$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa File: 38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa (raw, json) Hash identifier: uYXjNQRusAJ22UK4QoX7w6Ltu/zWD9izf+zUe+V3D9M= Subject key identifier: 5A:17:A9:6B:39:86:B1:33:CC:83:87:62:59:72:F0:99:25:95:4B:A4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C4762942508741B89EFE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.21.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:47:62:94:25:08:74:1b:89:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=f4850293-eae3-4574-beb6-7e51725c4aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:8c:75:55:6e:15:14:d9:d6:c0:ab:1d:8b: 60:c1:40:b2:14:d7:ef:99:9f:b4:60:f3:b6:67:f3: 12:33:75:5f:ac:19:22:4c:b2:6d:0a:cf:ef:fc:25: 19:af:ba:60:b9:f1:5c:0f:3d:38:20:f6:e2:37:c7: 63:39:ec:13:19:89:6b:f7:de:13:28:35:19:d5:57: 88:64:bf:83:e9:c1:cd:a0:2f:36:bd:d6:f9:97:20: 92:00:4b:56:64:b4:95:73:08:25:66:3d:70:94:e8: 97:3d:b1:84:70:59:b6:54:6a:6c:54:00:51:93:72: 8b:99:b7:a6:eb:57:f3:af:49:b9:db:d3:05:69:c1: 05:2c:29:34:1d:63:bc:a2:fe:e3:20:b0:b7:aa:3d: 6b:86:ea:3e:4c:f1:8b:a0:73:18:8f:e8:23:84:00: 5e:4e:94:ec:dc:c7:68:6b:b3:b7:62:28:39:48:1e: 5b:9a:fb:c7:13:a0:e7:97:af:3b:e1:0d:66:70:8c: 13:ee:c7:cd:e5:1f:61:f4:63:7f:48:52:f4:ed:27: b0:d5:99:f6:db:1c:11:4c:96:fa:ce:26:2d:4e:ca: e3:a3:12:a5:80:43:7d:0d:63:d8:54:c7:0e:83:5f: ca:eb:df:a4:3f:ed:f0:30:92:21:3b:ba:e0:e9:c0: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:17:A9:6B:39:86:B1:33:CC:83:87:62:59:72:F0:99:25:95:4B:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ee:be:2b:b5:c1:c4:78:0d:43:25:a6:14:51:14:59:c1:f9: 02:7d:20:d3:37:d3:62:b7:7c:0c:26:ba:7d:c3:7b:82:30:98: e3:86:b6:3b:6e:83:e0:57:c0:30:13:48:d7:13:aa:26:32:8c: e5:00:fe:e3:e7:ff:29:32:e2:99:3d:f7:d5:9e:68:4c:c4:ed: ff:5f:64:96:01:87:ee:b2:41:e4:a6:a1:c1:ff:b5:37:50:79: 2e:62:4e:9c:27:0d:dd:4a:f9:96:3f:43:84:02:9a:95:73:29: 98:dc:00:b6:eb:02:cb:6d:b3:fb:55:37:19:74:33:ec:20:5e: 73:73:2c:ce:53:0f:9f:46:ed:ca:69:ba:b1:91:76:a6:b7:45: 00:bf:a7:f7:45:35:b3:17:ed:1f:c5:b8:ac:4a:82:16:d3:59: b6:82:6d:76:8d:3f:50:e0:cc:d3:2f:c5:c3:9b:57:f1:9a:13: 8e:4b:3e:15:7e:38:58:4e:b6:6e:85:c0:f3:b6:bf:9d:78:70: c8:eb:07:36:33:fd:7f:93:e5:24:e0:d3:5d:ec:8b:6f:f4:72: e5:40:8e:f6:e3:35:38:b0:3b:7d:e2:2c:5f:aa:a1:18:bd:d6: 7a:61:08:32:4f:70:38:c9:96:4f:b5:18:d0:a9:85:59:1e:c8: d5:f0:cd:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEdilCUIdBuJ7+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjQ4NTAyOTMtZWFlMy00NTc0LWJlYjYtN2U1MTcyNWM0YWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEiMdVVuFRTZ1sCrHYtgwUCyFNfvmZ+0YPO2 Z/MSM3VfrBkiTLJtCs/v/CUZr7pgufFcDz04IPbiN8djOewTGYlr994TKDUZ1VeI ZL+D6cHNoC82vdb5lyCSAEtWZLSVcwglZj1wlOiXPbGEcFm2VGpsVABRk3KLmbem 61fzr0m529MFacEFLCk0HWO8ov7jILC3qj1rhuo+TPGLoHMYj+gjhABeTpTs3Mdo a7O3Yig5SB5bmvvHE6Dnl6874Q1mcIwT7sfN5R9h9GN/SFL07Sew1Zn22xwRTJb6 ziYtTsrjoxKlgEN9DWPYVMcOg1/K69+kP+3wMJIhO7rg6cCAlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoXqWs5hrEzzIOHYlly8JkllUukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzhmZTgzZTgtMmJhMC0z ZDkyLWJlZTMtMjliYjIwN2E5NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPuviu1wcR4DUMlphRRFFnB+QJ9INM302K3fAwmun3De4IwmOOGtjtu g+BXwDATSNcTqiYyjOUA/uPn/yky4pk999WeaEzE7f9fZJYBh+6yQeSmocH/tTdQ eS5iTpwnDd1K+ZY/Q4QCmpVzKZjcALbrAstts/tVNxl0M+wgXnNzLM5TD59G7cpp urGRdqa3RQC/p/dFNbMX7R/FuKxKghbTWbaCbXaNP1DgzNMvxcObV/GaE45LPhV+ OFhOtm6FwPO2v514cMjrBzYz/X+T5STg013si2/0cuVAjvbjNTiwO33iLF+qoRi9 1nphCDJPcDjJlk+1GNCphVkeyNXwzaw= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:37 2025 by rpki-client