$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41bc662b-447c-3f01-a427-74675a6fa6fa.roa File: 41bc662b-447c-3f01-a427-74675a6fa6fa.roa (raw, json) Hash identifier: zOhTKTjV6m/QV4jQMgj9PR4+0qGEb2Bh7OC9dMUVVZ4= Subject key identifier: 84:4C:09:9A:22:6B:11:C8:5B:84:58:F7:43:5E:75:FD:F6:E5:C6:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C46141D7A9309451E52C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41bc662b-447c-3f01-a427-74675a6fa6fa.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.16.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:46:14:1d:7a:93:09:45:1e:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=9697dea7-385f-44e2-b489-caadc454bfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:56:32:00:b7:da:27:17:ca:78:f7:26:25:2e: ea:ee:12:d8:84:1f:ce:be:51:1d:03:bf:1a:1b:13: fc:22:82:32:6c:6e:71:cc:ac:2e:b0:a9:a2:72:7b: ac:24:61:b2:15:fe:31:3c:78:47:08:39:8f:ee:44: ce:fb:1b:99:e5:52:05:42:1c:96:4b:df:2f:b1:55: 7d:6f:62:7e:ee:97:12:a2:aa:33:79:ac:d6:f5:2e: b9:9d:ad:bd:1b:11:07:74:39:ce:10:ce:0c:a1:17: 2d:42:48:11:d0:1f:f8:f3:2c:bc:2a:0b:c5:48:64: 31:b2:cc:28:93:de:52:cf:9b:f3:88:cf:59:da:af: c1:22:4d:f6:d1:54:f4:15:93:a2:27:23:16:d6:23: 5d:3b:67:8a:b2:12:fa:55:1f:41:49:ed:50:64:6c: 59:5c:57:2b:c8:5d:9b:c0:d0:60:f0:f0:b9:e7:50: bc:11:7c:bc:96:72:78:7c:f6:d0:dc:89:1f:d9:63: 65:5f:16:4f:83:eb:a2:e3:2f:8d:36:05:11:39:49: fc:14:00:fd:92:49:fa:4a:5e:b4:c8:49:b0:ad:d0: 27:c2:42:b1:f2:af:15:44:a2:6a:c7:50:32:7a:02: 2a:2b:c0:86:8b:c8:72:8e:3d:a3:0d:ce:aa:e1:37: e2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4C:09:9A:22:6B:11:C8:5B:84:58:F7:43:5E:75:FD:F6:E5:C6:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41bc662b-447c-3f01-a427-74675a6fa6fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:87:35:b2:86:7e:0d:75:28:c8:b2:d5:b0:15:19:29:4b:b4: 6e:54:46:8c:ce:44:61:e9:9e:11:92:aa:df:5b:c8:ea:e5:c8: b4:e3:67:e2:0d:62:f5:5a:b7:60:f4:ab:dc:e6:3b:8f:b5:04: 3e:95:72:ec:28:84:ca:54:e1:0c:00:a4:2d:30:a5:93:df:49: bd:54:68:ef:d2:ff:70:57:3c:3c:5c:7a:68:a0:ae:ff:92:e4: 95:94:eb:18:d6:e2:0b:22:d9:e9:3a:5e:64:29:47:e1:fd:9a: 49:f5:9c:46:a6:a7:b9:e8:cf:9e:c6:c1:0f:f8:c9:1e:4f:6c: 21:49:ce:2d:93:3d:2c:f4:70:60:d0:8d:56:b6:76:56:8c:c7: 50:b5:57:6c:31:a6:f9:8c:9e:05:a4:21:df:aa:a7:71:86:9e: a2:d0:8c:9a:92:76:a5:1c:98:d0:76:0a:5c:79:2a:41:5e:ca: 14:45:e8:34:f9:c6:8c:47:1a:c8:14:a3:20:05:d9:c8:78:22: b5:20:18:df:39:59:d8:dc:1b:aa:6d:37:ac:fc:b0:e9:75:fc: fe:b7:97:98:11:c2:30:c7:30:76:e6:86:93:dc:43:5c:b4:b2: 15:65:c1:a3:83:21:f1:4d:b3:96:a2:92:24:0f:44:80:f0:4b: 43:81:94:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEYUHXqTCUUeUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk OTY5N2RlYTctMzg1Zi00NGUyLWI0ODktY2FhZGM0NTRiZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVYyALfaJxfKePcmJS7q7hLYhB/OvlEdA78a GxP8IoIybG5xzKwusKmicnusJGGyFf4xPHhHCDmP7kTO+xuZ5VIFQhyWS98vsVV9 b2J+7pcSoqozeazW9S65na29GxEHdDnOEM4MoRctQkgR0B/48yy8KgvFSGQxsswo k95Sz5vziM9Z2q/BIk320VT0FZOiJyMW1iNdO2eKshL6VR9BSe1QZGxZXFcryF2b wNBg8PC551C8EXy8lnJ4fPbQ3Ikf2WNlXxZPg+ui4y+NNgUROUn8FAD9kkn6Sl60 yEmwrdAnwkKx8q8VRKJqx1AyegIqK8CGi8hyjj2jDc6q4TfiIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRMCZoiaxHIW4RY90Nedf325ca+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDFiYzY2MmItNDQ3Yy0z ZjAxLWE0MjctNzQ2NzVhNmZhNmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGHNbKGfg11KMiy1bAVGSlLtG5URozORGHpnhGSqt9byOrlyLTjZ+IN YvVat2D0q9zmO4+1BD6VcuwohMpU4QwApC0wpZPfSb1UaO/S/3BXPDxcemigrv+S 5JWU6xjW4gsi2ek6XmQpR+H9mkn1nEamp7noz57GwQ/4yR5PbCFJzi2TPSz0cGDQ jVa2dlaMx1C1V2wxpvmMngWkId+qp3GGnqLQjJqSdqUcmNB2Clx5KkFeyhRF6DT5 xoxHGsgUoyAF2ch4IrUgGN85WdjcG6ptN6z8sOl1/P63l5gRwjDHMHbmhpPcQ1y0 shVlwaODIfFNs5aikiQPRIDwS0OBlGQ= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:44 2025 by rpki-client