$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27ecab0b-5c88-329e-97d6-822207593d90.roa File: 27ecab0b-5c88-329e-97d6-822207593d90.roa (raw, json) Hash identifier: 3sD+gDHK35jPRthFtheXAWXM0NgMRpmgYOyqkqu+tiI= Subject key identifier: 11:42:B0:35:DE:95:A2:1A:98:DE:BD:A6:A1:33:18:00:94:C7:C5:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2C9F43DE000C9FD741347E Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27ecab0b-5c88-329e-97d6-822207593d90.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 98.18.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:9f:43:de:00:0c:9f:d7:41:34:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=c3f08f59-8991-4273-ab46-a36e8cc08d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:b4:75:5d:9a:bf:b0:a5:a9:ba:11:e1:6f: 25:3a:ca:01:9b:d8:03:2c:97:39:99:6d:2e:65:4c: d6:d6:22:99:db:9c:e4:94:db:de:87:54:01:c4:bc: 4a:2b:89:60:fc:a8:95:a0:d8:90:0f:14:99:11:06: 12:08:40:58:ef:b7:07:32:80:d7:d2:26:e9:31:d5: cb:88:17:a4:5a:1e:2b:88:57:82:1c:d7:e2:fb:e3: 1b:9d:7b:97:db:ad:3b:ff:d9:0c:65:e9:bb:6f:ec: c2:a1:74:75:cc:0a:26:90:ed:ff:ec:44:22:cb:56: 3b:66:9d:44:c3:18:66:36:2c:01:0f:76:d9:c2:d8: 1e:ca:fe:9d:5b:e1:35:15:9d:b9:60:05:29:17:21: 77:79:e0:bd:b2:5f:93:48:ae:8c:0a:c5:ba:0f:b0: 96:47:c9:dd:86:e3:72:2f:0a:8c:4c:dc:1c:15:3e: a7:75:08:e2:4b:de:6c:2e:75:7a:db:ee:c3:b6:4f: cf:6e:86:d2:23:9c:55:a5:a7:a3:50:28:5e:1d:62: 81:75:4b:42:c1:4e:0c:15:10:1b:e8:1e:5b:ed:ad: 78:42:dc:39:ef:01:01:cd:6e:72:dd:3f:e8:3f:6a: 6a:b4:78:73:0e:cc:d4:eb:0d:a9:c8:5e:9c:f1:94: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:42:B0:35:DE:95:A2:1A:98:DE:BD:A6:A1:33:18:00:94:C7:C5:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27ecab0b-5c88-329e-97d6-822207593d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:94:41:d2:da:17:c9:8a:4e:22:1f:e4:ea:eb:62:01:70:1d: 54:14:c9:26:1d:a3:07:d6:5d:05:76:b4:71:a4:86:59:4d:ea: 9f:d3:59:fe:6c:b4:c2:2f:54:d1:52:3b:98:d2:82:c9:53:44: 0d:c6:9a:24:80:05:12:96:22:98:d8:cc:a0:dc:41:c2:ee:3f: fc:27:4b:3a:33:55:97:6b:5d:1f:4b:ad:94:21:dd:6c:b9:c8: 48:69:d0:5e:15:8b:b9:8b:cd:2b:ee:3a:b2:4c:49:e1:9e:8d: 6a:bb:c0:74:b8:49:1b:2a:7e:29:4a:47:b7:79:31:37:ff:00: b8:76:af:a7:6f:b3:ee:d8:77:e5:c0:50:92:f4:30:6f:7a:c5: 5c:a9:01:2a:01:72:89:bf:db:58:1e:a5:18:96:b1:71:83:fd: 60:f7:2f:d5:35:97:5d:68:19:76:ef:b0:8f:04:3d:78:49:e7: f3:53:86:70:b2:96:5b:4f:9c:06:5d:20:d5:9d:f8:60:55:27: e4:83:b0:77:b9:7d:75:4f:80:15:9b:1f:1a:f7:3e:c7:7e:1f: c2:5d:15:b4:21:89:9f:6b:0b:06:65:2a:1b:70:56:c7:4c:83: 30:3f:95:3f:ae:e4:ff:0e:5b:74:d2:e2:44:9b:8b:3d:3d:29: 1f:21:bc:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJ9D3gAMn9dBNH4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YzNmMDhmNTktODk5MS00MjczLWFiNDYtYTM2ZThjYzA4ZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH+0dV2av7ClqboR4W8lOsoBm9gDLJc5mW0u ZUzW1iKZ25zklNveh1QBxLxKK4lg/KiVoNiQDxSZEQYSCEBY77cHMoDX0ibpMdXL iBekWh4riFeCHNfi++MbnXuX2607/9kMZem7b+zCoXR1zAomkO3/7EQiy1Y7Zp1E wxhmNiwBD3bZwtgeyv6dW+E1FZ25YAUpFyF3eeC9sl+TSK6MCsW6D7CWR8ndhuNy LwqMTNwcFT6ndQjiS95sLnV62+7Dtk/PbobSI5xVpaejUCheHWKBdUtCwU4MFRAb 6B5b7a14Qtw57wEBzW5y3T/oP2pqtHhzDszU6w2pyF6c8ZSZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFCsDXelaIamN69pqEzGACUx8UTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjdlY2FiMGItNWM4OC0z MjllLTk3ZDYtODIyMjA3NTkzZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGUQdLaF8mKTiIf5OrrYgFwHVQUySYdowfWXQV2tHGkhllN6p/TWf5s tMIvVNFSO5jSgslTRA3GmiSABRKWIpjYzKDcQcLuP/wnSzozVZdrXR9LrZQh3Wy5 yEhp0F4Vi7mLzSvuOrJMSeGejWq7wHS4SRsqfilKR7d5MTf/ALh2r6dvs+7Yd+XA UJL0MG96xVypASoBcom/21gepRiWsXGD/WD3L9U1l11oGXbvsI8EPXhJ5/NThnCy lltPnAZdINWd+GBVJ+SDsHe5fXVPgBWbHxr3Psd+H8JdFbQhiZ9rCwZlKhtwVsdM gzA/lT+u5P8OW3TS4kSbiz09KR8hvLM= -----END CERTIFICATE-----Generated at Fri Oct 10 22:13:30 2025 by rpki-client