$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa File: f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa (raw, json) Hash identifier: nDhXEkeZO9MXtnvNlw8K+cVb+dKEJZahf+OBTQHuVdc= Subject key identifier: D0:99:8C:E2:8E:C7:DE:7F:40:5B:2D:B0:3F:06:6B:6C:32:A4:CC:68 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D656FA57D791B9E351680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 98.23.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:65:6f:a5:7d:79:1b:9e:35:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=27df0d3c-3dad-47df-aa08-cdfd9698f06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:fe:c3:b5:64:64:9b:be:ff:ab:69:75:1e: 78:7f:fb:e3:d3:6a:4b:4e:3e:a1:92:5e:a9:9f:b9: 5f:32:ab:e9:4d:58:6d:7f:69:64:83:e1:1c:8d:93: d8:65:30:fe:ea:88:10:e4:82:14:f7:ad:ae:ed:28: ba:2f:35:bf:ba:ef:64:2c:60:43:d3:4b:6f:0a:27: a5:a8:6a:34:56:8e:3d:5e:b7:e0:8c:77:fb:c7:d8: 14:85:11:1d:19:35:38:4f:cf:0e:98:ed:05:ec:de: e6:bd:52:1d:8b:82:01:31:4a:9a:64:9f:ce:e1:2d: 64:f4:96:fa:a3:b4:39:ca:44:66:8b:a0:57:a2:bc: df:6e:b0:58:1c:2c:db:59:5f:da:27:bf:86:98:9a: ae:a4:39:12:74:8c:cc:21:f9:ae:c8:ed:12:49:18: d7:29:6a:9c:8f:53:4c:a7:cb:1c:3c:af:2c:9c:82: 67:c6:f5:86:9c:6f:e0:07:78:83:71:a6:ba:5a:df: e2:2c:f3:a1:bc:48:e6:3a:1b:e4:78:0a:6e:9b:a7: 02:17:b1:b0:e7:28:e7:ff:6c:2f:ff:fb:ca:31:6d: de:4d:fc:c0:b2:28:ed:9d:46:1a:4b:ae:6a:0c:67: 4f:19:2f:db:51:ce:8a:75:7a:07:81:2e:dd:b7:9d: 10:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:99:8C:E2:8E:C7:DE:7F:40:5B:2D:B0:3F:06:6B:6C:32:A4:CC:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3b8aabe-e27d-3480-8e72-5b9f969bc8d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:2b:ca:d3:8f:79:4b:9c:e0:20:35:95:50:c0:10:cf:e9:d3: 92:a7:b1:f2:18:e4:80:a4:1f:af:0d:5f:68:c3:b7:ec:0c:41: 3a:ec:0a:df:74:38:e9:eb:dd:cd:75:c9:ae:cd:87:64:b2:5e: ec:25:f1:49:a5:db:06:3f:d8:93:92:2b:29:7d:d4:a9:bf:80: ff:ef:7f:00:a9:0d:50:61:68:e1:85:ec:42:17:ac:cc:d0:74: 4d:15:e9:c2:a1:e5:74:aa:ca:0f:e8:06:fd:ad:ee:94:bb:8c: f2:f0:5b:d9:c3:04:b9:0d:4f:a9:eb:31:f5:fe:d2:6f:a5:ae: 0d:7c:76:73:5b:d0:c5:7d:f6:8b:83:d2:a4:1b:6a:32:51:6e: 49:21:cc:3f:1e:9e:1b:33:04:35:6d:a1:c9:8e:16:8e:0f:04: 15:de:0c:5b:90:5d:78:2c:db:8f:86:4f:7b:b0:f7:a7:90:3f: 94:d7:7b:53:bd:99:20:48:23:d5:bd:4c:66:f5:77:d2:65:b7: dc:ac:1d:64:92:6a:94:19:b1:90:d0:b0:4b:7f:88:70:52:b2: b7:87:19:5d:0c:16:51:ab:d1:97:00:c0:38:37:0e:82:f5:90: 9d:dc:ca:98:dd:29:3c:01:36:17:7b:a9:66:67:c9:9d:e5:df: 54:d6:57:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWVvpX15G541FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MjdkZjBkM2MtM2RhZC00N2RmLWFhMDgtY2RmZDk2OThmMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZr+w7VkZJu+/6tpdR54f/vj02pLTj6hkl6p n7lfMqvpTVhtf2lkg+EcjZPYZTD+6ogQ5IIU962u7Si6LzW/uu9kLGBD00tvCiel qGo0Vo49XrfgjHf7x9gUhREdGTU4T88OmO0F7N7mvVIdi4IBMUqaZJ/O4S1k9Jb6 o7Q5ykRmi6BXorzfbrBYHCzbWV/aJ7+GmJqupDkSdIzMIfmuyO0SSRjXKWqcj1NM p8scPK8snIJnxvWGnG/gB3iDcaa6Wt/iLPOhvEjmOhvkeApum6cCF7Gw5yjn/2wv //vKMW3eTfzAsijtnUYaS65qDGdPGS/bUc6KdXoHgS7dt50QIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCZjOKOx95/QFstsD8Ga2wypMxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjNiOGFhYmUtZTI3ZC0z NDgwLThlNzItNWI5Zjk2OWJjOGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYheAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4rytOPeUuc4CA1lVDAEM/p05KnsfIY5ICkH68NX2jDt+wMQTrsCt90 OOnr3c11ya7Nh2SyXuwl8Uml2wY/2JOSKyl91Km/gP/vfwCpDVBhaOGF7EIXrMzQ dE0V6cKh5XSqyg/oBv2t7pS7jPLwW9nDBLkNT6nrMfX+0m+lrg18dnNb0MV99ouD 0qQbajJRbkkhzD8enhszBDVtocmOFo4PBBXeDFuQXXgs24+GT3uw96eQP5TXe1O9 mSBII9W9TGb1d9Jlt9ysHWSSapQZsZDQsEt/iHBSsreHGV0MFlGr0ZcAwDg3DoL1 kJ3cypjdKTwBNhd7qWZnyZ3l31TWV9w= -----END CERTIFICATE-----Generated at Wed Oct 14 10:04:25 2026 by rpki-client