$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dc31c43-aa2b-3c17-aab9-4bd92e20f133.roa File: 2dc31c43-aa2b-3c17-aab9-4bd92e20f133.roa (raw, json) Hash identifier: FqR+BuOlnJ8WbpgAFZCn8/339Y7PUN0CSEWVins+/lE= Subject key identifier: FF:8E:32:CB:64:51:C1:23:2B:BE:68:4C:67:26:17:11:2A:15:B8:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC54144E7344C84CE3200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dc31c43-aa2b-3c17-aab9-4bd92e20f133.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 98.23.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c5:41:44:e7:34:4c:84:ce:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=0d20013d-6e0c-4309-b1f0-f19e638f0c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:13:bd:b4:3c:62:db:5b:6a:e4:d2:ad:0e: 07:9a:88:49:03:ec:51:aa:3c:1f:90:8d:6b:d1:54: fb:3a:cb:a8:56:6c:c3:20:10:c3:9e:a8:d6:0d:50: 97:e7:da:14:94:d8:4f:56:a6:76:a3:5d:54:4d:93: da:2a:b2:ce:f0:d6:15:8d:af:e3:ae:1f:4f:1f:16: 9e:ea:4f:54:ce:93:df:b1:2f:d5:a3:25:3a:a1:fc: af:d6:d2:4d:40:47:a4:c8:0e:27:b7:30:2a:32:eb: ff:ab:c2:a7:71:18:88:1e:31:39:1e:88:f8:63:0b: 6e:7e:3a:2d:31:52:74:f4:ea:f3:f2:7f:36:dd:87: 0a:d3:ac:b2:f9:6f:1f:fe:23:e1:65:c1:b3:d8:f6: 33:b2:76:77:09:95:1e:cc:6e:13:8b:26:7f:b6:7f: ec:33:8f:a3:76:d8:49:fa:56:c7:47:af:82:30:5b: 17:f9:0f:53:71:86:ad:8b:9b:2f:03:93:7c:2e:bf: 06:24:ab:ae:80:6b:6f:54:fe:d1:28:49:3e:a4:5e: 59:5f:6b:61:96:22:2b:f7:5a:0b:82:79:1e:ee:f3: 08:af:13:0b:1a:18:42:4d:12:ca:8d:26:cc:59:4b: d7:e9:f3:68:ad:42:5d:8a:a4:ef:db:03:a0:f5:42: c0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8E:32:CB:64:51:C1:23:2B:BE:68:4C:67:26:17:11:2A:15:B8:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dc31c43-aa2b-3c17-aab9-4bd92e20f133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:36:03:16:06:2a:63:da:c6:94:2f:9b:13:aa:70:f9:f7:e7: de:f6:bc:c8:a3:5e:17:c8:80:e9:ec:ff:6e:46:21:91:4e:d9: b2:1b:8c:4b:a8:eb:d4:8a:bf:34:5f:2b:a1:5f:fb:e9:f3:91: fd:c3:62:f9:09:ff:fd:52:2e:17:d8:79:47:47:3a:de:2e:22: e5:26:e2:d5:31:e6:63:cf:06:e1:fa:5f:d0:79:c7:87:dd:77: fa:5e:3a:92:77:96:79:3e:22:73:9b:f2:ca:f5:fd:35:e1:b3: 3a:a5:66:58:5a:11:04:89:a6:7b:3a:b9:2c:24:a9:ef:72:2f: 56:58:8f:63:93:e1:ac:38:74:1d:fa:03:61:bf:0d:2e:2d:ca: d0:97:da:2c:93:5a:b8:2f:25:64:b7:1c:6a:7a:60:42:79:70: 75:90:92:9d:84:7b:96:08:01:8e:57:44:d0:28:0f:95:1e:80: f7:44:d6:8d:64:b4:61:11:1b:1d:f1:be:21:21:98:ec:32:6e: b8:37:5f:60:ad:31:f2:a0:c2:e8:b9:12:b8:af:03:25:63:f0: 79:da:9c:ba:bd:2d:48:8d:14:9f:4a:71:c5:75:09:9e:69:76: fb:c9:dd:a1:6d:81:6f:70:49:2d:9d:15:54:63:99:a2:ec:d7: b7:a5:8c:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMVBROc0TITOMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MGQyMDAxM2QtNmUwYy00MzA5LWIxZjAtZjE5ZTYzOGYwYzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C8TvbQ8YttbauTSrQ4HmohJA+xRqjwfkI1r 0VT7OsuoVmzDIBDDnqjWDVCX59oUlNhPVqZ2o11UTZPaKrLO8NYVja/jrh9PHxae 6k9UzpPfsS/VoyU6ofyv1tJNQEekyA4ntzAqMuv/q8KncRiIHjE5Hoj4Ywtufjot MVJ09Orz8n823YcK06yy+W8f/iPhZcGz2PYzsnZ3CZUezG4TiyZ/tn/sM4+jdthJ +lbHR6+CMFsX+Q9TcYati5svA5N8Lr8GJKuugGtvVP7RKEk+pF5ZX2thliIr91oL gnke7vMIrxMLGhhCTRLKjSbMWUvX6fNorUJdiqTv2wOg9ULAcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+OMstkUcEjK75oTGcmFxEqFbj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRjMzFjNDMtYWEyYi0z YzE3LWFhYjktNGJkOTJlMjBmMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo2AxYGKmPaxpQvmxOqcPn35972vMijXhfIgOns/25GIZFO2bIbjEuo 69SKvzRfK6Ff++nzkf3DYvkJ//1SLhfYeUdHOt4uIuUm4tUx5mPPBuH6X9B5x4fd d/peOpJ3lnk+InOb8sr1/TXhszqlZlhaEQSJpns6uSwkqe9yL1ZYj2OT4aw4dB36 A2G/DS4tytCX2iyTWrgvJWS3HGp6YEJ5cHWQkp2Ee5YIAY5XRNAoD5UegPdE1o1k tGERGx3xviEhmOwybrg3X2CtMfKgwui5ErivAyVj8HnanLq9LUiNFJ9KccV1CZ5p dvvJ3aFtgW9wSS2dFVRjmaLs17eljF4= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:24 2025 by rpki-client