$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2b65712-79d5-3614-86f5-6c616d92d8b4.roa File: d2b65712-79d5-3614-86f5-6c616d92d8b4.roa (raw, json) Hash identifier: S2pxjNPGDn1kOqUPVVvUykbhZTVp0sml3sI0lCnxhLM= Subject key identifier: 16:39:A1:7C:91:B6:C4:BD:1A:46:D3:31:B9:AD:7F:BE:42:D4:28:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49894FD3CD72E1E9BA6E6B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2b65712-79d5-3614-86f5-6c616d92d8b4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.16.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:4f:d3:cd:72:e1:e9:ba:6e:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=183b9baa-50e6-4c77-b110-3fb35921c82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:77:e7:de:0b:2b:f0:34:81:02:47:7b:67: e4:72:75:22:cf:92:de:d5:b9:8a:7a:4f:88:0a:a2: 41:ac:36:0e:38:66:d3:56:88:c6:84:e0:dd:97:f8: d7:31:da:92:5b:d6:53:23:52:d7:24:5e:10:e9:28: 08:c0:2e:3f:4f:eb:68:20:d1:6e:7f:93:01:d1:83: 23:70:16:2b:13:3e:04:bb:fe:ea:64:6e:b1:74:57: d7:db:a1:8f:ec:17:e2:ff:a0:81:43:b3:c5:0b:7f: 6e:1b:44:65:25:15:c3:19:7d:a5:85:c1:da:67:df: 5e:3e:48:70:f8:c5:f6:7b:54:86:85:e1:01:13:ef: fb:b5:61:1e:6e:8a:05:c3:eb:d6:c0:ed:47:2d:b6: 47:72:2f:c4:fc:df:42:4d:ee:45:33:9c:9e:02:3f: 6c:c0:49:6e:c2:f8:43:7f:1a:b2:75:ff:98:c7:5d: 70:44:3a:38:de:d1:dd:06:43:11:1e:29:ae:41:07: b6:83:b7:28:57:f1:85:a3:64:3c:46:51:ba:66:7e: c4:3c:74:fc:ab:5f:92:d9:9b:0a:f7:b7:a8:65:0e: c1:f8:5f:08:4b:a8:39:85:19:f6:0a:e8:33:93:cc: 65:78:ca:59:83:8d:84:74:43:9b:23:d7:1a:1a:fe: d1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:39:A1:7C:91:B6:C4:BD:1A:46:D3:31:B9:AD:7F:BE:42:D4:28:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2b65712-79d5-3614-86f5-6c616d92d8b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8b:dd:2b:cc:b6:52:58:d9:bd:fb:af:f4:be:f0:80:e1:7d: a2:1d:9e:99:9f:75:3c:c7:11:6e:d8:d2:b1:95:19:40:21:eb: 38:93:b0:c1:94:b3:71:47:c5:27:04:c9:5d:0c:f0:04:a6:a8: 04:31:f3:3b:55:1d:b7:4b:95:8a:06:f8:b0:5a:d7:22:e7:ab: c7:c9:b6:2b:11:a3:61:6c:06:95:9a:77:4f:26:fe:44:77:11: 4b:51:5b:df:b6:66:a0:75:c8:e7:d3:f7:f9:f2:05:83:a8:38: d3:40:5a:d4:55:d0:82:97:ae:4f:2c:a1:53:31:86:19:8d:99: 0c:5e:44:fa:63:8b:94:fc:9c:72:1b:16:38:ca:28:08:7a:bf: c4:d4:69:9c:67:8a:ac:6e:f7:b2:fb:f3:44:84:97:3a:45:f1: 5b:47:e3:f4:8d:bd:4b:0a:76:ef:82:0c:b9:bd:21:dc:a3:b7: f9:f7:61:19:7e:0d:8b:9d:bb:87:d4:33:a1:99:d9:d2:17:7f: e7:95:33:b0:32:df:8e:8e:5b:94:3e:0b:b1:8d:86:cb:99:a6: 82:d3:9c:55:de:29:18:14:85:c8:a6:f1:88:bf:a2:8c:04:5c: f2:47:ae:a7:12:9e:61:29:cc:ac:50:7a:8d:e0:6a:a3:cb:68: a8:69:30:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiU/TzXLh6bpua0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTgzYjliYWEtNTBlNi00Yzc3LWIxMTAtM2ZiMzU5MjFjODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxp3594LK/A0gQJHe2fkcnUiz5Le1bmKek+I CqJBrDYOOGbTVojGhODdl/jXMdqSW9ZTI1LXJF4Q6SgIwC4/T+toINFuf5MB0YMj cBYrEz4Eu/7qZG6xdFfX26GP7Bfi/6CBQ7PFC39uG0RlJRXDGX2lhcHaZ99ePkhw +MX2e1SGheEBE+/7tWEebooFw+vWwO1HLbZHci/E/N9CTe5FM5yeAj9swEluwvhD fxqydf+Yx11wRDo43tHdBkMRHimuQQe2g7coV/GFo2Q8RlG6Zn7EPHT8q1+S2ZsK 97eoZQ7B+F8IS6g5hRn2Cugzk8xleMpZg42EdEObI9caGv7RAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY5oXyRtsS9GkbTMbmtf75C1Cg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDJiNjU3MTItNzlkNS0z NjE0LTg2ZjUtNmM2MTZkOTJkOGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhBaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeL3SvMtlJY2b37r/S+8IDhfaIdnpmfdTzHEW7Y0rGVGUAh6ziTsMGU s3FHxScEyV0M8ASmqAQx8ztVHbdLlYoG+LBa1yLnq8fJtisRo2FsBpWad08m/kR3 EUtRW9+2ZqB1yOfT9/nyBYOoONNAWtRV0IKXrk8soVMxhhmNmQxeRPpji5T8nHIb FjjKKAh6v8TUaZxniqxu97L780SElzpF8VtH4/SNvUsKdu+CDLm9Idyjt/n3YRl+ DYudu4fUM6GZ2dIXf+eVM7Ay346OW5Q+C7GNhsuZpoLTnFXeKRgUhcim8Yi/oowE XPJHrqcSnmEpzKxQeo3gaqPLaKhpMA0= -----END CERTIFICATE-----Generated at Sun Sep 27 12:20:40 2026 by rpki-client