$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300ad685-08b7-3198-92e5-433781ca03bb.roa File: 300ad685-08b7-3198-92e5-433781ca03bb.roa (raw, json) Hash identifier: IdfWkb9i3e33JCPVGydPlJWsNGz9cGjnRjxUgn74xo4= Subject key identifier: 54:20:A1:C1:28:7E:8C:BD:7C:06:28:5C:B5:33:0C:DD:40:3E:22:C6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B4A4736AD59EF438D3FFDC580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300ad685-08b7-3198-92e5-433781ca03bb.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 7029 IP address blocks: 98.18.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:36:ad:59:ef:43:8d:3f:fd:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=6f16851e-c51b-4aa7-94ee-381d89a7803b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bd:03:86:d0:d8:61:33:2a:0f:69:bd:dd:ac: b8:b6:10:d4:67:7a:8d:52:ee:e6:39:01:2c:42:8f: ae:08:d0:3b:79:8e:2f:66:19:e3:e9:6b:d5:b7:d6: c9:22:06:17:a6:0c:51:64:e6:86:8a:30:81:13:af: 2b:78:fc:e7:f2:97:e2:8a:52:27:f6:92:e8:7b:06: 4a:52:0c:2a:d5:66:6c:5d:65:bf:ad:fe:cd:f2:17: 64:a4:5b:74:e7:ae:3d:c8:3a:50:ea:cc:97:48:a3: 3c:3c:73:03:3b:17:f8:dc:aa:a8:b4:06:5b:d4:8b: 2e:b5:48:33:c3:a3:7c:86:9a:50:d5:52:67:ed:7c: 13:f6:fa:26:82:75:be:8d:35:6b:4a:ce:aa:44:14: 01:7c:ae:f9:fb:0a:05:45:55:6e:aa:1e:c0:09:4f: 7b:86:a7:61:3c:dc:33:86:8c:b8:76:bd:93:96:bf: 14:27:1f:95:b1:db:16:8e:31:33:77:f4:af:de:ae: 8f:5e:1a:4b:74:3d:e7:dc:fa:e3:ef:1b:4d:e5:71: c0:88:0e:d1:64:38:c8:34:25:b3:c3:41:a7:6d:8f: a1:cc:a9:b1:3b:e4:94:97:22:96:eb:77:e5:0f:a9: 9a:85:c6:82:d0:df:1b:0b:06:00:17:fa:58:25:0f: 9c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:20:A1:C1:28:7E:8C:BD:7C:06:28:5C:B5:33:0C:DD:40:3E:22:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300ad685-08b7-3198-92e5-433781ca03bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a3:8c:76:8c:45:95:63:d6:df:a6:8b:b8:3b:ba:aa:4a:10: 81:d9:3b:e1:74:8a:5d:61:f5:85:ab:d4:94:d1:e3:25:dc:13: 2b:d0:3f:1b:5a:c2:62:9d:1a:65:9a:b0:fd:79:e5:a8:08:e8: 43:6f:62:40:23:51:f9:3e:62:6d:bf:2a:15:e2:d9:73:e3:49: 71:1b:df:af:47:f3:a4:02:15:3b:49:19:1a:26:f0:41:4d:cb: 85:38:f1:2b:de:7c:85:d9:8c:a0:fd:33:63:fb:87:b7:31:54: 89:df:8f:b1:8e:42:ac:ef:78:9d:14:a1:8d:99:a2:87:cd:7b: 5c:6f:da:17:b9:03:69:04:ee:e5:92:0a:1e:ee:f2:6c:12:d8: a4:aa:7a:55:1e:72:32:dc:77:57:11:58:8b:73:82:29:81:6c: 5e:12:d3:2b:13:3c:ba:15:85:1b:d4:f7:83:d2:5d:3a:c8:fc: a8:e9:d8:9c:21:b8:72:6f:7f:42:cf:3e:2e:1f:06:04:02:2d: a1:61:21:1f:aa:8e:b6:f1:2d:e4:fc:66:55:85:aa:d6:32:e4: c8:62:21:b5:61:56:08:5c:c0:53:15:98:e7:a2:06:64:5c:34: d6:9f:7e:da:9c:b3:5d:45:f1:9d:c2:f1:ef:39:86:b4:b2:dd: 9f:a6:dc:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRzatWe9DjT/9xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NmYxNjg1MWUtYzUxYi00YWE3LTk0ZWUtMzgxZDg5YTc4MDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr0DhtDYYTMqD2m93ay4thDUZ3qNUu7mOQEs Qo+uCNA7eY4vZhnj6WvVt9bJIgYXpgxRZOaGijCBE68rePzn8pfiilIn9pLoewZK Ugwq1WZsXWW/rf7N8hdkpFt05649yDpQ6syXSKM8PHMDOxf43KqotAZb1IsutUgz w6N8hppQ1VJn7XwT9vomgnW+jTVrSs6qRBQBfK75+woFRVVuqh7ACU97hqdhPNwz hoy4dr2Tlr8UJx+VsdsWjjEzd/Sv3q6PXhpLdD3n3Prj7xtN5XHAiA7RZDjINCWz w0GnbY+hzKmxO+SUlyKW63flD6mahcaC0N8bCwYAF/pYJQ+cSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQgocEofoy9fAYoXLUzDN1APiLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzAwYWQ2ODUtMDhiNy0z MTk4LTkyZTUtNDMzNzgxY2EwM2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImjjHaMRZVj1t+mi7g7uqpKEIHZO+F0il1h9YWr1JTR4yXcEyvQPxta wmKdGmWasP155agI6ENvYkAjUfk+Ym2/KhXi2XPjSXEb369H86QCFTtJGRom8EFN y4U48SvefIXZjKD9M2P7h7cxVInfj7GOQqzveJ0UoY2ZoofNe1xv2he5A2kE7uWS Ch7u8mwS2KSqelUecjLcd1cRWItzgimBbF4S0ysTPLoVhRvU94PSXTrI/Kjp2Jwh uHJvf0LPPi4fBgQCLaFhIR+qjrbxLeT8ZlWFqtYy5MhiIbVhVghcwFMVmOeiBmRc NNafftqcs11F8Z3C8e85hrSy3Z+m3K4= -----END CERTIFICATE-----Generated at Fri Oct 10 17:52:20 2025 by rpki-client