$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa File: 942824f6-6070-3132-8cee-ad290f982789.roa (raw, json) Hash identifier: /RVQj1nTZclmjlJ5Oopaz4uiCmVk1wJaeTRMb72/YC4= Subject key identifier: 41:9E:64:32:F2:28:7D:C3:C8:A1:89:61:07:E6:07:4E:E8:7B:06:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F02423904E1D527C4FB132E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 98.17.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:39:04:e1:d5:27:c4:fb:13:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=a54e0804-4639-464c-a645-0c98950b242d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:81:ad:07:95:91:ce:cb:f1:49:45:74:19:50: aa:11:6a:69:b3:f2:00:d1:79:ec:0c:cb:24:2d:6b: 86:fd:d6:b6:16:33:63:32:e8:cd:5b:54:f6:db:a7: df:53:77:37:21:68:cb:f2:1b:f1:c9:03:c1:a4:df: 5c:9f:27:8a:d0:a7:69:42:ec:ef:94:ba:cd:ce:b4: 4d:71:c2:04:c2:75:21:8b:7a:a8:b6:2f:b9:d4:90: 23:20:bd:39:0e:d4:38:2c:ff:c6:f1:ce:e1:c4:6b: a6:49:a6:62:9c:36:ab:c2:94:b7:04:7f:81:7f:ef: 7e:56:c9:2c:d9:04:4d:5f:ff:a2:54:4c:8d:f5:55: 48:dc:13:b8:f4:d6:39:40:21:c8:aa:53:0a:86:74: bf:9f:fc:ad:77:0c:64:a4:1a:f6:07:f3:a7:60:14: 9d:78:d9:51:43:32:d9:ba:4f:39:0c:38:f8:fc:e4: a5:b3:a7:88:4a:54:37:b2:85:47:88:b0:7e:23:76: e7:53:f3:d8:88:27:fb:5c:df:45:e0:a2:9a:6d:ac: 7d:31:98:92:1f:27:78:b9:5c:ab:5c:fd:15:59:af: fb:eb:20:25:08:43:17:bc:98:83:46:67:5e:74:a0: 2d:6a:9f:c5:f9:7c:05:bb:94:a5:03:cd:f9:91:16: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9E:64:32:F2:28:7D:C3:C8:A1:89:61:07:E6:07:4E:E8:7B:06:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6b:d7:e7:b4:62:86:bf:cb:83:7d:8a:51:60:9e:0c:c8:d5: d0:55:eb:3a:b3:fe:58:e1:6e:fd:91:82:0d:b6:36:f6:75:09: b6:35:f9:7e:a0:ca:9a:84:9a:12:ad:54:a3:1d:66:47:ca:a5: a6:90:13:26:2b:15:ff:ac:79:1e:67:26:31:01:43:ee:89:06: af:ac:dc:df:5d:c7:c2:b5:f0:6e:c2:a0:19:6d:a1:11:fe:bc: c8:b4:d6:0c:13:34:b8:b7:ac:e9:43:cc:b4:e3:8a:ae:2b:7a: 2c:bf:23:43:07:5b:9b:b6:70:bf:87:6d:8a:66:d8:bf:a3:4f: 24:19:18:91:f3:7f:42:59:26:ab:12:47:07:19:93:b4:74:fd: 6c:b6:08:7f:fe:e1:fc:a1:f1:03:09:99:6e:6b:74:aa:f3:aa: 00:34:7f:d5:0b:04:76:c2:73:ae:6f:78:e7:71:5a:32:05:52: 9a:e1:bb:3d:9e:af:5a:5e:cb:55:75:47:2b:27:86:4c:e4:2d: 2d:19:83:4d:62:d9:07:15:ea:f2:57:e1:dd:a3:8d:df:8d:db: 4e:46:50:ed:50:ce:fd:3e:8d:40:20:e4:f4:7c:51:ee:fd:58: 1e:d4:f2:ae:7d:37:60:5f:c1:18:cc:45:42:fd:7c:19:1f:e2: 48:7f:8e:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjkE4dUnxPsTLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YTU0ZTA4MDQtNDYzOS00NjRjLWE2NDUtMGM5ODk1MGIyNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioGtB5WRzsvxSUV0GVCqEWpps/IA0XnsDMsk LWuG/da2FjNjMujNW1T226ffU3c3IWjL8hvxyQPBpN9cnyeK0KdpQuzvlLrNzrRN ccIEwnUhi3qoti+51JAjIL05DtQ4LP/G8c7hxGumSaZinDarwpS3BH+Bf+9+Vsks 2QRNX/+iVEyN9VVI3BO49NY5QCHIqlMKhnS/n/ytdwxkpBr2B/OnYBSdeNlRQzLZ uk85DDj4/OSls6eISlQ3soVHiLB+I3bnU/PYiCf7XN9F4KKabax9MZiSHyd4uVyr XP0VWa/76yAlCEMXvJiDRmdedKAtap/F+XwFu5SlA835kRaQpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGeZDLyKH3DyKGJYQfmB07oewaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQyODI0ZjYtNjA3MC0z MTMyLThjZWUtYWQyOTBmOTgyNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFr1+e0Yoa/y4N9ilFgngzI1dBV6zqz/ljhbv2Rgg22NvZ1CbY1+X6g ypqEmhKtVKMdZkfKpaaQEyYrFf+seR5nJjEBQ+6JBq+s3N9dx8K18G7CoBltoRH+ vMi01gwTNLi3rOlDzLTjiq4reiy/I0MHW5u2cL+HbYpm2L+jTyQZGJHzf0JZJqsS RwcZk7R0/Wy2CH/+4fyh8QMJmW5rdKrzqgA0f9ULBHbCc65veOdxWjIFUprhuz2e r1pey1V1RysnhkzkLS0Zg01i2QcV6vJX4d2jjd+N205GUO1Qzv0+jUAg5PR8Ue79 WB7U8q59N2BfwRjMRUL9fBkf4kh/jh0= -----END CERTIFICATE-----Generated at Sat Oct 10 14:08:15 2026 by rpki-client