$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c364ae6-3895-3f91-8e07-b33e2bbd7d81.roa File: 1c364ae6-3895-3f91-8e07-b33e2bbd7d81.roa (raw, json) Hash identifier: mTPTSPnnZ4A05fyqo03aEOErwnWsS7/E25opzq8lnZ0= Subject key identifier: 53:09:31:66:7A:67:4D:58:19:6B:9F:BB:02:A2:0A:12:BB:2C:0E:FA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D6327C30E66D3DD593A30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c364ae6-3895-3f91-8e07-b33e2bbd7d81.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 98.17.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:63:27:c3:0e:66:d3:dd:59:3a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=a31ec279-9020-4ea4-bc8a-f89c84406d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:37:3a:57:c9:3f:b3:97:d6:ce:6d:c5:95:19: 16:43:ee:56:c8:e9:cb:04:b1:bb:85:89:e9:d0:d8: 70:56:5c:29:4b:cd:06:4e:e4:04:09:f2:46:ee:4e: 34:b6:36:da:76:10:7e:6e:ae:fb:96:79:0a:f4:e5: 45:8e:d9:97:40:03:d2:1c:9c:36:e7:f7:ef:32:3b: b4:54:9f:9f:01:3d:5a:3e:50:03:9f:90:7d:b7:81: 78:4d:52:15:6d:ee:b9:a8:e2:61:99:b7:e1:5c:57: 03:62:05:fb:a8:16:62:81:17:f8:76:07:dd:73:7f: dc:46:d8:98:0d:cd:3e:4b:05:0c:86:40:ef:d9:4c: f2:9d:9f:1d:6d:ed:03:0d:72:03:a6:fd:42:3e:d7: a7:94:8d:1a:16:53:1a:7e:cd:3d:32:ea:14:58:02: 5a:3d:c8:6b:10:74:37:6f:e0:81:15:52:f0:19:7c: 7d:39:46:7e:a2:49:e3:59:04:e6:de:8a:48:93:69: c0:f1:da:21:4f:d7:38:23:67:c8:09:3a:9b:d0:ae: 1a:cd:7c:b2:9e:9c:71:02:b7:d4:ad:0f:7f:5b:7e: cf:22:3b:2b:71:56:b5:90:36:8e:59:13:11:37:35: 7e:42:ff:51:ad:d6:27:40:ff:48:18:7a:d0:5c:23: 05:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:09:31:66:7A:67:4D:58:19:6B:9F:BB:02:A2:0A:12:BB:2C:0E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c364ae6-3895-3f91-8e07-b33e2bbd7d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ff:f6:b5:f4:e0:e6:76:02:ca:29:56:a8:2f:9e:46:ad:e5: b6:74:a8:d5:2e:87:d9:fd:f7:e4:39:f8:4c:34:b7:3b:66:1e: 9e:d4:fe:b5:4d:a8:52:16:d4:04:7d:d4:92:9d:28:d8:e8:4a: 2e:77:d7:a7:1f:8d:22:98:16:e4:39:b5:31:f1:21:99:b7:34: 25:27:5e:09:b4:2f:f2:23:19:a8:60:a4:47:7a:56:84:31:9a: 01:10:35:17:c3:14:0b:b1:0f:30:39:60:c0:9a:7b:b2:b3:37: 8c:66:5a:94:2e:06:45:4f:c6:53:8b:36:c5:a2:ed:e0:b3:a2: e9:13:fe:ef:f0:3b:a5:1d:33:af:c2:ee:6c:c6:7b:28:17:d1: 8e:41:bf:db:12:02:56:ef:aa:90:08:a9:45:4d:84:0d:f7:92: 4d:c1:7a:2b:b0:cc:b8:6e:0d:6c:c4:d7:28:9f:a6:79:5d:13: ef:61:e1:d0:c5:81:4e:cb:8b:a0:e9:cd:7b:92:08:4e:b5:1b: 88:6e:e7:27:64:08:5d:d0:04:35:c9:d7:89:c2:3c:b5:ae:3d: 8a:56:43:30:46:dd:ef:30:6d:ea:65:24:6b:54:a4:e0:b2:58: c5:37:b3:7d:85:08:a7:3e:03:44:0a:0f:8e:ec:57:92:e0:c3: 45:2c:6e:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWMnww5m091ZOjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YTMxZWMyNzktOTAyMC00ZWE0LWJjOGEtZjg5Yzg0NDA2ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTc6V8k/s5fWzm3FlRkWQ+5WyOnLBLG7hYnp 0NhwVlwpS80GTuQECfJG7k40tjbadhB+bq77lnkK9OVFjtmXQAPSHJw25/fvMju0 VJ+fAT1aPlADn5B9t4F4TVIVbe65qOJhmbfhXFcDYgX7qBZigRf4dgfdc3/cRtiY Dc0+SwUMhkDv2UzynZ8dbe0DDXIDpv1CPtenlI0aFlMafs09MuoUWAJaPchrEHQ3 b+CBFVLwGXx9OUZ+oknjWQTm3opIk2nA8dohT9c4I2fICTqb0K4azXyynpxxArfU rQ9/W37PIjsrcVa1kDaOWRMRNzV+Qv9RrdYnQP9IGHrQXCMF3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMJMWZ6Z01YGWufuwKiChK7LA76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMzNjRhZTYtMzg5NS0z ZjkxLThlMDctYjMzZTJiYmQ3ZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn/9rX04OZ2AsopVqgvnkat5bZ0qNUuh9n99+Q5+Ew0tztmHp7U/rVN qFIW1AR91JKdKNjoSi5316cfjSKYFuQ5tTHxIZm3NCUnXgm0L/IjGahgpEd6VoQx mgEQNRfDFAuxDzA5YMCae7KzN4xmWpQuBkVPxlOLNsWi7eCzoukT/u/wO6UdM6/C 7mzGeygX0Y5Bv9sSAlbvqpAIqUVNhA33kk3BeiuwzLhuDWzE1yifpnldE+9h4dDF gU7Li6DpzXuSCE61G4hu5ydkCF3QBDXJ14nCPLWuPYpWQzBG3e8wbeplJGtUpOCy WMU3s32FCKc+A0QKD47sV5Lgw0Usbmk= -----END CERTIFICATE-----Generated at Mon Sep 28 14:56:14 2026 by rpki-client