$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/98d21f17-4a0c-36f6-a070-6808cb50ec98.roa File: 98d21f17-4a0c-36f6-a070-6808cb50ec98.roa (raw, json) Hash identifier: TPv3SkaV/9KDeJ0WI4zFCcCVNjroPg8UG3g13Sy8rDc= Subject key identifier: 6C:3E:1D:19:EB:AF:56:69:C4:E4:55:08:48:DD:65:55:7F:EB:A3:D5 Certificate issuer: /CN=954e2959-b160-4ffa-86b4-aaa94863154c Certificate serial: 010D0C9F4328584F3E47D659F1CFFF542B6AF94C Authority key identifier: 7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/98d21f17-4a0c-36f6-a070-6808cb50ec98.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 3801 IP address blocks: 149.248.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:d6:59:f1:cf:ff:54:2b:6a:f9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954e2959-b160-4ffa-86b4-aaa94863154c Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=c33c44c7-b8e2-426b-b573-e97872a77bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:18:f5:f5:38:bb:34:57:f3:7c:39:ab:47:e2: 9a:1d:d1:14:d2:49:16:db:f2:63:5d:1e:28:49:df: 14:ef:7b:4d:bd:65:48:e3:bb:95:8e:c9:f0:7e:89: 4f:5b:e0:15:22:69:7a:73:2b:15:1f:c0:51:9d:f0: e3:7b:07:83:e8:48:7d:99:7f:26:09:3e:5e:e0:bb: 63:92:ac:aa:f0:d9:2b:22:41:75:ba:d4:e9:bf:97: 19:12:ef:7b:b7:58:b7:28:5b:33:61:3a:13:65:cd: 4a:4d:13:02:bb:db:bb:26:f3:49:b8:26:ff:9a:2a: cc:19:e4:c2:6a:5e:08:42:cb:47:ed:42:93:84:03: 81:7f:48:99:fd:49:ff:82:d4:10:f1:a9:b0:45:76: 53:3d:76:57:99:12:50:3a:2f:87:6d:2e:82:c1:a1: ce:de:de:9a:b7:3b:e3:c6:de:15:d9:bd:7e:bb:15: 87:7c:cc:29:cf:7b:82:16:b1:61:7d:b9:00:1f:a2: e5:99:fe:6e:d7:ac:7d:ec:87:2f:2b:d7:e4:1f:40: e7:22:05:10:b0:15:f0:ce:73:98:05:a7:14:3a:e8: 7f:80:b1:54:cb:8d:17:d2:c1:fa:70:a0:2c:f7:0c: c9:b0:da:11:a2:23:e6:65:88:a2:f5:97:18:45:80: 0c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3E:1D:19:EB:AF:56:69:C4:E4:55:08:48:DD:65:55:7F:EB:A3:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/98d21f17-4a0c-36f6-a070-6808cb50ec98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl X509v3 Authority Key Identifier: keyid:7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer sbgp-ipAddrBlock: critical IPv4: 149.248.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:70:c4:7e:c0:c3:5b:63:d5:df:76:83:36:97:d2:d6:be:a4: 52:4a:51:3b:a6:9d:b4:04:ec:c1:17:30:b7:44:e5:54:07:91: 32:0e:1c:41:0d:5c:69:a5:01:de:4c:19:6b:b1:4b:8c:39:ea: b9:e5:05:1b:5f:40:c7:9f:37:3d:8a:64:f9:8b:f7:8d:c2:2c: 34:08:71:58:25:d8:c5:27:4c:e1:11:da:0e:f2:b3:bb:fd:81: 2d:a6:55:37:85:bb:29:c6:a5:35:f7:cd:8e:f1:65:ad:8f:95: 4c:f5:fa:7f:1d:90:21:5a:f9:15:45:eb:3c:3e:02:59:90:ed: d7:83:0e:0a:31:fa:02:49:23:2b:ec:b5:a9:8a:76:2b:0f:23: f6:27:73:9f:de:1c:9f:5d:1e:d6:66:62:2d:19:e9:01:de:f4: 80:39:ce:58:ce:6a:e8:28:ec:92:f1:79:f7:51:75:ae:0b:33: c1:09:3f:37:7f:de:3e:43:16:94:1f:d2:45:db:c1:98:e6:97: f2:50:bc:d8:8b:c3:74:44:81:c5:06:3c:ed:ab:04:b9:08:bb: 7c:db:60:2b:49:2e:19:b0:ba:41:c5:f7:62:32:22:8b:c1:2c: 5a:0f:32:95:b6:0b:98:60:2b:93:3f:e7:80:77:c3:53:80:96: 3e:6d:6b:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9ZZ8c//VCtq+UwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0ZTI5NTktYjE2MC00ZmZhLTg2YjQtYWFhOTQ4NjMx NTRjMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YzMzYzQ0YzctYjhlMi00MjZiLWI1NzMtZTk3ODcyYTc3YmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRj19Ti7NFfzfDmrR+KaHdEU0kkW2/JjXR4o Sd8U73tNvWVI47uVjsnwfolPW+AVIml6cysVH8BRnfDjeweD6Eh9mX8mCT5e4Ltj kqyq8NkrIkF1utTpv5cZEu97t1i3KFszYToTZc1KTRMCu9u7JvNJuCb/mirMGeTC al4IQstH7UKThAOBf0iZ/Un/gtQQ8amwRXZTPXZXmRJQOi+HbS6CwaHO3t6atzvj xt4V2b1+uxWHfMwpz3uCFrFhfbkAH6Llmf5u16x97IcvK9fkH0DnIgUQsBXwznOY BacUOuh/gLFUy40X0sH6cKAs9wzJsNoRoiPmZYii9ZcYRYAM2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGw+HRnrr1ZpxORVCEjdZVV/66PVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NTRl Mjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5NDg2MzE1NGMvOThkMjFmMTctNGEwYy0z NmY2LWEwNzAtNjgwOGNiNTBlYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTU0ZTI5NTktYjE2MC00ZmZhLTg2 YjQtYWFhOTQ4NjMxNTRjLzk1NGUyOTU5LWIxNjAtNGZmYS04NmI0LWFhYTk0ODYz MTU0Yy5jcmwwHwYDVR0jBBgwFoAUeg2dZlrNT1TbZQQUKcsFDdl9UbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NTRlMjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5 NDg2MzE1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlfiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZwxH7Aw1tj1d92gzaX0ta+pFJKUTumnbQE7MEXMLdE5VQHkTIOHEEN XGmlAd5MGWuxS4w56rnlBRtfQMefNz2KZPmL943CLDQIcVgl2MUnTOER2g7ys7v9 gS2mVTeFuynGpTX3zY7xZa2PlUz1+n8dkCFa+RVF6zw+AlmQ7deDDgox+gJJIyvs tamKdisPI/Ync5/eHJ9dHtZmYi0Z6QHe9IA5zljOaugo7JLxefdRda4LM8EJPzd/ 3j5DFpQf0kXbwZjml/JQvNiLw3REgcUGPO2rBLkIu3zbYCtJLhmwukHF92IyIovB LFoPMpW2C5hgK5M/54B3w1OAlj5ta5I= -----END CERTIFICATE-----Generated at Fri Oct 9 11:42:01 2026 by rpki-client