$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46dba63c-df94-396a-93ca-51922f2b5065.roa File: 46dba63c-df94-396a-93ca-51922f2b5065.roa (raw, json) Hash identifier: b2Lz1els59tJCCBJLGRw4kDm3QpMcQOdihky4hMWnqc= Subject key identifier: DA:10:2F:5E:51:A6:A3:34:3B:0F:0B:02:15:2B:EE:0B:9B:3A:B8:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B2D4FF69411939381CC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46dba63c-df94-396a-93ca-51922f2b5065.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.23.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b2:d4:ff:69:41:19:39:38:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=8d19f726-f63c-4ad2-bf16-ad94c83c6584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:d8:c2:ef:53:1d:ea:fb:09:de:15:c5:d3: 44:ea:27:ab:b1:3c:81:87:27:84:f8:e3:5b:a6:52: 5c:e5:35:db:f1:fa:fe:9a:b4:88:7b:13:94:11:64: 11:41:f9:d3:07:0e:39:f6:c6:e5:97:9f:eb:69:25: 5d:95:1a:0a:23:44:20:60:dc:5c:01:e7:ec:ae:1f: 03:83:6e:c1:08:e7:6c:ad:4c:75:a5:4e:29:20:b5: 0a:46:e3:1e:01:c8:13:ca:be:a6:38:f2:4d:0f:ce: 16:8d:f7:93:6d:5d:de:51:c1:5b:e2:0f:8e:b7:50: 55:25:76:5f:cf:a2:ec:43:f8:31:e2:b1:4f:7a:84: a3:8a:d4:5a:65:2c:0e:48:0e:c8:44:ae:c8:ce:f9: 45:01:ca:9b:44:d9:02:a7:b2:06:bb:d4:c9:0b:85: fd:d0:77:ab:d9:19:69:f7:a0:a1:f1:c2:19:4c:a7: c6:0c:2e:e9:cc:a6:b6:06:68:75:4d:19:04:4d:ab: 65:8f:34:aa:1a:24:00:bd:dd:d8:54:62:e1:ef:8b: c8:c0:37:3a:51:3b:a9:68:f0:e1:55:e1:83:47:10: 97:01:bb:74:6d:e4:d0:5e:24:4d:19:a5:ed:45:d5: d9:a9:0d:d5:72:0a:5e:31:fb:4d:33:13:34:39:19: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:10:2F:5E:51:A6:A3:34:3B:0F:0B:02:15:2B:EE:0B:9B:3A:B8:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46dba63c-df94-396a-93ca-51922f2b5065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a3:93:6c:b5:91:58:a1:80:14:04:08:db:10:b2:de:a8:c0: 0d:bb:a9:7a:a8:2e:50:06:17:c9:27:e4:76:63:c6:81:09:14: 6f:91:50:d8:cd:62:49:e1:25:36:e2:87:52:70:9b:2d:a0:d2: 34:98:27:df:8e:c7:f2:8c:99:56:82:25:cc:54:5a:f1:e6:75: 24:5e:64:54:80:4c:41:3b:e9:55:49:41:7d:b9:c4:7a:9e:47: 2d:23:86:d8:1e:26:7b:3c:41:c8:93:6b:a9:34:17:0c:66:36: 50:f6:a9:df:df:c5:81:3e:0e:2b:74:18:43:68:03:83:64:5c: 1d:aa:16:c7:bd:ea:6e:c9:44:03:1b:a1:11:0d:93:9e:75:b9: 37:9d:36:da:ff:e2:10:a2:a9:0b:5e:40:0a:15:e8:b6:cb:38: 28:ba:03:76:98:ed:bb:8b:0a:be:0c:96:5f:9b:40:ee:0a:4a: d2:37:20:5f:8b:ec:db:93:60:71:d2:72:1a:bb:37:70:79:d7: 9d:15:1a:29:d8:a0:50:a5:3a:b7:43:58:38:d5:7d:1b:20:ed: 01:c6:66:5a:3f:7c:b9:84:e6:28:0d:b9:d2:1c:9a:0b:ff:59: 53:ec:b6:ba:7c:84:1b:30:db:91:76:3b:e3:09:84:88:1c:13: 71:05:e9:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rLU/2lBGTk4HMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk OGQxOWY3MjYtZjYzYy00YWQyLWJmMTYtYWQ5NGM4M2M2NTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPPYwu9THer7Cd4VxdNE6iersTyBhyeE+ONb plJc5TXb8fr+mrSIexOUEWQRQfnTBw459sbll5/raSVdlRoKI0QgYNxcAefsrh8D g27BCOdsrUx1pU4pILUKRuMeAcgTyr6mOPJND84WjfeTbV3eUcFb4g+Ot1BVJXZf z6LsQ/gx4rFPeoSjitRaZSwOSA7IRK7IzvlFAcqbRNkCp7IGu9TJC4X90Her2Rlp 96Ch8cIZTKfGDC7pzKa2Bmh1TRkETatljzSqGiQAvd3YVGLh74vIwDc6UTupaPDh VeGDRxCXAbt0beTQXiRNGaXtRdXZqQ3VcgpeMftNMxM0ORngVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoQL15RpqM0Ow8LAhUr7gubOrhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDZkYmE2M2MtZGY5NC0z OTZhLTkzY2EtNTE5MjJmMmI1MDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHijk2y1kVihgBQECNsQst6owA27qXqoLlAGF8kn5HZjxoEJFG+RUNjN YknhJTbih1Jwmy2g0jSYJ9+Ox/KMmVaCJcxUWvHmdSReZFSATEE76VVJQX25xHqe Ry0jhtgeJns8QciTa6k0FwxmNlD2qd/fxYE+Dit0GENoA4NkXB2qFse96m7JRAMb oRENk551uTedNtr/4hCiqQteQAoV6LbLOCi6A3aY7buLCr4Mll+bQO4KStI3IF+L 7NuTYHHSchq7N3B5150VGinYoFClOrdDWDjVfRsg7QHGZlo/fLmE5igNudIcmgv/ WVPstrp8hBsw25F2O+MJhIgcE3EF6do= -----END CERTIFICATE-----Generated at Mon Sep 28 13:18:25 2026 by rpki-client