$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa File: 2a4a1f38-23a1-3489-ac54-76169819c152.roa (raw, json) Hash identifier: 5lM55UdzG+oCJv6SUd3pKaqJYggMimG/HfqiJXxdVlQ= Subject key identifier: 79:25:81:12:D1:AA:37:D1:16:C0:C2:67:9E:D5:55:FF:50:53:8D:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C48300E8DB453FC790E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.23.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:48:30:0e:8d:b4:53:fc:79:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=4586b532-e1da-4ea4-9243-d271140ab240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:bc:7e:07:8a:fc:99:d6:8a:e1:f4:10:ed: 41:c9:06:88:e3:c2:c9:17:e8:b6:70:fd:13:5f:3f: 7b:7d:f5:4d:30:40:f0:c0:75:b4:6d:4a:ff:3c:a9: b4:11:25:95:f2:c0:10:87:53:61:2d:f6:1c:90:fc: 1f:cb:48:3c:9e:80:77:c2:aa:f8:78:27:fb:89:6f: 2c:c5:46:3c:05:e3:53:df:2d:a8:a6:b5:93:a4:c1: 44:19:aa:29:bb:67:06:bf:70:6c:4b:4e:e2:12:64: 44:22:ed:41:51:3c:f1:8c:85:3c:9f:ee:11:ea:dd: 97:5c:ab:ad:37:a6:86:46:85:31:2d:79:dd:9b:cb: 59:dc:b0:15:2d:e0:94:55:d7:ac:95:40:94:1e:61: da:fb:23:33:e3:0e:b9:b9:5f:93:4f:af:10:da:a7: 7d:53:66:77:8f:c0:e8:2c:f5:a4:32:78:5e:d2:6a: 66:5e:9d:ca:63:7b:e3:bb:26:9d:11:55:0e:47:fa: 4d:49:3c:4a:1b:40:bf:04:c9:58:87:37:98:a8:99: cc:9f:6b:73:6a:50:f2:13:7f:7a:36:86:27:b3:df: e8:83:af:a0:b6:ad:54:de:0f:13:02:f8:3a:8f:c1: b5:d0:81:d8:31:d8:84:91:da:9d:ca:70:4c:d1:c5: 13:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:25:81:12:D1:AA:37:D1:16:C0:C2:67:9E:D5:55:FF:50:53:8D:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a2:29:2c:17:3a:b0:bf:16:32:1e:7a:15:51:4d:42:b5:66: b1:fc:bf:c9:bd:d1:43:9e:d4:49:65:78:98:85:71:9d:f4:e1: 69:46:86:df:9b:29:8f:c6:5b:3d:85:ec:f4:d9:dd:6f:02:d1: 1d:9b:c0:6e:dd:9d:ce:58:54:a6:d7:bb:c5:f2:73:78:50:63: ad:e1:da:01:8e:e4:56:50:c8:eb:31:4d:c9:8c:34:49:52:be: 3f:c4:6f:3c:de:b2:94:b7:85:4e:70:73:0e:42:fc:56:66:56: 03:b6:f9:31:dc:1b:f2:51:44:64:8e:1d:bf:58:7d:2b:bf:69: a9:4b:f7:a7:40:67:20:ce:5e:50:6b:71:84:73:fd:a6:8c:b0: d1:45:c4:d4:35:49:2c:5c:dd:36:52:7f:18:68:28:8d:68:ea: b5:35:a1:15:8b:38:3c:cc:40:39:c0:7c:3f:1f:27:d6:6c:45: 12:e0:3d:23:67:c1:78:dc:c4:1f:44:88:b3:54:4b:32:0c:55: 3e:23:b5:f0:24:d7:54:eb:b9:d8:52:69:63:20:16:f3:a2:28: d3:f4:2c:78:54:68:2c:f5:d4:1c:80:91:b3:15:a7:81:42:e6: 5a:0e:ec:7d:31:37:e2:7d:eb:b3:94:65:9b:ec:32:4a:4c:c8: 6a:03:7e:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEgwDo20U/x5DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NDU4NmI1MzItZTFkYS00ZWE0LTkyNDMtZDI3MTE0MGFiMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjK8fgeK/JnWiuH0EO1ByQaI48LJF+i2cP0T Xz97ffVNMEDwwHW0bUr/PKm0ESWV8sAQh1NhLfYckPwfy0g8noB3wqr4eCf7iW8s xUY8BeNT3y2oprWTpMFEGaopu2cGv3BsS07iEmREIu1BUTzxjIU8n+4R6t2XXKut N6aGRoUxLXndm8tZ3LAVLeCUVdeslUCUHmHa+yMz4w65uV+TT68Q2qd9U2Z3j8Do LPWkMnhe0mpmXp3KY3vjuyadEVUOR/pNSTxKG0C/BMlYhzeYqJnMn2tzalDyE396 NoYns9/og6+gtq1U3g8TAvg6j8G10IHYMdiEkdqdynBM0cUTiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHklgRLRqjfRFsDCZ57VVf9QU40uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0YTFmMzgtMjNhMS0z NDg5LWFjNTQtNzYxNjk4MTljMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeiKSwXOrC/FjIeehVRTUK1ZrH8v8m90UOe1ElleJiFcZ304WlGht+b KY/GWz2F7PTZ3W8C0R2bwG7dnc5YVKbXu8Xyc3hQY63h2gGO5FZQyOsxTcmMNElS vj/EbzzespS3hU5wcw5C/FZmVgO2+THcG/JRRGSOHb9YfSu/aalL96dAZyDOXlBr cYRz/aaMsNFFxNQ1SSxc3TZSfxhoKI1o6rU1oRWLODzMQDnAfD8fJ9ZsRRLgPSNn wXjcxB9EiLNUSzIMVT4jtfAk11TrudhSaWMgFvOiKNP0LHhUaCz11ByAkbMVp4FC 5loO7H0xN+J967OUZZvsMkpMyGoDfmo= -----END CERTIFICATE-----Generated at Sat Oct 11 00:24:08 2025 by rpki-client