$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3291ce7e-1c70-365c-8047-a30a9edf18a4.roa File: 3291ce7e-1c70-365c-8047-a30a9edf18a4.roa (raw, json) Hash identifier: JbK6W1trvtcHINJ+wHun1CLiGBcORBcxlqLLJqFI0HY= Subject key identifier: A5:7E:7A:37:BA:06:46:40:01:7F:52:C5:5F:97:7C:28:FE:F2:D4:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C68569DF18F767F452D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3291ce7e-1c70-365c-8047-a30a9edf18a4.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.22.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:68:56:9d:f1:8f:76:7f:45:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=d8332278-fdbb-4718-b718-ce5c0f7ca0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:26:8d:77:94:a4:c1:7e:42:42:a2:e2:b3:47: f0:1b:c2:ae:67:f5:2e:cb:42:0d:cb:75:4d:54:f9: 03:19:f1:41:c9:2b:49:62:62:8f:b5:a7:de:44:ca: 3e:25:5e:88:76:1d:4a:13:6c:05:0b:ec:aa:de:c6: 96:51:d9:ca:bd:62:e3:8d:a9:73:6c:d3:42:3c:2b: 67:3b:b6:ce:1a:88:09:39:99:c9:6b:08:e2:21:a2: b0:95:60:b2:3e:ac:e0:fa:da:1b:97:03:61:65:c1: 91:6f:30:17:21:b0:27:30:bf:3a:62:fd:2f:67:fd: 33:23:43:e3:c6:d3:b7:3a:67:59:05:bb:4f:ab:e9: c2:15:38:24:90:b1:8b:94:f9:97:37:93:1c:e0:39: 51:d9:dd:7a:6b:e6:f7:7d:9a:2e:28:52:15:22:e7: da:5a:07:bc:a7:9f:a1:13:92:cf:e9:55:89:b5:03: e3:5d:fd:34:c1:0b:5e:d0:d1:ef:27:a8:c8:0a:71: 82:5c:55:fa:ab:56:87:ab:67:e7:21:fa:45:94:ba: 5f:0f:80:a1:54:1b:c0:1c:16:52:e2:43:8f:f9:dd: 03:84:2d:cf:d3:98:ad:4d:06:c0:00:56:b3:dc:80: 70:19:8e:c9:9d:cf:88:29:ac:b2:db:1a:69:4b:fb: 8d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7E:7A:37:BA:06:46:40:01:7F:52:C5:5F:97:7C:28:FE:F2:D4:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3291ce7e-1c70-365c-8047-a30a9edf18a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:73:b3:43:1f:aa:61:df:1e:7d:4e:74:b6:8a:86:f0:71:fb: 83:fc:87:05:ae:9d:f5:2d:be:e6:33:23:b5:de:46:b2:cd:e5: ec:a1:5a:94:64:8e:7d:8b:a0:82:53:f5:4b:a8:bf:d7:30:1b: 1c:2d:f4:e8:f7:0a:0f:f8:c5:07:0b:ba:e8:16:90:dd:61:8f: 8a:ec:32:7c:f1:08:a6:be:dc:7b:2f:09:3d:83:08:b1:29:3c: 05:15:7c:d8:f8:dc:d9:38:6e:27:9f:80:20:bf:a2:30:a3:37: 74:f6:ac:7f:69:70:dd:80:c3:b0:af:d7:07:4e:ff:77:97:de: 19:09:20:05:d9:63:ee:51:3e:8b:c7:09:2b:6b:62:02:69:17: ea:33:7f:26:a3:79:a5:37:9f:4b:5d:f0:33:a1:5f:4b:3e:a0: 39:57:6e:1c:b0:13:a7:3e:d5:b2:44:ec:72:7a:ff:b3:7b:1c: 1f:09:4a:6d:20:be:bd:8a:86:e3:ee:95:5e:bf:4d:86:ba:3a: 97:c1:bd:4a:d7:58:3c:54:2c:c6:f9:23:f0:53:bd:3d:e9:2f: 8d:b6:cb:c4:ef:8f:a5:e4:7e:de:59:7f:f1:f0:f3:46:de:a8: 78:7c:ab:67:93:b4:ba:84:20:fd:57:f1:71:d3:49:1b:4f:1e: 02:73:75:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HGhWnfGPdn9FLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk ZDgzMzIyNzgtZmRiYi00NzE4LWI3MTgtY2U1YzBmN2NhMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiaNd5SkwX5CQqLis0fwG8KuZ/Uuy0INy3VN VPkDGfFByStJYmKPtafeRMo+JV6Idh1KE2wFC+yq3saWUdnKvWLjjalzbNNCPCtn O7bOGogJOZnJawjiIaKwlWCyPqzg+toblwNhZcGRbzAXIbAnML86Yv0vZ/0zI0Pj xtO3OmdZBbtPq+nCFTgkkLGLlPmXN5Mc4DlR2d16a+b3fZouKFIVIufaWge8p5+h E5LP6VWJtQPjXf00wQte0NHvJ6jICnGCXFX6q1aHq2fnIfpFlLpfD4ChVBvAHBZS 4kOP+d0DhC3P05itTQbAAFaz3IBwGY7Jnc+IKayy2xppS/uNPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV+eje6BkZAAX9SxV+XfCj+8tREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzI5MWNlN2UtMWM3MC0z NjVjLTgwNDctYTMwYTllZGYxOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1zs0MfqmHfHn1OdLaKhvBx+4P8hwWunfUtvuYzI7XeRrLN5eyhWpRk jn2LoIJT9Uuov9cwGxwt9Oj3Cg/4xQcLuugWkN1hj4rsMnzxCKa+3HsvCT2DCLEp PAUVfNj43Nk4biefgCC/ojCjN3T2rH9pcN2Aw7Cv1wdO/3eX3hkJIAXZY+5RPovH CStrYgJpF+ozfyajeaU3n0td8DOhX0s+oDlXbhywE6c+1bJE7HJ6/7N7HB8JSm0g vr2KhuPulV6/TYa6OpfBvUrXWDxULMb5I/BTvT3pL422y8Tvj6Xkft5Zf/Hw80be qHh8q2eTtLqEIP1X8XHTSRtPHgJzdXg= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:32 2025 by rpki-client