$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa File: 0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa (raw, json) Hash identifier: 2gyn1JYqA7Dge999u5pYNee3/0/Bj0BXRAj7GpO0HFo= Subject key identifier: 47:1C:01:91:34:9B:F9:2C:63:90:42:16:7E:6F:37:3A:D8:4A:98:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F60F066522AF8970BD060 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.17.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:60:f0:66:52:2a:f8:97:0b:d0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a711c731-9433-4131-8d13-261aa4c6e44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:c9:98:52:99:37:63:be:0e:34:f2:31:5b: 0d:8d:e3:9e:d5:dd:63:e1:81:e1:f6:bf:a5:0e:95: 25:3a:da:4c:d5:bd:a7:fd:ab:10:ce:99:76:3c:a0: 36:cd:c2:b6:25:8a:4a:05:d0:00:27:97:10:94:99: bc:2a:47:48:bb:0b:6a:99:cd:9e:5d:71:b7:0b:cd: ed:a0:cc:ab:07:bd:1a:ca:e1:7f:ee:82:e4:39:2d: e0:6d:6f:78:6f:d0:f2:1b:49:6a:76:71:c3:22:3d: 2a:fa:83:f1:b5:f5:fc:12:8f:d3:aa:55:9b:7c:72: 47:e4:4d:e2:c4:ac:09:51:2b:d1:37:57:dc:a0:26: cd:ce:23:0e:03:fd:75:75:8f:02:43:53:8b:84:74: e2:a3:10:e0:b8:78:9c:c0:a5:ed:a1:1c:2a:6e:36: b7:42:42:43:32:9a:a4:a0:17:24:6c:1a:2e:1d:ac: 95:cd:a4:b4:22:c1:f1:18:fb:a2:5b:74:fe:fb:08: 34:70:25:13:a5:7e:0f:63:f6:a0:19:d2:88:af:56: 72:24:f4:00:33:64:84:a4:73:50:09:f3:1d:e1:15: 88:d0:b1:9b:9d:09:99:04:e6:53:4a:8a:7c:dc:49: 6c:42:29:75:cd:3e:de:0b:6f:7c:d0:ed:ef:cd:e9: 5a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1C:01:91:34:9B:F9:2C:63:90:42:16:7E:6F:37:3A:D8:4A:98:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:ea:9e:e8:5f:a1:89:a6:e6:c8:2e:ea:6b:45:5e:d6:e7:05: 02:fc:88:71:06:1c:7a:e3:80:98:64:bf:ac:af:5d:21:73:18: 64:1b:e4:3b:55:8c:db:da:55:14:8c:99:c5:6a:2d:f4:73:cb: 42:f6:97:e5:02:64:99:7b:c9:42:60:84:2c:56:9a:3c:70:a5: b9:5a:49:70:af:b3:b2:aa:8d:05:d1:b5:ae:ab:ce:ec:81:a7: 0e:44:0e:8e:c7:59:42:45:25:70:05:f0:5b:dc:d9:a3:93:27: 66:ff:00:60:0d:41:ed:ac:9e:f7:cf:ac:7a:f4:12:32:9b:28: 71:c1:e9:ae:e4:b3:cb:12:6e:27:54:ef:e3:76:ba:4d:44:0e: 1d:cd:4c:f6:82:72:d7:85:00:5b:ed:a2:cd:89:50:5a:49:6a: 2a:e5:26:49:ff:c1:b6:2b:a6:f7:c5:2f:2a:65:9d:5d:85:1d: 52:da:c7:6a:66:f6:79:13:ee:39:91:86:30:af:a0:b6:de:3f: 12:ff:f9:4b:4e:9b:15:be:ec:22:2f:b2:b1:d3:e5:b0:7d:79: ac:15:c1:bc:32:0d:15:d2:67:63:1e:97:4a:60:d8:0a:a6:65: 36:8a:ed:eb:b4:db:6b:f6:bb:1c:d4:8a:ce:da:38:c5:e9:1e: 23:37:68:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf2DwZlIq+JcL0GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTcxMWM3MzEtOTQzMy00MTMxLThkMTMtMjYxYWE0YzZlNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx7JmFKZN2O+DjTyMVsNjeOe1d1j4YHh9r+l DpUlOtpM1b2n/asQzpl2PKA2zcK2JYpKBdAAJ5cQlJm8KkdIuwtqmc2eXXG3C83t oMyrB70ayuF/7oLkOS3gbW94b9DyG0lqdnHDIj0q+oPxtfX8Eo/TqlWbfHJH5E3i xKwJUSvRN1fcoCbNziMOA/11dY8CQ1OLhHTioxDguHicwKXtoRwqbja3QkJDMpqk oBckbBouHayVzaS0IsHxGPuiW3T++wg0cCUTpX4PY/agGdKIr1ZyJPQAM2SEpHNQ CfMd4RWI0LGbnQmZBOZTSop83ElsQil1zT7eC2980O3vzelarQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEccAZE0m/ksY5BCFn5vNzrYSpjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGRmOWI4MTktMWFhNy0z Yzc5LTk0ZTItN2YyN2ZhOWVjMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXqnuhfoYmm5sgu6mtFXtbnBQL8iHEGHHrjgJhkv6yvXSFzGGQb5DtV jNvaVRSMmcVqLfRzy0L2l+UCZJl7yUJghCxWmjxwpblaSXCvs7KqjQXRta6rzuyB pw5EDo7HWUJFJXAF8Fvc2aOTJ2b/AGANQe2snvfPrHr0EjKbKHHB6a7ks8sSbidU 7+N2uk1EDh3NTPaCcteFAFvtos2JUFpJairlJkn/wbYrpvfFLyplnV2FHVLax2pm 9nkT7jmRhjCvoLbePxL/+UtOmxW+7CIvsrHT5bB9eawVwbwyDRXSZ2Mel0pg2Aqm ZTaK7eu022v2uxzUis7aOMXpHiM3aAQ= -----END CERTIFICATE-----Generated at Sat Sep 26 15:19:46 2026 by rpki-client