$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fddfcf9c-16cf-3885-b0de-a829dadb1d0b.roa File: fddfcf9c-16cf-3885-b0de-a829dadb1d0b.roa (raw, json) Hash identifier: YY8bEgFA+EoYAYcYG00PZ9Pj63xD6cuJEJQAsV3mGbs= Subject key identifier: E1:CA:98:57:FC:AE:DA:98:DE:0B:F7:CC:4F:3F:AF:3B:EA:9C:C3:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F0ED244147FF734A7568FD700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fddfcf9c-16cf-3885-b0de-a829dadb1d0b.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.19.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:44:14:7f:f7:34:a7:56:8f:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=84e3114a-8d86-4ab4-8a9e-5ddf9f6a3c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:12:a9:bc:b4:40:41:6c:26:11:b1:e8:fb: 7c:3a:81:8a:aa:92:0b:ae:ce:db:bd:f8:e0:81:51: 35:97:db:29:28:be:51:d7:16:b8:e3:5f:45:ab:cd: 94:75:33:6d:97:f0:f6:44:e0:33:0f:7a:17:33:53: c9:83:76:20:5e:57:41:71:c1:66:a5:b4:9a:43:64: 2a:f5:c9:f8:41:e5:d5:c5:fc:78:0f:ff:1e:73:62: 9c:86:e5:58:81:cd:5c:df:09:8f:33:59:f2:5b:9a: 0c:31:00:99:ab:07:9f:f5:da:53:1f:39:db:32:e5: 31:9f:b0:d2:02:66:e4:af:46:1a:bd:11:05:ad:90: e7:b5:a9:80:4f:93:94:48:54:4a:61:7e:e5:b1:23: c0:2c:b4:4b:34:cf:1a:52:50:a0:ba:8f:45:a4:3e: 1f:f0:0f:c5:85:43:8a:76:e7:fd:e6:c2:dd:87:ac: 84:8f:92:02:69:da:52:77:5b:3d:65:9b:23:65:c0: 8d:60:7c:50:5b:7f:0d:4c:1b:ac:3c:7d:15:19:46: 81:8d:16:b3:49:a5:6f:8d:3f:eb:ca:cb:20:a1:2b: 9e:bb:d7:44:2b:91:7c:e5:19:62:38:8c:63:70:14: 10:70:14:0a:aa:a0:1b:ea:0e:52:e5:47:d1:67:86: 98:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CA:98:57:FC:AE:DA:98:DE:0B:F7:CC:4F:3F:AF:3B:EA:9C:C3:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fddfcf9c-16cf-3885-b0de-a829dadb1d0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:93:e6:9d:47:c5:e1:61:2b:c1:dd:fd:74:6c:fa:3e:45:88: 95:a4:02:ec:fe:48:60:27:6c:b8:64:52:3e:0f:e7:f0:a3:49: 09:46:2c:20:b3:c0:a4:ad:12:87:95:18:68:20:72:bc:a5:a7: ad:f4:23:e3:ee:6e:f1:f6:a6:31:35:c5:75:10:fb:10:c8:b5: 12:ec:8d:af:89:69:e5:63:0d:e5:91:8e:42:9e:d8:15:4b:3c: 8b:df:6f:cb:77:ac:19:17:1f:59:cd:9c:c0:6d:46:84:dd:32: 34:f1:05:fa:06:68:7b:4e:b9:a6:26:88:bd:56:bd:36:e9:5f: 6d:98:27:dd:74:49:50:cf:9a:31:1f:ab:5d:d4:85:1d:a8:26: d7:b8:30:0a:5a:25:f3:0d:91:2b:74:98:79:70:ba:5c:7d:da: 0e:6b:fa:b5:81:04:e3:0b:68:cc:b2:c0:39:b9:7f:46:2e:29: fe:bb:ed:15:68:8c:4a:fb:16:df:28:49:bf:f1:f1:68:70:09: da:0a:8a:c2:1c:a0:71:f2:c6:f5:76:94:ae:cc:d2:ab:fc:e7: 11:13:52:32:1a:1d:ad:98:db:2e:93:f6:c9:a4:d6:e0:11:a5: 9f:16:dd:a9:f6:9c:0b:33:ff:01:d8:0b:79:7f:0d:ec:83:4e: d1:14:69:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0kQUf/c0p1aP1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ODRlMzExNGEtOGQ4Ni00YWI0LThhOWUtNWRkZjlmNmEzYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov0Sqby0QEFsJhGx6Pt8OoGKqpILrs7bvfjg gVE1l9spKL5R1xa4419Fq82UdTNtl/D2ROAzD3oXM1PJg3YgXldBccFmpbSaQ2Qq 9cn4QeXVxfx4D/8ec2KchuVYgc1c3wmPM1nyW5oMMQCZqwef9dpTHznbMuUxn7DS Ambkr0YavREFrZDntamAT5OUSFRKYX7lsSPALLRLNM8aUlCguo9FpD4f8A/FhUOK duf95sLdh6yEj5ICadpSd1s9ZZsjZcCNYHxQW38NTBusPH0VGUaBjRazSaVvjT/r yssgoSueu9dEK5F85RliOIxjcBQQcBQKqqAb6g5S5UfRZ4aYKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHKmFf8rtqY3gv3zE8/rzvqnMPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmRkZmNmOWMtMTZjZi0z ODg1LWIwZGUtYTgyOWRhZGIxZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiT5p1HxeFhK8Hd/XRs+j5FiJWkAuz+SGAnbLhkUj4P5/CjSQlGLCCz wKStEoeVGGggcrylp630I+PubvH2pjE1xXUQ+xDItRLsja+JaeVjDeWRjkKe2BVL PIvfb8t3rBkXH1nNnMBtRoTdMjTxBfoGaHtOuaYmiL1WvTbpX22YJ910SVDPmjEf q13UhR2oJte4MApaJfMNkSt0mHlwulx92g5r+rWBBOMLaMyywDm5f0YuKf677RVo jEr7Ft8oSb/x8WhwCdoKisIcoHHyxvV2lK7M0qv85xETUjIaHa2Y2y6T9smk1uAR pZ8W3an2nAsz/wHYC3l/DeyDTtEUaRk= -----END CERTIFICATE-----Generated at Sun Sep 20 17:13:36 2026 by rpki-client