$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5797244-45a5-30e8-bd0e-52837330ab7a.roa File: e5797244-45a5-30e8-bd0e-52837330ab7a.roa (raw, json) Hash identifier: Azs6Lfl10v8OowX+WoLzKSnJigty0XTL6VeFt7efYk4= Subject key identifier: 7B:47:B4:61:F2:44:DD:59:1F:0E:44:88:56:70:4E:7D:20:20:C3:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F10DB523F8C3C64491D948740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5797244-45a5-30e8-bd0e-52837330ab7a.roa Signing time: Fri 04 Sep 2026 18:30:17 +0000 ROA not before: Fri 04 Sep 2026 18:30:17 +0000 ROA not after: Thu 03 Dec 2026 19:30:17 +0000 asID: 7029 IP address blocks: 98.21.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:db:52:3f:8c:3c:64:49:1d:94:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 18:30:17 2026 GMT Not After : Dec 3 19:30:17 2026 GMT Subject: CN=ff3812ec-7de4-47f7-b263-7cb82f204657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:22:11:bd:76:87:2d:29:2f:15:3f:f5:02:bc: f7:14:0c:01:a6:db:43:8e:0c:74:69:8b:1b:cd:36: 50:38:90:74:12:9e:18:fb:88:63:58:51:98:f0:42: 5f:65:0d:b4:e8:d7:ab:a5:a5:e7:1c:de:b0:55:8a: a4:98:d5:29:b7:04:08:bb:82:a7:d2:ee:75:00:bd: 5a:f2:1a:52:5a:6b:73:9d:d9:18:66:5c:29:2e:82: 4f:2d:c7:3b:5a:87:fd:21:d8:07:b6:1e:6a:9b:6a: 8f:f1:d3:78:de:a9:48:1a:82:49:59:c2:d8:a3:77: c5:dd:5e:e0:5e:b1:b0:f7:03:ba:16:ca:ea:76:db: 45:23:6f:41:4d:c9:dd:00:ce:4c:d7:66:15:5a:a9: 92:e4:15:f9:3b:91:94:df:63:11:fc:12:d7:c9:cd: 7e:3e:de:16:2e:cd:18:f4:37:c9:9a:c2:92:7b:72: 51:b5:d5:59:37:15:7c:fa:2e:79:17:f8:48:61:a5: 8d:65:df:87:62:4c:16:11:8a:79:7c:2e:8b:21:74: e7:d0:94:3c:77:97:85:d8:83:20:36:e0:49:4b:f6: f0:31:af:d2:b1:fd:ae:fc:c4:b1:32:39:22:93:ff: a6:5c:bd:34:4c:77:af:24:c3:55:8a:84:ce:f0:33: 24:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:47:B4:61:F2:44:DD:59:1F:0E:44:88:56:70:4E:7D:20:20:C3:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5797244-45a5-30e8-bd0e-52837330ab7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b6:56:d6:14:54:d9:16:ba:b6:63:d7:15:a3:2c:05:5a:15: ef:27:4a:32:f7:c4:93:fa:38:59:42:8d:cf:40:55:26:12:b3: 48:02:ee:d0:93:16:e3:7d:ef:38:36:32:31:b5:1a:26:20:22: ed:06:3c:d0:f3:8b:0d:c4:bf:c1:a7:21:67:3d:ee:c7:8b:9b: 63:8e:89:b8:5e:de:ae:43:88:d3:b9:a5:94:2c:83:2e:61:25: d0:ff:76:32:ec:b9:c7:ce:9b:bc:ee:49:9a:29:76:76:53:2c: 56:4e:54:79:ac:ae:dc:46:34:70:0e:40:38:8f:92:e7:1e:cf: 55:67:50:ba:c1:c9:53:a2:f0:bf:c6:87:c4:31:eb:d3:34:91: e5:2a:7b:1a:1f:9f:fd:2e:98:5a:44:e0:28:ad:3e:4e:a5:41: e3:d9:e1:00:35:6a:29:b7:fe:1e:51:6c:9c:d7:87:2d:74:db: 1a:ad:92:f7:57:2a:3b:12:12:c9:f8:d6:f3:e1:7b:91:77:e5: d6:e4:86:3b:10:8f:d0:b2:16:da:cb:41:84:0b:16:18:6d:9b: 03:fd:04:12:1c:4e:d8:5b:d1:fd:5d:d6:a0:ea:0e:e1:99:37: 26:7a:db:73:86:cd:93:a3:4b:69:c7:41:c8:2c:82:46:e7:66: 76:78:29:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Q21I/jDxkSR2Uh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNDE4MzAxN1oXDTI2MTIwMzE5MzAxN1owLzEtMCsGA1UEAxMk ZmYzODEyZWMtN2RlNC00N2Y3LWIyNjMtN2NiODJmMjA0NjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCIRvXaHLSkvFT/1Arz3FAwBpttDjgx0aYsb zTZQOJB0Ep4Y+4hjWFGY8EJfZQ206NerpaXnHN6wVYqkmNUptwQIu4Kn0u51AL1a 8hpSWmtzndkYZlwpLoJPLcc7Wof9IdgHth5qm2qP8dN43qlIGoJJWcLYo3fF3V7g XrGw9wO6FsrqdttFI29BTcndAM5M12YVWqmS5BX5O5GU32MR/BLXyc1+Pt4WLs0Y 9DfJmsKSe3JRtdVZNxV8+i55F/hIYaWNZd+HYkwWEYp5fC6LIXTn0JQ8d5eF2IMg NuBJS/bwMa/Ssf2u/MSxMjkik/+mXL00THevJMNVioTO8DMkVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtHtGHyRN1ZHw5EiFZwTn0gIMMoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTU3OTcyNDQtNDVhNS0z MGU4LWJkMGUtNTI4MzczMzBhYjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES2VtYUVNkWurZj1xWjLAVaFe8nSjL3xJP6OFlCjc9AVSYSs0gC7tCT FuN97zg2MjG1GiYgIu0GPNDziw3Ev8GnIWc97seLm2OOibhe3q5DiNO5pZQsgy5h JdD/djLsucfOm7zuSZopdnZTLFZOVHmsrtxGNHAOQDiPkucez1VnULrByVOi8L/G h8Qx69M0keUqexofn/0umFpE4CitPk6lQePZ4QA1aim3/h5RbJzXhy102xqtkvdX KjsSEsn41vPhe5F35dbkhjsQj9CyFtrLQYQLFhhtmwP9BBIcTthb0f1d1qDqDuGZ NyZ623OGzZOjS2nHQcgsgkbnZnZ4Kes= -----END CERTIFICATE-----Generated at Sat Sep 26 05:22:34 2026 by rpki-client