$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa File: 904128b2-0813-339d-a2fa-b676181812c8.roa (raw, json) Hash identifier: A3YYTY1FZ4Jsd9wfDF8dOsFX/IK01WLSmIJQvHWkahc= Subject key identifier: 63:E8:95:E3:AB:66:76:6E:48:ED:24:68:88:FF:86:24:A7:42:FD:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49861FA28A256D5927CFA980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.22.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:1f:a2:8a:25:6d:59:27:cf:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f68702d6-584b-4e6d-b113-076370d5eeb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:6c:d6:45:0d:3f:68:7c:b4:58:59:2b:18: 58:11:a0:ad:c0:48:4b:af:c0:a2:73:cf:6f:1b:fa: 17:5e:dd:2a:b6:cc:7f:1d:f5:30:c0:14:bb:c9:cf: 5b:a6:8e:94:83:8d:3d:21:e8:ed:35:f5:73:b2:6c: 89:4f:2d:d5:a5:1a:e1:f1:03:42:dd:7b:c7:48:28: 90:3e:22:07:fa:ee:82:b9:7e:de:37:ea:99:03:dd: cd:4f:eb:ae:5b:a6:1f:b5:b5:51:fd:da:f0:65:84: 38:8d:dd:b7:56:3e:59:f8:db:38:fb:0a:00:e1:84: 47:50:1e:ad:98:26:b1:76:9e:82:66:c2:d6:a6:e3: 61:e9:a8:f2:89:bd:4c:c4:6b:76:1b:31:84:65:cd: 35:60:59:50:88:41:b3:4e:76:65:07:55:ef:41:6d: f8:c0:f0:51:d2:18:9d:0c:a3:17:bf:17:97:6e:07: fb:f2:a1:4e:f5:54:23:8e:d8:39:48:86:d1:c4:ac: 4e:26:3b:ea:31:e9:bd:dc:61:e8:d6:ce:1a:13:4d: 0a:fc:bb:d8:21:e0:2f:5c:fb:7e:72:9e:bd:ea:9e: 70:7f:be:65:5a:1e:3a:2e:5b:5c:90:7d:2f:c2:64: 65:31:bd:7a:70:23:45:7e:76:f9:1e:03:b9:da:30: 37:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E8:95:E3:AB:66:76:6E:48:ED:24:68:88:FF:86:24:A7:42:FD:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:6d:6c:4b:da:f8:1c:7e:92:8b:de:02:b3:c9:1b:48:fa:76: 83:5a:bc:ff:00:29:59:cb:56:f8:75:b8:63:d8:f3:ed:99:0a: 10:4d:4d:bc:bf:c3:a3:30:c5:b0:7d:fa:43:63:60:52:bd:ec: 18:50:1a:0c:2d:c9:a9:54:31:47:a2:b1:7c:59:d3:7e:ec:82: 2f:12:c5:f5:7c:20:63:47:85:2e:58:75:a3:4a:a9:65:60:0d: 6e:cd:02:2a:e9:40:c9:4d:c9:8c:28:cc:f2:7f:71:dc:9d:fb: 54:c2:67:88:24:c7:32:5a:dc:1a:aa:72:f6:47:f9:60:4a:7c: f8:89:32:6e:ad:5f:f8:ac:8c:52:53:6f:3b:01:26:9a:63:bf: d7:9b:85:47:2a:a4:6c:6a:5f:ec:79:52:00:68:5e:ad:23:ab: c7:e7:44:c5:9b:75:37:dc:ab:f8:a9:d0:06:5a:43:42:ab:fa: ff:a7:a8:22:1f:5c:36:c7:b9:43:2f:43:a6:74:58:9e:67:40: 22:48:9a:cd:83:91:0f:03:ae:13:8b:86:4d:80:a1:fe:f4:8f: 3f:d0:bb:89:59:05:9d:ca:49:5a:43:e4:e2:95:13:d9:f3:47: bb:fb:ee:e1:26:1e:46:7c:7f:4d:b3:d0:98:36:2c:5e:78:d1: 23:51:1c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhh+iiiVtWSfPqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjY4NzAyZDYtNTg0Yi00ZTZkLWIxMTMtMDc2MzcwZDVlZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9ds1kUNP2h8tFhZKxhYEaCtwEhLr8Cic89v G/oXXt0qtsx/HfUwwBS7yc9bpo6Ug409IejtNfVzsmyJTy3VpRrh8QNC3XvHSCiQ PiIH+u6CuX7eN+qZA93NT+uuW6YftbVR/drwZYQ4jd23Vj5Z+Ns4+woA4YRHUB6t mCaxdp6CZsLWpuNh6ajyib1MxGt2GzGEZc01YFlQiEGzTnZlB1XvQW34wPBR0hid DKMXvxeXbgf78qFO9VQjjtg5SIbRxKxOJjvqMem93GHo1s4aE00K/LvYIeAvXPt+ cp696p5wf75lWh46LltckH0vwmRlMb16cCNFfnb5HgO52jA3FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPoleOrZnZuSO0kaIj/hiSnQv3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTA0MTI4YjItMDgxMy0z MzlkLWEyZmEtYjY3NjE4MTgxMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVtbEva+Bx+koveArPJG0j6doNavP8AKVnLVvh1uGPY8+2ZChBNTby/ w6MwxbB9+kNjYFK97BhQGgwtyalUMUeisXxZ037sgi8SxfV8IGNHhS5YdaNKqWVg DW7NAirpQMlNyYwozPJ/cdyd+1TCZ4gkxzJa3BqqcvZH+WBKfPiJMm6tX/isjFJT bzsBJppjv9ebhUcqpGxqX+x5UgBoXq0jq8fnRMWbdTfcq/ip0AZaQ0Kr+v+nqCIf XDbHuUMvQ6Z0WJ5nQCJIms2DkQ8DrhOLhk2Aof70jz/Qu4lZBZ3KSVpD5OKVE9nz R7v77uEmHkZ8f02z0Jg2LF540SNRHBY= -----END CERTIFICATE-----Generated at Sun Sep 27 10:32:51 2026 by rpki-client