$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa File: f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa (raw, json) Hash identifier: UvvbaYaq/uT2XxayiRFKrLFj3HsEow9ttOJmhgWH2Mo= Subject key identifier: 8F:08:12:7C:7E:BA:12:B3:C4:7D:30:7D:A5:5E:47:17:A3:9D:09:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F497F60E5040735B5B26C4370 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.17.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:60:e5:04:07:35:b5:b2:6c:43:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7d84e6f4-c1a8-4bb8-84b9-7b0424a7d970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:15:9f:9c:e5:82:14:c8:a5:35:c3:45:88:c1: 7a:ed:74:be:6c:c8:4c:bb:30:6e:a8:f9:30:a4:00: f1:29:98:41:e3:03:4f:39:e0:61:11:af:36:c9:63: 7f:c2:12:eb:a1:5a:85:e1:44:35:db:a4:fa:ee:9d: 28:79:5a:6c:d8:5b:9d:4e:80:18:1b:e6:12:d4:e7: e7:0d:71:1e:6e:89:05:7f:35:98:15:cf:9a:cc:a8: 17:ea:d8:b3:d3:13:f7:86:80:f3:e7:1e:b6:95:a3: 25:de:d8:16:62:4a:e9:f2:f0:8c:1e:0b:11:98:7e: 40:e2:bb:81:c1:64:ad:88:9e:4a:a9:f5:31:76:6e: 18:5f:79:28:6e:f6:e0:bc:c7:5e:1d:63:bf:7d:cd: 02:53:e1:09:fa:be:97:a4:53:f9:8e:29:54:ac:ee: 51:ca:ff:3d:5b:cb:e2:b7:3d:d5:a8:72:ef:00:f3: 6d:e8:58:67:24:92:b7:04:c2:04:ba:23:d0:a7:a0: a1:dc:30:55:30:ff:0f:5e:2f:b0:67:6f:b7:c1:7c: fc:0f:77:fb:4f:27:73:5a:08:59:78:eb:7a:a1:98: 93:5c:46:e7:df:1b:f3:db:0b:c5:9d:9c:c6:5e:67: 83:34:59:9d:8c:f7:28:f9:98:2b:3e:ff:ea:98:57: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:08:12:7C:7E:BA:12:B3:C4:7D:30:7D:A5:5E:47:17:A3:9D:09:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7c:39:b2:b8:c6:49:a1:94:1e:e6:0d:9c:fb:3a:2e:06:97: 61:7a:02:06:d7:40:e7:f8:24:a1:f3:18:0b:05:a2:cf:50:7e: 1a:56:f0:91:fd:8c:ee:2f:d1:86:48:94:56:be:09:eb:3f:ed: 31:91:3c:5c:6d:d4:48:b4:c2:c7:be:34:74:0e:61:f4:58:d5: 23:58:ec:2e:16:b5:15:b5:03:c6:b6:51:7d:cb:3e:51:7e:62: eb:c9:35:83:0b:ab:f0:45:4d:d0:ba:91:71:92:5d:4c:b6:9d: 2b:ad:9d:2b:5c:58:b1:f8:49:ec:47:67:d7:d4:dc:b7:3f:ec: b2:e6:1c:e7:2d:43:a5:b8:e8:b0:d8:99:0a:ab:e0:58:fb:fd: cd:50:45:e4:6f:c3:aa:fa:75:4d:78:5c:d6:65:40:bd:17:0a: db:6c:d3:a7:9f:d9:d6:22:6f:c4:f8:ea:ba:1e:f7:02:88:cf: c2:2e:c5:68:93:35:11:be:2c:46:13:9d:95:52:80:a9:41:5c: 25:5d:5a:23:25:c7:42:e8:cc:91:52:1d:c3:22:9e:13:15:09: fa:a3:d8:d8:de:b8:e5:c2:eb:0b:a2:2f:cf:e7:c9:25:df:cc: 63:2e:ee:51:d4:4e:07:71:53:ad:cf:b2:3a:15:5e:0d:1d:15: 46:36:dd:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf2DlBAc1tbJsQ3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2Q4NGU2ZjQtYzFhOC00YmI4LTg0YjktN2IwNDI0YTdkOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghWfnOWCFMilNcNFiMF67XS+bMhMuzBuqPkw pADxKZhB4wNPOeBhEa82yWN/whLroVqF4UQ126T67p0oeVps2FudToAYG+YS1Ofn DXEebokFfzWYFc+azKgX6tiz0xP3hoDz5x62laMl3tgWYkrp8vCMHgsRmH5A4ruB wWStiJ5KqfUxdm4YX3kobvbgvMdeHWO/fc0CU+EJ+r6XpFP5jilUrO5Ryv89W8vi tz3VqHLvAPNt6FhnJJK3BMIEuiPQp6Ch3DBVMP8PXi+wZ2+3wXz8D3f7TydzWghZ eOt6oZiTXEbn3xvz2wvFnZzGXmeDNFmdjPco+ZgrPv/qmFd3YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8IEnx+uhKzxH0wfaVeRxejnQnFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjhjNzU5NTMtYzllZC0z ZGNiLTkwMmMtYjkzZjM0ZDRhMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ8ObK4xkmhlB7mDZz7Oi4Gl2F6AgbXQOf4JKHzGAsFos9QfhpW8JH9 jO4v0YZIlFa+Ces/7TGRPFxt1Ei0wse+NHQOYfRY1SNY7C4WtRW1A8a2UX3LPlF+ YuvJNYMLq/BFTdC6kXGSXUy2nSutnStcWLH4SexHZ9fU3Lc/7LLmHOctQ6W46LDY mQqr4Fj7/c1QReRvw6r6dU14XNZlQL0XCtts06ef2dYib8T46roe9wKIz8IuxWiT NRG+LEYTnZVSgKlBXCVdWiMlx0LozJFSHcMinhMVCfqj2NjeuOXC6wuiL8/nySXf zGMu7lHUTgdxU63PsjoVXg0dFUY23e8= -----END CERTIFICATE-----Generated at Fri Sep 25 05:15:52 2026 by rpki-client