$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/877abb4a-c6fb-3cc9-82bf-8650167161b6.roa File: 877abb4a-c6fb-3cc9-82bf-8650167161b6.roa (raw, json) Hash identifier: A9dyuqdd0vHoD4ga4tcXPMldwOUNJdny5v9V0izAV/s= Subject key identifier: E7:39:F0:01:1E:4E:DB:8D:30:84:1A:3B:A0:84:F7:8D:03:86:93:B4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B3D4DEB6CD55848F5840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/877abb4a-c6fb-3cc9-82bf-8650167161b6.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.17.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b3:d4:de:b6:cd:55:84:8f:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=25edf20c-12f8-4a9b-9735-1877bf711f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f8:b7:5f:ba:53:5d:bb:da:2d:c2:d6:2c:d2: e0:04:14:09:87:b0:67:03:42:4d:63:72:d0:49:91: 04:33:62:51:20:fa:eb:f9:10:e0:db:ab:74:52:fc: d6:b1:9b:c9:a7:23:07:61:52:59:28:c3:6c:a5:b8: ce:7b:53:f7:4a:3e:d4:fa:a9:23:46:a2:2e:3c:5f: cb:91:e8:85:b7:fc:b1:f8:86:0c:3e:b8:e9:8a:52: 9b:db:e3:4b:9d:c9:81:19:20:56:5c:9b:02:45:83: 76:f6:d7:99:9b:a1:b8:9d:e8:6e:16:80:0b:16:31: 70:9a:5d:dd:0f:a7:a3:fe:b3:ea:0c:e5:da:d2:a9: ae:af:69:85:1e:a1:49:a4:37:7e:26:cb:44:2e:86: 1b:a6:0f:7b:7b:b7:50:6c:1f:57:bd:c3:6b:38:27: ca:41:d5:d3:0d:c9:63:b3:87:72:86:2c:9a:b2:f9: 17:e0:7f:af:db:4c:6f:18:9c:9f:d2:ee:88:4f:d6: 28:df:3c:bc:14:2c:6b:39:e9:43:84:43:fd:ff:a8: ae:13:de:74:b8:cf:2a:7e:83:97:2b:60:f6:40:dd: 62:6a:26:60:08:f3:19:10:df:29:f1:8d:ba:c5:64: 74:0d:f1:4f:91:a1:b1:3d:74:16:db:ec:38:dd:d4: a2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:39:F0:01:1E:4E:DB:8D:30:84:1A:3B:A0:84:F7:8D:03:86:93:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/877abb4a-c6fb-3cc9-82bf-8650167161b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0b:69:ad:db:f8:bb:f4:97:5b:63:a4:6c:10:a0:d9:3c:14: f1:f7:57:7a:6c:b3:e0:f1:01:36:e2:eb:6d:b6:a6:a0:27:24: f2:0c:1a:b7:f7:6c:9c:ca:12:4a:84:ac:6f:ab:37:a1:30:b7: 23:e1:b1:b4:3f:f8:83:1c:a0:ed:6e:67:1e:39:c2:94:f8:3a: 91:6a:52:b3:4a:b3:80:3b:c2:8c:96:96:32:61:29:66:c9:18: 16:6c:50:11:63:41:d8:44:73:ea:97:55:da:93:fa:6d:a9:cf: 3c:a3:8a:12:a4:cb:ce:52:44:c7:76:61:6b:cd:5e:2d:7a:2a: df:82:7b:8f:27:64:dc:b9:76:2a:40:6f:60:00:9a:44:ae:f5: 6b:f8:b6:40:74:4e:72:ee:37:bb:3c:d4:48:17:f2:3b:ff:c5: d1:e3:e2:04:0e:2f:e4:5c:e8:5d:50:e4:18:85:d4:6d:39:a6: 02:bd:97:2a:39:71:60:cd:49:d0:9a:b2:5e:02:f5:34:b1:e2: 0b:5f:91:f9:2b:eb:02:38:8b:7b:74:40:ac:ae:aa:ea:53:56: 42:24:76:37:60:a4:27:99:ee:36:cf:c9:b6:52:43:dd:c6:6f: 6e:5d:de:40:b7:12:3d:5d:3e:ce:a8:ed:65:b6:4e:3a:cd:53: 85:05:ee:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rPU3rbNVYSPWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MjVlZGYyMGMtMTJmOC00YTliLTk3MzUtMTg3N2JmNzExZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivi3X7pTXbvaLcLWLNLgBBQJh7BnA0JNY3LQ SZEEM2JRIPrr+RDg26t0UvzWsZvJpyMHYVJZKMNspbjOe1P3Sj7U+qkjRqIuPF/L keiFt/yx+IYMPrjpilKb2+NLncmBGSBWXJsCRYN29teZm6G4nehuFoALFjFwml3d D6ej/rPqDOXa0qmur2mFHqFJpDd+JstELoYbpg97e7dQbB9XvcNrOCfKQdXTDclj s4dyhiyasvkX4H+v20xvGJyf0u6IT9Yo3zy8FCxrOelDhEP9/6iuE950uM8qfoOX K2D2QN1iaiZgCPMZEN8p8Y26xWR0DfFPkaGxPXQW2+w43dSiIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc58AEeTtuNMIQaO6CE940DhpO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODc3YWJiNGEtYzZmYi0z Y2M5LTgyYmYtODY1MDE2NzE2MWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0Laa3b+Lv0l1tjpGwQoNk8FPH3V3pss+DxATbi6222pqAnJPIMGrf3 bJzKEkqErG+rN6EwtyPhsbQ/+IMcoO1uZx45wpT4OpFqUrNKs4A7woyWljJhKWbJ GBZsUBFjQdhEc+qXVdqT+m2pzzyjihKky85SRMd2YWvNXi16Kt+Ce48nZNy5dipA b2AAmkSu9Wv4tkB0TnLuN7s81EgX8jv/xdHj4gQOL+Rc6F1Q5BiF1G05pgK9lyo5 cWDNSdCasl4C9TSx4gtfkfkr6wI4i3t0QKyuqupTVkIkdjdgpCeZ7jbPybZSQ93G b25d3kC3Ej1dPs6o7WW2TjrNU4UF7nk= -----END CERTIFICATE-----Generated at Tue Oct 13 04:16:35 2026 by rpki-client