$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac5b6f0-a954-3d72-87fe-8524a064032c.roa File: 1ac5b6f0-a954-3d72-87fe-8524a064032c.roa (raw, json) Hash identifier: ggnAMrURMno0M1miZO5u351cyXnRw+/6SDLOHkj21Cc= Subject key identifier: B8:BF:28:5F:71:79:AA:AA:22:6C:22:A4:99:C7:83:DE:25:E4:BA:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024239A9A66FCF3606226B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac5b6f0-a954-3d72-87fe-8524a064032c.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 98.16.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:39:a9:a6:6f:cf:36:06:22:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=28e80555-1a09-471a-be41-e701c52c0f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:65:d9:b6:d1:90:96:e9:41:e6:9e:90:52:61: ae:1c:84:57:79:c9:5c:c0:ff:e9:13:00:56:64:73: ea:38:a7:c2:e6:bd:57:d6:bc:e4:cb:a6:ff:8d:6d: e1:8f:ca:0c:1f:2d:fd:b4:2a:93:a6:4f:28:64:39: db:f7:2e:e1:16:db:c5:a6:b7:db:77:89:1d:15:e4: 20:27:ff:03:97:1f:ca:47:9c:68:be:24:55:15:0d: 99:c0:44:92:3b:c7:74:af:fc:6f:19:14:3c:36:c9: f5:58:a5:70:e0:ff:95:be:cc:b2:53:05:09:56:a7: 5c:b5:58:a9:bf:7e:37:22:aa:1c:61:ef:53:e8:ad: b6:db:62:17:18:e3:c2:53:2a:e2:6b:f5:cc:e3:28: 5d:ee:c1:68:1f:46:76:c3:f4:de:28:5e:c3:48:24: 3a:93:0c:ef:3a:f4:a7:c1:e9:2c:73:af:0d:72:f6: 53:2b:e4:b6:e5:f4:a6:c4:98:fb:bc:4f:79:fa:d0: 5c:ab:a0:7e:69:7e:f1:a4:04:1f:1a:8b:55:5c:da: c9:35:7a:1e:06:0e:3c:89:27:29:07:d4:0b:b6:fa: 30:66:9a:04:db:a0:ee:f5:bd:c6:d7:e1:42:bb:79: 37:98:57:39:8c:fc:53:81:ef:79:33:70:3c:88:40: eb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BF:28:5F:71:79:AA:AA:22:6C:22:A4:99:C7:83:DE:25:E4:BA:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac5b6f0-a954-3d72-87fe-8524a064032c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:4f:83:4a:2c:27:f0:29:d3:a8:27:d8:7e:0a:99:03:da:f8: 44:d8:66:62:ff:53:e1:a1:08:ec:d6:ad:14:41:86:22:dc:7d: 24:28:ed:c5:4c:d3:e3:4e:24:21:41:c8:4e:a4:73:68:4d:84: 0d:65:2c:86:c2:ed:e3:79:e0:0c:be:8e:6d:a7:56:28:cd:d6: 7a:1d:2c:2d:92:e5:6a:86:d7:31:6a:a5:cc:a2:f2:98:11:45: 93:48:a2:3f:ba:eb:cd:5b:0c:d3:82:a4:1e:95:9e:97:98:c0: e8:12:5d:70:b2:20:02:66:5a:15:79:75:a7:16:b5:93:7f:2f: 33:9d:6e:18:49:a8:f1:c5:9f:c7:d4:8a:cc:92:50:18:24:3c: 5b:32:fe:f9:d8:a9:83:b2:1b:2b:b7:7d:25:40:12:07:68:2d: c0:78:55:03:06:ab:63:06:9f:6b:95:4b:00:22:c6:40:53:57: d8:45:8e:0b:b2:fb:dc:11:70:03:4d:dd:c7:be:62:49:08:1d: 38:71:de:10:98:4b:9f:00:4a:4c:2d:cf:c6:2e:96:9a:e4:4b: 7a:dd:f7:74:9d:37:49:ef:79:43:f5:19:4e:59:b5:75:86:2f: cc:05:e4:64:9d:f3:ae:e6:71:e5:01:75:5d:f8:89:29:e3:bf: 5b:05:4f:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjmppm/PNgYia0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MjhlODA1NTUtMWEwOS00NzFhLWJlNDEtZTcwMWM1MmMwZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2XZttGQlulB5p6QUmGuHIRXeclcwP/pEwBW ZHPqOKfC5r1X1rzky6b/jW3hj8oMHy39tCqTpk8oZDnb9y7hFtvFprfbd4kdFeQg J/8Dlx/KR5xoviRVFQ2ZwESSO8d0r/xvGRQ8Nsn1WKVw4P+VvsyyUwUJVqdctVip v343IqocYe9T6K2222IXGOPCUyria/XM4yhd7sFoH0Z2w/TeKF7DSCQ6kwzvOvSn weksc68NcvZTK+S25fSmxJj7vE95+tBcq6B+aX7xpAQfGotVXNrJNXoeBg48iScp B9QLtvowZpoE26Du9b3G1+FCu3k3mFc5jPxTge95M3A8iEDrXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLi/KF9xeaqqImwipJnHg94l5LpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFjNWI2ZjAtYTk1NC0z ZDcyLTg3ZmUtODUyNGEwNjQwMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhD2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFPg0osJ/Ap06gn2H4KmQPa+ETYZmL/U+GhCOzWrRRBhiLcfSQo7cVM 0+NOJCFByE6kc2hNhA1lLIbC7eN54Ay+jm2nVijN1nodLC2S5WqG1zFqpcyi8pgR RZNIoj+6681bDNOCpB6VnpeYwOgSXXCyIAJmWhV5dacWtZN/LzOdbhhJqPHFn8fU isySUBgkPFsy/vnYqYOyGyu3fSVAEgdoLcB4VQMGq2MGn2uVSwAixkBTV9hFjguy +9wRcANN3ce+YkkIHThx3hCYS58ASkwtz8YulprkS3rd93SdN0nveUP1GU5ZtXWG L8wF5GSd867mceUBdV34iSnjv1sFT2k= -----END CERTIFICATE-----Generated at Mon Sep 28 11:20:56 2026 by rpki-client