$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ff73146-7f16-3e3a-bbb4-83e91486ef0a.roa File: 8ff73146-7f16-3e3a-bbb4-83e91486ef0a.roa (raw, json) Hash identifier: Jht0hF3anxwkqy+F2ZFn9RPsY9Lv8UK5iRxUETH46Ys= Subject key identifier: 16:E2:64:F1:96:76:85:7A:28:5F:0F:EB:D1:99:31:AA:0E:8E:ED:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49861DF6CB88DEBE8B1585A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ff73146-7f16-3e3a-bbb4-83e91486ef0a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.21.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:1d:f6:cb:88:de:be:8b:15:85:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c8cb8d9d-36a2-4b21-a2b3-cde8e60131b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bd:31:c5:01:e1:84:4e:75:28:3c:ff:6d:b2: 20:8f:2d:a1:a3:19:3f:b6:6a:80:85:2f:d5:57:83: aa:b2:5d:87:80:0a:68:69:15:de:70:14:37:62:bc: 84:d9:4a:38:b2:67:a8:43:95:ce:8c:67:65:20:34: 04:f8:99:b4:57:4c:53:e2:ed:06:21:7a:7b:4e:c7: cb:96:47:ce:95:f0:f2:8f:ec:be:f7:88:30:5c:88: ab:b4:db:b8:b6:53:45:b8:74:9b:3c:4b:01:6e:6f: 7e:da:61:f2:6d:08:8b:7b:cd:e4:18:e0:16:b4:cd: 2c:54:e9:46:cd:a6:ae:ba:0b:e9:0d:94:a3:d4:04: 3c:75:db:cf:ef:38:a3:dc:34:a7:d4:0e:67:4e:cf: a9:a0:0b:29:0e:e2:8e:d6:d5:26:b9:ca:1b:f3:e8: 92:76:16:ff:0e:00:0a:c2:6b:1f:41:fc:d9:47:63: e1:d3:b2:98:46:ef:1d:dd:22:80:3b:1f:ba:8d:7b: 41:5c:c0:ed:30:44:fa:68:6c:d8:6f:df:ad:86:d1: bf:48:b7:6c:e5:3a:16:45:68:f4:8a:c9:69:f5:a7: 6e:a0:eb:38:eb:86:af:ca:6b:50:ee:ba:20:0b:78: ec:38:e5:dc:07:6c:51:3e:6e:f7:f3:09:64:bd:ce: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E2:64:F1:96:76:85:7A:28:5F:0F:EB:D1:99:31:AA:0E:8E:ED:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ff73146-7f16-3e3a-bbb4-83e91486ef0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:01:ce:21:61:45:6c:c2:e9:71:ba:47:a0:5c:3e:0a:c0:90: 8a:8c:14:81:de:dd:80:ea:ec:9b:d7:b8:91:11:49:7c:69:f0: b6:32:0c:3d:79:f2:e1:99:e0:c9:c4:1b:26:59:02:61:41:c8: 9e:c7:99:8d:51:ac:f4:fd:28:61:78:8c:56:22:98:bb:94:ee: 80:a9:61:b7:5e:c1:ad:41:b7:3a:7d:4d:20:c7:08:e7:9a:3f: 62:42:ef:b5:2d:cb:dd:6a:57:ac:e1:60:d4:f0:50:31:03:a1: d1:f2:7c:d5:d0:67:e8:95:c2:8b:a2:05:a6:fa:a4:1d:0a:fa: 80:3a:de:35:54:8f:6b:a5:5a:31:70:73:c3:a7:61:78:79:2d: 20:d9:11:30:53:ea:24:12:59:60:81:af:cb:fc:02:28:1e:a1: 1c:7a:fd:9e:19:70:cf:64:cd:c3:e0:63:67:d5:3f:62:c7:83: db:77:50:d7:d9:c1:4d:ca:8b:61:4a:f1:7b:db:b5:63:2e:47: 5c:92:86:3c:06:50:46:9c:08:4c:88:72:ed:aa:2c:b0:69:8f: 4e:90:db:74:29:22:5e:6d:03:4a:9e:cd:14:08:1e:c3:c0:d2: 99:6e:be:be:97:a9:8d:d6:b8:bb:6b:0f:54:69:07:66:65:3a: a5:b1:6d:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhh32y4jevosVhaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzhjYjhkOWQtMzZhMi00YjIxLWEyYjMtY2RlOGU2MDEzMWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn70xxQHhhE51KDz/bbIgjy2hoxk/tmqAhS/V V4Oqsl2HgApoaRXecBQ3YryE2Uo4smeoQ5XOjGdlIDQE+Jm0V0xT4u0GIXp7TsfL lkfOlfDyj+y+94gwXIirtNu4tlNFuHSbPEsBbm9+2mHybQiLe83kGOAWtM0sVOlG zaauugvpDZSj1AQ8ddvP7zij3DSn1A5nTs+poAspDuKO1tUmucob8+iSdhb/DgAK wmsfQfzZR2Ph07KYRu8d3SKAOx+6jXtBXMDtMET6aGzYb9+thtG/SLds5ToWRWj0 islp9aduoOs464avymtQ7rogC3jsOOXcB2xRPm738wlkvc4ijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbiZPGWdoV6KF8P69GZMaoOju0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGZmNzMxNDYtN2YxNi0z ZTNhLWJiYjQtODNlOTE0ODZlZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4BziFhRWzC6XG6R6BcPgrAkIqMFIHe3YDq7JvXuJERSXxp8LYyDD15 8uGZ4MnEGyZZAmFByJ7HmY1RrPT9KGF4jFYimLuU7oCpYbdewa1Btzp9TSDHCOea P2JC77Uty91qV6zhYNTwUDEDodHyfNXQZ+iVwouiBab6pB0K+oA63jVUj2ulWjFw c8OnYXh5LSDZETBT6iQSWWCBr8v8AigeoRx6/Z4ZcM9kzcPgY2fVP2LHg9t3UNfZ wU3Ki2FK8XvbtWMuR1yShjwGUEacCEyIcu2qLLBpj06Q23QpIl5tA0qezRQIHsPA 0pluvr6XqY3WuLtrD1RpB2ZlOqWxbWk= -----END CERTIFICATE-----Generated at Tue Sep 29 04:57:39 2026 by rpki-client