$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84307f54-bb31-3f69-ae93-3bd155583462.roa File: 84307f54-bb31-3f69-ae93-3bd155583462.roa (raw, json) Hash identifier: IcAfQN4uLXikdrN6Y1awedyncGIM+88g7PtaF1MugCY= Subject key identifier: 1E:17:FF:3D:83:64:7C:7E:9F:9A:86:3F:C5:A5:DD:3F:9B:B2:25:B4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4C3D62C73A842EC51CA68880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84307f54-bb31-3f69-ae93-3bd155583462.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 7029 IP address blocks: 98.18.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:62:c7:3a:84:2e:c5:1c:a6:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=500d1c6c-cb19-45d8-b868-2c9fbf571948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:7d:63:d4:a5:77:4e:0b:82:9a:31:f0:cc: 48:11:ba:13:d0:26:d6:76:5a:b9:cd:63:0a:5f:49: 3a:f2:be:62:1d:02:26:40:81:31:86:f8:c8:18:c3: bb:70:20:9c:e6:6d:f2:b2:6d:b8:a2:ec:99:59:85: fb:61:1a:c3:24:6f:57:1b:1f:47:69:f6:b4:f4:dc: 9b:51:33:b6:af:ee:57:45:15:91:d6:68:49:9d:06: 08:f0:89:e1:85:d0:5d:81:a7:e1:7c:47:48:61:24: b7:83:f6:3e:98:8a:4c:71:4e:93:8f:2c:e0:55:d9: 38:e5:40:f7:fe:af:4a:29:f5:a9:c9:f5:15:a5:7d: 71:1f:1d:64:b6:0c:fa:0f:45:cd:b4:4e:d8:ab:5c: c3:bd:1e:26:79:28:ea:81:87:06:31:fa:5c:a7:78: ce:99:bc:a4:53:01:44:b7:97:a5:6e:db:20:77:8f: 30:50:3f:b1:72:de:d6:4f:dc:dc:ce:99:be:95:64: 65:29:dd:d1:06:64:f3:f6:f0:db:51:5f:2b:ab:fc: 6e:38:27:2e:0b:cf:60:ba:c6:36:45:3a:70:b2:85: f4:bc:9d:2c:7c:64:10:ed:b4:06:1f:77:8d:30:3f: 85:4a:52:d6:42:78:89:72:2a:36:6e:18:74:e8:99: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:17:FF:3D:83:64:7C:7E:9F:9A:86:3F:C5:A5:DD:3F:9B:B2:25:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84307f54-bb31-3f69-ae93-3bd155583462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9c:6d:d5:a2:82:48:09:5a:9d:ab:53:2e:fc:2c:8a:09:e5: 61:f3:29:dd:d0:46:fa:e9:4c:8f:53:43:6b:e1:a2:dd:a9:17: 96:aa:cb:3f:98:df:d2:b5:ed:e9:6b:3b:15:63:5f:d6:e7:2b: 80:3e:75:c5:c7:60:75:e6:fa:a3:d9:b1:1f:3a:38:2b:07:b7: 0b:51:57:d5:f0:04:c6:5b:d6:8f:30:14:83:28:55:93:b1:fe: 50:84:a7:81:94:ac:ea:a3:b5:9b:d6:42:2b:30:84:36:69:ee: ea:89:70:7c:85:e7:bb:a5:33:4d:a7:8d:f8:96:2c:78:96:4f: 45:d7:69:fa:d5:36:bb:25:50:59:93:c9:1d:a8:84:e7:ec:c5: 2b:0b:78:4e:82:e0:38:be:fd:16:04:2b:ca:bf:eb:89:2c:0c: db:4f:fb:20:a8:66:4a:2c:76:d1:c6:bc:37:4f:37:d2:3d:ee: 8f:15:7c:32:8b:86:41:e7:a1:04:35:e5:ff:8f:10:86:8f:56: 72:09:ca:02:b9:f4:68:4a:81:cc:0e:e0:9f:92:37:87:0f:59: b9:b5:4a:f3:f1:21:58:48:70:72:7e:f8:7f:d5:33:7f:02:de: be:e0:69:7a:6b:64:f7:82:bb:4f:80:0e:b5:c0:dc:04:26:0d: ac:ce:fb:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWLHOoQuxRymiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTAwZDFjNmMtY2IxOS00NWQ4LWI4NjgtMmM5ZmJmNTcxOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZd9Y9Sld04Lgpox8MxIEboT0CbWdlq5zWMK X0k68r5iHQImQIExhvjIGMO7cCCc5m3ysm24ouyZWYX7YRrDJG9XGx9Hafa09Nyb UTO2r+5XRRWR1mhJnQYI8InhhdBdgafhfEdIYSS3g/Y+mIpMcU6TjyzgVdk45UD3 /q9KKfWpyfUVpX1xHx1ktgz6D0XNtE7Yq1zDvR4meSjqgYcGMfpcp3jOmbykUwFE t5elbtsgd48wUD+xct7WT9zczpm+lWRlKd3RBmTz9vDbUV8rq/xuOCcuC89gusY2 RTpwsoX0vJ0sfGQQ7bQGH3eNMD+FSlLWQniJcio2bhh06Jmb/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4X/z2DZHx+n5qGP8Wl3T+bsiW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQzMDdmNTQtYmIzMS0z ZjY5LWFlOTMtM2JkMTU1NTgzNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhJmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGcbdWigkgJWp2rUy78LIoJ5WHzKd3QRvrpTI9TQ2vhot2pF5aqyz+Y 39K17elrOxVjX9bnK4A+dcXHYHXm+qPZsR86OCsHtwtRV9XwBMZb1o8wFIMoVZOx /lCEp4GUrOqjtZvWQiswhDZp7uqJcHyF57ulM02njfiWLHiWT0XXafrVNrslUFmT yR2ohOfsxSsLeE6C4Di+/RYEK8q/64ksDNtP+yCoZkosdtHGvDdPN9I97o8VfDKL hkHnoQQ15f+PEIaPVnIJygK59GhKgcwO4J+SN4cPWbm1SvPxIVhIcHJ++H/VM38C 3r7gaXprZPeCu0+ADrXA3AQmDazO+0g= -----END CERTIFICATE-----Generated at Mon Sep 28 13:14:01 2026 by rpki-client