$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da7f8794-9463-328f-a91a-ec4f3a08adc6.roa File: da7f8794-9463-328f-a91a-ec4f3a08adc6.roa (raw, json) Hash identifier: +9njxWzzxNNn0YHhWa4keI7rsCH7WjAQBsRN9bRpYxE= Subject key identifier: CD:E7:5B:7F:DB:D2:65:8A:5F:D4:5B:B0:58:F2:FB:70:C0:CB:C8:68 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F3A17D8965D3848B5BE843E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da7f8794-9463-328f-a91a-ec4f3a08adc6.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 98.19.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d8:96:5d:38:48:b5:be:84:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=10bee1a3-7179-4b36-9066-3323539af6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:7c:f4:df:cc:ff:4e:96:d6:1f:94:c5:e0: a6:0b:f2:bf:5a:71:66:97:44:ea:e3:22:5d:da:16: 4e:79:16:77:68:27:0e:4e:cd:c8:df:81:d4:f8:6f: ac:08:7e:f0:dd:1a:54:94:20:0a:68:86:ea:5f:99: 70:96:96:3b:e8:cd:e6:e1:f2:c0:c3:ed:a3:ab:6f: 34:19:43:d3:1b:01:0b:8f:8f:a8:e5:f7:0f:0e:69: 86:18:e1:64:dd:f9:e4:c6:bb:17:f9:c3:f7:1f:05: e1:59:61:12:5f:73:12:a4:c0:46:48:ac:9e:75:cd: f0:06:81:65:69:cd:9c:8d:8c:6a:94:a6:e3:fa:42: 01:83:6f:94:0f:69:9e:aa:1e:33:5a:8d:5e:eb:58: 9f:ca:77:02:75:23:0a:6c:47:f5:f7:3e:e5:f5:73: e8:9a:0a:54:c2:b0:e3:3a:4d:a7:a2:38:b1:88:a5: 0c:b4:89:9f:cc:94:8a:77:97:0c:db:ec:4d:1f:40: 69:75:0b:35:2c:cd:22:bf:8e:55:af:4a:7b:86:4e: 06:25:4f:12:93:72:28:79:b0:9f:07:73:a9:fb:bc: f1:74:fa:e2:b5:dd:04:ad:24:3d:27:e0:da:eb:ff: 64:6c:21:8a:8d:33:bf:19:c2:56:66:17:4d:92:63: 42:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E7:5B:7F:DB:D2:65:8A:5F:D4:5B:B0:58:F2:FB:70:C0:CB:C8:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da7f8794-9463-328f-a91a-ec4f3a08adc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e4:a4:b9:51:de:42:e6:dd:0e:d7:40:c9:3b:99:54:ca:98: cd:a9:86:ea:d9:05:41:59:d7:b9:4a:da:16:b8:7c:97:52:39: 08:0b:a0:50:23:02:85:8f:4b:d1:8e:33:30:bc:2f:01:69:d6: f8:42:53:6b:c8:07:38:c0:83:e7:63:88:63:08:e9:b6:b6:cf: 08:f2:85:47:7e:4d:2b:15:be:60:e9:d4:44:34:31:9d:12:cc: a9:d0:31:1d:e1:bf:b7:97:e5:92:a1:5a:0e:e7:43:2a:79:02: a8:c0:c8:20:b7:0b:cf:c8:8c:2b:70:ce:55:c5:69:53:d4:de: 18:cf:8f:78:3b:15:57:b3:de:30:fd:0c:12:bb:05:d7:fe:10: 31:9e:7c:7c:aa:58:f9:a0:e7:2b:e3:16:a9:5f:ab:a9:70:f9: b9:bd:0d:74:86:e7:cc:bd:08:f4:53:16:cc:7b:d4:b4:f9:96: 13:ed:4e:1c:b7:25:2b:47:a9:f6:0e:28:d8:d3:cc:15:1b:12: 60:62:73:aa:a3:8f:a9:2a:a6:80:8c:59:b2:48:e2:46:ef:91: 17:7b:f7:d1:17:59:c9:28:c6:13:35:7c:0e:e9:df:ce:66:80: 06:f6:87:95:89:d3:68:a2:a1:93:07:5e:74:41:24:49:87:73: da:b8:ab:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9iWXThItb6EPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MTBiZWUxYTMtNzE3OS00YjM2LTkwNjYtMzMyMzUzOWFmNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNh89N/M/06W1h+UxeCmC/K/WnFml0Tq4yJd 2hZOeRZ3aCcOTs3I34HU+G+sCH7w3RpUlCAKaIbqX5lwlpY76M3m4fLAw+2jq280 GUPTGwELj4+o5fcPDmmGGOFk3fnkxrsX+cP3HwXhWWESX3MSpMBGSKyedc3wBoFl ac2cjYxqlKbj+kIBg2+UD2meqh4zWo1e61ifyncCdSMKbEf19z7l9XPomgpUwrDj Ok2nojixiKUMtImfzJSKd5cM2+xNH0BpdQs1LM0iv45Vr0p7hk4GJU8Sk3IoebCf B3Op+7zxdPritd0ErSQ9J+Da6/9kbCGKjTO/GcJWZhdNkmNCMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3nW3/b0mWKX9RbsFjy+3DAy8hoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGE3Zjg3OTQtOTQ2My0z MjhmLWE5MWEtZWM0ZjNhMDhhZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhMKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzkpLlR3kLm3Q7XQMk7mVTKmM2phurZBUFZ17lK2ha4fJdSOQgLoFAj AoWPS9GOMzC8LwFp1vhCU2vIBzjAg+djiGMI6ba2zwjyhUd+TSsVvmDp1EQ0MZ0S zKnQMR3hv7eX5ZKhWg7nQyp5AqjAyCC3C8/IjCtwzlXFaVPU3hjPj3g7FVez3jD9 DBK7Bdf+EDGefHyqWPmg5yvjFqlfq6lw+bm9DXSG58y9CPRTFsx71LT5lhPtThy3 JStHqfYOKNjTzBUbEmBic6qjj6kqpoCMWbJI4kbvkRd799EXWckoxhM1fA7p385m gAb2h5WJ02iioZMHXnRBJEmHc9q4q30= -----END CERTIFICATE-----Generated at Sun Sep 20 15:43:12 2026 by rpki-client