$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa File: 0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa (raw, json) Hash identifier: iypXJlOqFtGch6Yk8Qx3EvbHyQeSpnyUKDKS+T4Gc8M= Subject key identifier: 8C:42:20:FF:5F:FC:4F:92:7F:95:5B:F1:06:F2:E2:EF:64:A2:06:3E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F62CE06E67F9D8E85D800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.22.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:62:ce:06:e6:7f:9d:8e:85:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0ca51ecd-2596-436a-a433-6d4f247c5aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:35:d2:ff:61:c8:8e:76:3b:64:5e:4e:06:79: 47:f6:3d:f6:3a:33:ec:68:4a:9f:2b:4e:d5:38:2d: 31:8f:91:38:af:87:c1:26:d8:f4:6e:c5:1e:11:98: 27:3e:84:c3:8a:d9:d7:3f:27:03:89:e7:53:8e:06: 25:68:4a:5d:2c:c0:90:76:6d:38:4b:38:64:80:d8: 10:5f:d2:8e:68:85:e0:83:06:70:03:30:bf:42:7e: a0:96:0c:9b:2b:ba:8f:8e:cd:c6:c0:dc:10:30:a3: 9f:bf:48:37:77:64:33:20:8f:64:21:66:84:d6:68: 7a:8e:a1:cc:a2:28:6c:8e:0b:06:b6:d1:31:2f:b2: a4:fa:20:48:ce:24:f5:9c:ac:e3:e2:ca:70:20:b4: 0b:56:ef:d0:4c:a2:00:96:3f:53:50:ce:9a:a7:9c: 0c:5f:ad:68:40:ad:27:26:f9:79:5e:70:cb:3d:47: 49:94:5b:38:88:16:c6:3a:39:70:54:b2:a1:68:af: ff:e6:12:f5:25:22:e0:2f:17:ab:5c:11:b0:95:ce: 41:f9:23:f4:98:5b:ae:f9:f6:99:5b:cc:88:4e:57: 55:8d:73:12:b0:1b:7f:de:48:17:73:b7:4e:8e:d4: 7f:c4:67:5b:97:7f:dd:8c:0e:22:f8:54:a2:ea:53: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:42:20:FF:5F:FC:4F:92:7F:95:5B:F1:06:F2:E2:EF:64:A2:06:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e6:c2:81:e6:6d:1b:67:a7:b4:b9:78:ca:46:84:2b:c2:fa: 9c:9d:23:29:a6:ba:13:b7:00:4b:63:7d:4f:a9:97:e6:34:46: a8:ef:59:91:84:e8:16:ae:67:c6:07:fc:d6:92:6f:ac:b4:14: 5a:0b:04:84:29:42:0a:f3:66:41:fe:ba:fc:f7:74:01:d8:1c: 1f:1a:b3:81:7b:23:9d:13:88:40:30:49:4b:ed:3d:47:c3:cd: e4:32:55:78:c0:ca:cc:e8:c8:66:6a:82:fe:69:cc:57:4a:ef: b3:75:7d:b2:ae:04:55:c8:6e:aa:33:96:d3:98:e3:f1:86:39: 22:e7:50:24:5a:d9:f4:90:e2:1a:31:69:2f:b5:37:20:66:e0: 18:ad:6e:5c:46:bb:b7:c8:fc:f3:45:05:2e:9c:52:74:c7:2b: d3:9b:5b:a5:0a:6c:99:4a:33:05:9f:a3:c3:0f:0f:d4:f3:ad: 78:01:b9:9d:01:07:4c:8b:31:4e:01:a5:34:b6:46:f0:73:77: 29:0f:bf:a9:56:97:ab:97:65:93:d9:b5:d7:f6:9c:44:7f:74: d5:e8:94:67:1a:c5:3f:ce:2b:e1:e3:59:22:71:0b:2e:2a:b1: 53:e0:b4:14:e9:f4:72:68:cd:79:10:d2:a7:d2:95:e7:7e:d6: 14:d0:4e:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf2LOBuZ/nY6F2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGNhNTFlY2QtMjU5Ni00MzZhLWE0MzMtNmQ0ZjI0N2M1YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjXS/2HIjnY7ZF5OBnlH9j32OjPsaEqfK07V OC0xj5E4r4fBJtj0bsUeEZgnPoTDitnXPycDiedTjgYlaEpdLMCQdm04SzhkgNgQ X9KOaIXggwZwAzC/Qn6glgybK7qPjs3GwNwQMKOfv0g3d2QzII9kIWaE1mh6jqHM oihsjgsGttExL7Kk+iBIziT1nKzj4spwILQLVu/QTKIAlj9TUM6ap5wMX61oQK0n Jvl5XnDLPUdJlFs4iBbGOjlwVLKhaK//5hL1JSLgLxerXBGwlc5B+SP0mFuu+faZ W8yITldVjXMSsBt/3kgXc7dOjtR/xGdbl3/djA4i+FSi6lNRwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxCIP9f/E+Sf5Vb8Qby4u9kogY+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGQ5MDMzYWQtN2ZiNS0z YjIwLTg2MTQtOGYyNGFkYzY5YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7mwoHmbRtnp7S5eMpGhCvC+pydIymmuhO3AEtjfU+pl+Y0RqjvWZGE 6BauZ8YH/NaSb6y0FFoLBIQpQgrzZkH+uvz3dAHYHB8as4F7I50TiEAwSUvtPUfD zeQyVXjAyszoyGZqgv5pzFdK77N1fbKuBFXIbqozltOY4/GGOSLnUCRa2fSQ4hox aS+1NyBm4BitblxGu7fI/PNFBS6cUnTHK9ObW6UKbJlKMwWfo8MPD9TzrXgBuZ0B B0yLMU4BpTS2RvBzdykPv6lWl6uXZZPZtdf2nER/dNXolGcaxT/OK+HjWSJxCy4q sVPgtBTp9HJozXkQ0qfSled+1hTQTpY= -----END CERTIFICATE-----Generated at Sun Sep 27 04:21:35 2026 by rpki-client