9g+oRr/29SPRvct6JFT5Zm2MVEgXEAl7BduD z7z7DUrOR5gVNn0Cnp3OcdqhguPp9SLkpGI2Q6yrW1+ItEVH181b5xzHQnWOh6X5 vluVFde9tu68RWnwKpGIiAeO9PxHU2+Q0U2kS1vwzdNGXuQ6IQaiLFlttZud227b FwDYrGw5LTClnzfSY2XoKxEXdPS7Peg2ORS+0gJkr26xqDlg8dNRN9aZc7o4HoH5 aXUEfRM/HZERXf6Wj6XILA2663LDGMKrumjhH/5l+jBvCrPOeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcPRPm4hdOpPW6eRbCPp8DihQOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDljZjllOWQtNDVhNS0z YzQxLWE2NTQtOTYwNDI4Y2MyZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC5pQrGQh6q+G2o/UerVZsabe2qTJ/YsmQqCpPVpp6nKB6o5mYZLE9P o+T8gsrn37hCVhWERrE9vEqpOCSmHcVLN7YL7Cpqrnp4X8Bm9FbwBs3jbbcHJkX+ V2Wb3ZyTPNHDYcIi9uefMwPhMCNS0yEfy21Ezksgiy22RsejMLGxAeMDSI4xNS6r fhn9eVjCOeHeWuiZYllQuYIfsJFEdaf2xyeCDGTejbkLxHh4wWkGYCt8L24E9GaC R9IbaYTznLhnfRgrlDs1aa8ABZD7xTeHcjTEg2Tlnt0zUOAOWmiEk+MlrLAw6LXi qDxxell3yrjh0eV8LMR+9FM3T0wHeZI= -----END CERTIFICATE-----Generated at Tue Oct 13 17:37:59 2026 by rpki-client