$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eae51cf2-e93c-3a1e-bc73-967ebaf3da32.roa File: eae51cf2-e93c-3a1e-bc73-967ebaf3da32.roa (raw, json) Hash identifier: OH1MyLO9jDb8YcHXJ0cWDEHwyE32Ni3TwIg0xrxaBFs= Subject key identifier: A1:DB:D7:8C:CC:FF:4C:33:AE:49:8F:5E:F7:E5:A9:16:A5:F7:AE:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F12EABAF66A4452C51D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eae51cf2-e93c-3a1e-bc73-967ebaf3da32.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.17.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:12:ea:ba:f6:6a:44:52:c5:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=55cfce68-65ab-4c31-b700-319fe20e051f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:0b:58:8d:84:f1:c3:ac:b8:0d:77:44:75: f6:90:ee:df:c2:34:cb:93:d8:5b:db:d2:f5:88:aa: 8d:a1:1b:d1:ae:4b:80:9a:7d:c7:d4:24:43:05:07: c3:bd:d8:53:83:86:eb:00:92:52:24:23:02:c7:a4: a3:61:5d:64:85:b3:bf:7e:b8:97:c6:0b:15:04:b7: 95:99:1a:40:ff:0b:b2:6b:dd:32:2d:7d:76:9e:cb: 84:a1:58:e4:37:ed:a7:78:55:80:86:05:d3:ce:1a: a3:d4:78:98:44:d8:a2:c0:7f:74:ba:8a:ed:0c:d0: c8:e7:c2:b4:e6:46:8b:d3:3c:6d:fb:ce:51:00:f2: 27:9a:7a:98:f7:22:0e:f7:fa:d2:d9:b9:cd:89:7d: ae:b0:ac:43:6f:c6:b6:2d:3a:ec:a9:b5:26:4b:c4: 59:67:af:98:35:69:60:c8:a6:9a:09:1e:fe:4f:e8: 56:7e:c8:35:7c:1e:0f:97:24:ac:ff:ad:60:a3:35: 11:60:ad:b0:28:8f:d3:ed:01:5d:93:77:78:94:f4: 33:9f:87:bd:f9:1d:d9:62:b3:fd:e9:22:a5:b2:13: 9e:83:ed:bb:c2:3d:f9:05:6e:c3:c5:57:14:1a:96: 88:7e:c8:25:66:d1:6c:b4:3b:b7:f7:b1:f1:4a:09: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DB:D7:8C:CC:FF:4C:33:AE:49:8F:5E:F7:E5:A9:16:A5:F7:AE:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eae51cf2-e93c-3a1e-bc73-967ebaf3da32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a0:12:da:41:a8:63:d2:c7:06:8a:0c:de:e4:62:33:73:46: 36:f0:7d:80:b7:8f:b0:24:b8:2d:f7:b0:f2:8b:16:ea:9d:22: bf:ff:21:1a:03:6c:af:30:54:2e:eb:e9:1b:7d:53:df:a3:71: ff:54:33:7a:97:11:fe:08:1a:6b:14:e5:4c:0d:fa:a2:44:46: 0c:d2:59:a7:cf:3e:9f:f4:63:ac:b1:92:51:33:59:71:ae:cd: 64:2a:f6:5d:fb:9f:4e:20:60:3c:37:06:7f:25:91:69:14:51: 94:ef:51:4f:ec:07:5f:da:f4:31:04:1b:76:91:a9:6e:79:62: 74:97:11:b5:5e:a3:b8:1e:1c:1a:09:bd:6f:79:ab:52:88:a5: 2a:f6:ab:a3:ff:53:5b:06:9a:06:0e:3a:f4:9b:a8:68:c6:08: 4b:63:04:77:db:75:13:7c:6d:ed:f8:5a:2e:c0:b7:41:f7:ba: f5:d8:d8:81:37:f1:93:c2:05:94:f4:b5:2d:2c:a8:e9:95:12: d1:c2:83:dc:68:c7:4e:d9:a3:76:42:f3:56:62:02:04:13:49: 52:c1:27:96:e8:21:dd:41:f4:83:19:de:be:68:c8:7f:32:96: 2e:e2:c9:de:d4:1e:f7:97:93:03:a0:3d:fd:be:e8:f4:78:a0: bf:d4:a2:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfxLquvZqRFLFHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTVjZmNlNjgtNjVhYi00YzMxLWI3MDAtMzE5ZmUyMGUwNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG8LWI2E8cOsuA13RHX2kO7fwjTLk9hb29L1 iKqNoRvRrkuAmn3H1CRDBQfDvdhTg4brAJJSJCMCx6SjYV1khbO/friXxgsVBLeV mRpA/wuya90yLX12nsuEoVjkN+2neFWAhgXTzhqj1HiYRNiiwH90uortDNDI58K0 5kaL0zxt+85RAPInmnqY9yIO9/rS2bnNiX2usKxDb8a2LTrsqbUmS8RZZ6+YNWlg yKaaCR7+T+hWfsg1fB4PlySs/61gozURYK2wKI/T7QFdk3d4lPQzn4e9+R3ZYrP9 6SKlshOeg+27wj35BW7DxVcUGpaIfsglZtFstDu397HxSglCUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHb14zM/0wzrkmPXvflqRal965/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWFlNTFjZjItZTkzYy0z YTFlLWJjNzMtOTY3ZWJhZjNkYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGigEtpBqGPSxwaKDN7kYjNzRjbwfYC3j7AkuC33sPKLFuqdIr//IRoD bK8wVC7r6Rt9U9+jcf9UM3qXEf4IGmsU5UwN+qJERgzSWafPPp/0Y6yxklEzWXGu zWQq9l37n04gYDw3Bn8lkWkUUZTvUU/sB1/a9DEEG3aRqW55YnSXEbVeo7geHBoJ vW95q1KIpSr2q6P/U1sGmgYOOvSbqGjGCEtjBHfbdRN8be34Wi7At0H3uvXY2IE3 8ZPCBZT0tS0sqOmVEtHCg9xox07Zo3ZC81ZiAgQTSVLBJ5boId1B9IMZ3r5oyH8y li7iyd7UHveXkwOgPf2+6PR4oL/UolA= -----END CERTIFICATE-----Generated at Wed Oct 14 11:52:20 2026 by rpki-client