$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41eb1acd-5269-33e7-a21d-fb1a570d829a.roa File: 41eb1acd-5269-33e7-a21d-fb1a570d829a.roa (raw, json) Hash identifier: a0/kFShjp71csKexy74EUmBxmHcUap82iQAb6Ua6mgA= Subject key identifier: DC:F5:B0:7E:E7:3C:D4:9F:9A:36:C8:99:08:08:FA:99:DB:2E:DF:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC743CDE24DFF453D94D400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41eb1acd-5269-33e7-a21d-fb1a570d829a.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 98.21.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:43:cd:e2:4d:ff:45:3d:94:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=65fc7f72-14d4-4771-9be6-f71ddfe47587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:e7:ec:8c:0e:dc:0c:91:98:ac:4d:25:b9: c0:c5:e0:31:d3:12:d0:16:85:41:ec:6c:e6:ce:24: c2:5c:a8:8f:ce:6a:50:db:0d:c0:2c:e9:46:6b:57: a7:e1:e6:e9:c2:4a:75:af:63:c3:a2:3c:b2:15:a3: 29:ec:8d:28:5c:cb:e5:80:7a:73:3a:80:23:6a:0c: 69:35:6b:cb:ba:aa:e2:08:a9:7e:04:a5:fc:ba:68: d1:88:7c:ed:34:37:fe:7c:00:26:a5:f7:48:a2:8a: 8e:50:1f:98:bb:b9:14:e6:dc:dd:aa:f7:39:92:f0: 76:86:b6:3b:57:01:ea:e2:13:96:7e:53:28:ba:1d: fb:13:1a:f1:be:0f:02:72:ee:bf:61:5c:41:47:9a: a4:f9:42:0d:5c:16:ff:77:fc:21:86:4a:db:e3:17: b2:4a:2f:f2:e5:2f:43:7c:90:89:e2:5d:b2:1b:13: d3:a4:b9:bd:6f:0a:33:23:1c:d1:7e:61:ea:67:95: 91:e8:12:f4:a8:dc:e0:9f:8c:7c:5b:f4:67:e5:45: e2:ee:bb:25:e5:96:24:89:2a:e5:91:2f:56:59:b5: 25:f2:58:97:7a:a1:0a:67:c1:97:1a:41:5e:0a:3e: 73:77:69:ef:c0:a3:44:53:1a:44:c5:53:8d:5e:d3: 07:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F5:B0:7E:E7:3C:D4:9F:9A:36:C8:99:08:08:FA:99:DB:2E:DF:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41eb1acd-5269-33e7-a21d-fb1a570d829a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7f:87:d8:34:bc:d1:6e:da:ed:ae:a9:46:27:db:a5:3a:10: 8f:10:d7:76:94:bc:ef:ad:bd:35:19:c5:3f:aa:19:b4:c7:d9: 18:c1:7d:70:6a:1b:53:56:89:4c:fa:fe:1f:69:f4:42:0b:71: 1d:24:aa:97:e5:8e:c6:17:1d:0c:fd:37:ae:54:ac:44:88:21: eb:09:3f:d7:00:d4:78:1f:3c:00:f9:47:98:98:08:a3:cf:ae: 58:7b:98:6f:3b:78:64:9f:14:77:3b:89:08:e2:ac:51:3b:33: 96:c8:e1:66:8a:18:92:5d:d8:b1:63:5b:5e:6d:f0:4d:c2:a5: 1e:63:b7:84:c8:e3:55:15:08:34:94:74:8e:bc:a3:7f:62:7e: c5:9e:b4:db:fe:25:fe:1b:a8:16:f6:9c:95:b8:8b:58:84:81: 86:d1:c8:dd:19:94:5b:f6:00:ab:e0:b2:6c:f7:3f:11:c2:5a: 52:23:d6:85:2b:d8:3e:0c:cc:28:b8:4b:e4:e0:20:4e:90:09: 25:89:9f:d1:21:28:d9:10:79:75:80:d4:81:4d:dc:3f:c9:3c: 6b:65:fa:54:ef:38:ed:6c:5f:2f:e6:dd:0f:fc:6f:a2:91:14: 08:a6:1e:2c:58:a2:7f:e3:c7:15:56:7d:47:36:ea:8f:34:16: 38:d6:6d:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0PN4k3/RT2U1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NjVmYzdmNzItMTRkNC00NzcxLTliZTYtZjcxZGRmZTQ3NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZXn7IwO3AyRmKxNJbnAxeAx0xLQFoVB7Gzm ziTCXKiPzmpQ2w3ALOlGa1en4ebpwkp1r2PDojyyFaMp7I0oXMvlgHpzOoAjagxp NWvLuqriCKl+BKX8umjRiHztNDf+fAAmpfdIooqOUB+Yu7kU5tzdqvc5kvB2hrY7 VwHq4hOWflMouh37Exrxvg8Ccu6/YVxBR5qk+UINXBb/d/whhkrb4xeySi/y5S9D fJCJ4l2yGxPTpLm9bwozIxzRfmHqZ5WR6BL0qNzgn4x8W/Rn5UXi7rsl5ZYkiSrl kS9WWbUl8liXeqEKZ8GXGkFeCj5zd2nvwKNEUxpExVONXtMHnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz1sH7nPNSfmjbImQgI+pnbLt93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDFlYjFhY2QtNTI2OS0z M2U3LWEyMWQtZmIxYTU3MGQ4MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9/h9g0vNFu2u2uqUYn26U6EI8Q13aUvO+tvTUZxT+qGbTH2RjBfXBq G1NWiUz6/h9p9EILcR0kqpfljsYXHQz9N65UrESIIesJP9cA1HgfPAD5R5iYCKPP rlh7mG87eGSfFHc7iQjirFE7M5bI4WaKGJJd2LFjW15t8E3CpR5jt4TI41UVCDSU dI68o39ifsWetNv+Jf4bqBb2nJW4i1iEgYbRyN0ZlFv2AKvgsmz3PxHCWlIj1oUr 2D4MzCi4S+TgIE6QCSWJn9EhKNkQeXWA1IFN3D/JPGtl+lTvOO1sXy/m3Q/8b6KR FAimHixYon/jxxVWfUc26o80FjjWbUk= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:47 2025 by rpki-client