$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d70faa83-212f-34fc-9b4a-167e90a3d0ff.roa File: d70faa83-212f-34fc-9b4a-167e90a3d0ff.roa (raw, json) Hash identifier: d1EAM8uSaiNmo4o5TcA6gvdVvMOMvjOfQlJwW0Fzi3k= Subject key identifier: A4:8E:68:65:4E:11:96:EF:72:82:A2:EE:65:A0:F1:B8:EA:8D:BE:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49861E3B23DF990678B58500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d70faa83-212f-34fc-9b4a-167e90a3d0ff.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.21.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:1e:3b:23:df:99:06:78:b5:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cfd5c0ca-0688-4ba7-beed-9ad6360a177a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:47:f1:5c:a3:d0:ca:06:18:63:48:11:27: 84:5c:b1:e0:f9:fd:f6:3b:ec:98:64:b8:22:03:75: bc:62:f7:5f:77:76:39:47:d3:67:86:1d:6e:3d:a4: 1d:e0:6f:ae:cb:5a:17:2e:ac:d4:8d:f2:82:31:57: 41:d9:7e:b9:53:b1:8c:cf:75:49:03:45:9a:ac:b2: 79:70:ab:04:6a:e3:a1:23:84:39:f9:e4:d8:a8:67: 8a:3e:f4:cc:53:97:96:ce:9d:95:ab:c5:3a:c1:c5: 20:98:72:0b:ca:a8:e4:3d:1e:b4:5f:f8:2b:a7:0f: 02:0d:27:f6:0f:b5:c2:a6:71:1c:46:18:21:9d:01: ed:8d:c0:75:1e:06:a3:d3:fe:14:6a:84:ba:73:c7: 2e:db:8d:10:6b:98:04:4e:34:0d:78:1c:55:bb:28: db:02:13:c2:12:f7:11:5e:e4:42:ea:94:58:96:a1: 58:cd:63:a8:25:54:18:72:1b:57:62:f3:68:d1:85: a5:0d:d6:45:b0:0b:ae:e0:55:b7:13:69:2c:db:d6: b8:79:e9:76:a7:d6:a8:64:8b:69:23:b9:10:71:35: 72:76:32:c5:9b:f9:7b:93:4b:e1:2b:b5:cb:a3:5b: 97:a2:39:ad:19:9f:9e:60:0a:a6:71:96:a2:d9:73: 41:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8E:68:65:4E:11:96:EF:72:82:A2:EE:65:A0:F1:B8:EA:8D:BE:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d70faa83-212f-34fc-9b4a-167e90a3d0ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:fc:cf:31:14:8f:28:13:fe:a9:cf:6d:03:e1:88:b0:89:5c: 15:73:9d:42:ed:eb:e7:ec:f4:80:7b:11:d9:4c:d0:7c:db:c8: a9:0b:c3:00:a8:db:4c:c6:b5:38:de:f7:b9:9a:ca:7f:79:52: 1e:29:34:40:b3:8b:8c:06:a1:0d:74:88:aa:29:93:4a:4b:c7: c3:ad:a2:35:b0:72:23:3e:4d:f8:1f:50:27:0c:89:62:ba:58: 85:f5:4b:eb:bb:f4:94:f4:c5:83:41:e2:76:d1:58:b5:cd:e7: e1:cc:0c:68:d2:70:83:82:c8:06:e0:ad:ec:f7:a1:89:3f:a7: c0:b0:67:8a:ef:50:69:bc:86:c7:c3:77:bc:09:d0:ac:d5:da: 48:3e:4c:dc:66:c3:6a:4e:79:c3:ab:e0:a5:b7:05:7f:e2:e7: 86:96:a8:b7:07:8a:bb:d2:85:a5:9c:87:1e:18:0c:41:fd:1c: 95:52:b4:ff:0e:26:20:0b:c2:4d:53:72:db:f9:0d:78:d6:e5: 80:84:f8:bf:b9:99:ce:b9:7a:17:8f:89:4b:84:62:80:5e:e6: d4:05:43:fb:76:51:cc:09:0b:08:28:a7:68:23:d5:56:e2:8f: d2:4c:d4:2c:4e:e6:74:02:47:5a:cf:f5:49:45:8f:1f:3b:e3: e9:d5:c8:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhh47I9+ZBni1hQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2ZkNWMwY2EtMDY4OC00YmE3LWJlZWQtOWFkNjM2MGExNzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi1H8Vyj0MoGGGNIESeEXLHg+f32O+yYZLgi A3W8Yvdfd3Y5R9Nnhh1uPaQd4G+uy1oXLqzUjfKCMVdB2X65U7GMz3VJA0WarLJ5 cKsEauOhI4Q5+eTYqGeKPvTMU5eWzp2Vq8U6wcUgmHILyqjkPR60X/grpw8CDSf2 D7XCpnEcRhghnQHtjcB1Hgaj0/4UaoS6c8cu240Qa5gETjQNeBxVuyjbAhPCEvcR XuRC6pRYlqFYzWOoJVQYchtXYvNo0YWlDdZFsAuu4FW3E2ks29a4eel2p9aoZItp I7kQcTVydjLFm/l7k0vhK7XLo1uXojmtGZ+eYAqmcZai2XNBSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSOaGVOEZbvcoKi7mWg8bjqjb6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDcwZmFhODMtMjEyZi0z NGZjLTliNGEtMTY3ZTkwYTNkMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhVnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf8zzEUjygT/qnPbQPhiLCJXBVznULt6+fs9IB7EdlM0HzbyKkLwwCo 20zGtTje97mayn95Uh4pNECzi4wGoQ10iKopk0pLx8OtojWwciM+TfgfUCcMiWK6 WIX1S+u79JT0xYNB4nbRWLXN5+HMDGjScIOCyAbgrez3oYk/p8CwZ4rvUGm8hsfD d7wJ0KzV2kg+TNxmw2pOecOr4KW3BX/i54aWqLcHirvShaWchx4YDEH9HJVStP8O JiALwk1Tctv5DXjW5YCE+L+5mc65ehePiUuEYoBe5tQFQ/t2UcwJCwgop2gj1Vbi j9JM1CxO5nQCR1rP9UlFjx874+nVyHw= -----END CERTIFICATE-----Generated at Fri Sep 25 23:53:55 2026 by rpki-client