$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3417a8a5-3dd3-3973-a4f7-9305140c3fa0.roa File: 3417a8a5-3dd3-3973-a4f7-9305140c3fa0.roa (raw, json) Hash identifier: RdxsAigb1cIGWE15WXKeoP4LHunzMJUwaxlDy7oLNkc= Subject key identifier: 36:9B:7D:A1:CD:FA:D6:B6:AC:4A:4C:56:82:B7:B9:31:24:CD:D0:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024233202BCD32668E067800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3417a8a5-3dd3-3973-a4f7-9305140c3fa0.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 98.16.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:33:20:2b:cd:32:66:8e:06:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=7c38dc41-e59b-4341-a2db-0b72a5aac381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:17:80:b7:2f:e8:b1:d2:d5:5d:2f:90:c1: c8:ed:5f:5c:4e:d8:87:03:95:4a:0b:fe:58:3c:50: 54:97:18:3f:99:8c:94:83:4b:91:17:88:2f:e9:01: cd:18:7c:87:d8:26:0b:d5:f2:b8:1a:c8:fd:42:18: a4:60:5a:2b:b8:69:a4:9f:46:45:7e:38:8e:08:81: 4e:df:1f:ef:57:a6:d2:b7:3b:85:c0:56:62:ce:4a: e9:b2:2c:d1:16:d0:ff:1a:1b:5a:c9:dd:a7:e5:3f: a2:9e:19:63:c3:c0:ca:78:8a:d5:e0:59:6d:3a:d2: 6c:17:e6:13:34:f4:60:ed:d3:b8:27:21:28:f3:b3: 38:86:f6:8a:b1:af:d2:0a:1f:69:ed:83:75:df:aa: 0b:85:14:53:db:65:f6:41:75:0e:e9:01:66:d5:c0: 44:b4:1b:d7:7d:d3:6a:52:4a:22:70:64:57:86:22: 45:6e:2f:c0:b3:68:b3:1c:28:9d:4d:e4:52:13:27: cc:f1:4f:63:bf:91:3e:26:3f:96:d3:95:2a:05:33: 03:db:40:c4:02:c0:20:e6:39:13:a5:60:db:f4:e8: 46:9c:14:1b:f3:14:75:7f:a5:c0:80:c9:3f:d2:bf: 8a:76:fb:d1:f4:c7:e9:5b:05:5c:43:dd:09:1c:22: c5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9B:7D:A1:CD:FA:D6:B6:AC:4A:4C:56:82:B7:B9:31:24:CD:D0:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3417a8a5-3dd3-3973-a4f7-9305140c3fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:82:a1:a2:3b:53:6d:65:ea:e5:3c:93:ba:b8:c8:23:f3:ae: be:9d:50:3f:d2:f6:8f:b9:35:90:7f:2c:ed:a8:eb:e3:5d:be: 9b:40:95:15:18:a6:09:d8:fe:02:b0:af:e2:63:ba:9f:16:b9: f9:5f:55:21:27:3c:a2:5e:ea:ea:aa:d7:ed:5a:23:f3:75:7f: 57:f1:a9:fa:d1:11:8e:d6:c7:1f:9b:70:7d:34:3e:15:2d:1a: bf:78:5f:ba:a2:81:3e:e5:49:25:f4:f6:34:56:91:9f:fc:c4: e7:a6:91:47:42:62:8d:4b:59:2a:78:3e:0d:93:8b:16:ad:59: 0c:7a:bc:8a:4e:be:b2:fa:58:fd:d9:c2:b3:e7:0b:3c:06:55: 5d:3c:5d:4a:a2:1e:88:89:ae:2a:58:7d:60:72:03:5f:13:c2: 66:80:bd:aa:02:bc:07:c2:0e:d8:85:78:8b:90:e9:3d:e4:5e: 45:80:b5:f5:11:67:f3:c4:a1:f7:37:d4:ad:33:17:46:8a:79: 3f:e0:50:1b:40:48:a2:e7:6b:1e:2d:07:16:eb:54:7a:fa:19: 66:75:b1:09:3d:05:dd:d8:da:e9:98:34:08:40:29:e7:33:6c: 1e:0e:2a:6a:72:4a:ed:9e:c9:4e:1f:f2:a1:68:58:80:1b:2c: 22:81:40:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjMgK80yZo4GeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk N2MzOGRjNDEtZTU5Yi00MzQxLWEyZGItMGI3MmE1YWFjMzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNcXgLcv6LHS1V0vkMHI7V9cTtiHA5VKC/5Y PFBUlxg/mYyUg0uRF4gv6QHNGHyH2CYL1fK4Gsj9QhikYForuGmkn0ZFfjiOCIFO 3x/vV6bStzuFwFZizkrpsizRFtD/Ghtayd2n5T+inhljw8DKeIrV4FltOtJsF+YT NPRg7dO4JyEo87M4hvaKsa/SCh9p7YN136oLhRRT22X2QXUO6QFm1cBEtBvXfdNq UkoicGRXhiJFbi/As2izHCidTeRSEyfM8U9jv5E+Jj+W05UqBTMD20DEAsAg5jkT pWDb9OhGnBQb8xR1f6XAgMk/0r+KdvvR9MfpWwVcQ90JHCLFVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDabfaHN+ta2rEpMVoK3uTEkzdDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzQxN2E4YTUtM2RkMy0z OTczLWE0ZjctOTMwNTE0MGMzZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhD0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiCoaI7U21l6uU8k7q4yCPzrr6dUD/S9o+5NZB/LO2o6+NdvptAlRUY pgnY/gKwr+Jjup8WuflfVSEnPKJe6uqq1+1aI/N1f1fxqfrREY7Wxx+bcH00PhUt Gr94X7qigT7lSSX09jRWkZ/8xOemkUdCYo1LWSp4Pg2TixatWQx6vIpOvrL6WP3Z wrPnCzwGVV08XUqiHoiJripYfWByA18TwmaAvaoCvAfCDtiFeIuQ6T3kXkWAtfUR Z/PEofc31K0zF0aKeT/gUBtASKLnax4tBxbrVHr6GWZ1sQk9Bd3Y2umYNAhAKecz bB4OKmpySu2eyU4f8qFoWIAbLCKBQIM= -----END CERTIFICATE-----Generated at Wed Sep 23 16:46:23 2026 by rpki-client