$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa File: ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa (raw, json) Hash identifier: PtvupES1WCDA23UinwKFxzoD79F+2gQ8olz2Q1eR/10= Subject key identifier: 63:18:6E:A9:4F:E3:AE:B9:A0:BE:95:B2:EA:BF:51:09:9C:4E:C5:DA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F655D6DB68E3878990BE1F900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 98.23.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:6d:b6:8e:38:78:99:0b:e1:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=476e1427-7cba-487b-ab06-e3e95dce292c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:1f:c3:48:d6:3f:d4:8c:c9:13:8f:e0:9e: 1b:2e:75:4e:83:58:76:76:35:6f:cc:3a:35:32:44: bf:2f:b6:9e:64:af:97:78:0c:80:fc:7b:2b:8c:ce: 82:dd:7b:83:f7:0f:af:a9:ee:55:ec:99:3d:e7:79: 8e:6b:eb:e5:ac:65:e4:fd:2e:ab:b3:51:5b:67:e7: 78:bb:9b:77:43:37:2d:1c:2e:e8:ba:e4:73:55:e4: 0e:94:5f:2b:28:4f:54:b8:d1:09:fc:b7:49:ce:74: 5f:62:8d:9f:3e:eb:02:10:1e:0c:20:a9:ba:a6:ce: 91:57:db:11:19:13:fd:a0:a9:5d:e5:cf:90:9c:84: 8d:40:d5:d8:6d:1b:34:51:5a:00:c4:e1:22:bb:1d: 93:7c:e0:da:5a:c0:f0:fb:8b:92:b8:29:9b:61:12: b8:b4:56:99:4c:a2:3d:82:80:04:fa:d9:0b:6d:9d: 03:3d:55:70:62:18:8b:0b:f6:08:03:c1:59:81:7d: a9:45:d9:f5:15:0a:07:d5:85:18:9d:c9:36:1b:88: bb:63:6c:b7:b4:a4:83:60:d6:71:04:12:16:1c:70: 61:3b:87:48:13:91:db:41:de:61:78:af:58:bb:3a: 18:80:f3:f0:9c:28:8d:11:5a:12:92:65:1a:7b:0b: e3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:18:6E:A9:4F:E3:AE:B9:A0:BE:95:B2:EA:BF:51:09:9C:4E:C5:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff7e8311-1e20-3b4a-8834-e9c3ea26dde8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:3f:e6:b7:cd:1b:70:bc:98:7e:e3:11:31:80:32:f2:b0:61: ba:9e:ba:d1:92:e1:99:3b:33:8e:16:78:0b:89:ea:19:55:90: a6:1e:d5:c3:a2:01:ba:44:76:22:31:d7:e0:b2:e7:95:7e:42: a9:97:e1:35:bc:c4:8d:6f:af:ba:ff:09:a0:cd:da:14:cb:a7: 37:78:4b:e2:c1:16:18:e2:b5:49:fc:08:09:d4:f3:26:05:f6: 9a:e3:4c:14:2f:d6:6b:5e:2d:90:65:7e:80:7a:43:1e:6f:33: 1e:d9:f0:86:ae:7a:1b:89:45:9c:14:a8:ef:38:89:03:87:ad: fe:fd:28:8a:d8:04:52:1b:75:07:a7:24:67:cc:08:aa:40:f1: ca:22:f2:8a:10:60:6e:04:3c:05:03:fd:94:2c:48:28:c3:42: 34:6c:98:9a:b1:42:bb:38:9a:21:47:56:d5:8e:cd:de:00:c1: 43:97:10:90:5b:63:7a:de:1b:fb:91:0b:30:19:12:3a:52:77: 2d:4c:c7:96:53:a6:bd:fa:db:3f:b0:70:3f:66:19:14:ed:00: 4a:cb:c4:9f:02:09:ff:2c:f8:7d:3e:82:34:53:ec:9e:e1:63: de:04:03:3e:d7:9b:a7:14:dd:90:90:1f:34:e6:6e:4d:a8:de: 4a:40:d4:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXW22jjh4mQvh+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NDc2ZTE0MjctN2NiYS00ODdiLWFiMDYtZTNlOTVkY2UyOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNkfw0jWP9SMyROP4J4bLnVOg1h2djVvzDo1 MkS/L7aeZK+XeAyA/HsrjM6C3XuD9w+vqe5V7Jk953mOa+vlrGXk/S6rs1FbZ+d4 u5t3QzctHC7ouuRzVeQOlF8rKE9UuNEJ/LdJznRfYo2fPusCEB4MIKm6ps6RV9sR GRP9oKld5c+QnISNQNXYbRs0UVoAxOEiux2TfODaWsDw+4uSuCmbYRK4tFaZTKI9 goAE+tkLbZ0DPVVwYhiLC/YIA8FZgX2pRdn1FQoH1YUYnck2G4i7Y2y3tKSDYNZx BBIWHHBhO4dIE5HbQd5heK9YuzoYgPPwnCiNEVoSkmUaewvj+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMYbqlP4665oL6Vsuq/UQmcTsXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY3ZTgzMTEtMWUyMC0z YjRhLTg4MzQtZTljM2VhMjZkZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA/5rfNG3C8mH7jETGAMvKwYbqeutGS4Zk7M44WeAuJ6hlVkKYe1cOi AbpEdiIx1+Cy55V+QqmX4TW8xI1vr7r/CaDN2hTLpzd4S+LBFhjitUn8CAnU8yYF 9prjTBQv1mteLZBlfoB6Qx5vMx7Z8IauehuJRZwUqO84iQOHrf79KIrYBFIbdQen JGfMCKpA8coi8ooQYG4EPAUD/ZQsSCjDQjRsmJqxQrs4miFHVtWOzd4AwUOXEJBb Y3reG/uRCzAZEjpSdy1Mx5ZTpr362z+wcD9mGRTtAErLxJ8CCf8s+H0+gjRT7J7h Y94EAz7Xm6cU3ZCQHzTmbk2o3kpA1HY= -----END CERTIFICATE-----Generated at Tue Oct 13 19:26:57 2026 by rpki-client