$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b8a998d-88c9-3664-a411-50b7a919f703.roa File: 4b8a998d-88c9-3664-a411-50b7a919f703.roa (raw, json) Hash identifier: N7nWgDD4ywQ1Wa/7q3jEZQpTUsNev3DbAW7gRCpnMg0= Subject key identifier: A2:56:19:D8:AE:48:82:19:24:F9:90:AE:3A:D2:EA:97:76:62:0A:AD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B48E20F74F156DB26807F1640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b8a998d-88c9-3664-a411-50b7a919f703.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 98.18.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0f:74:f1:56:db:26:80:7f:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e0d0126e-3bdf-4404-a14a-f304d96852ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:19:ad:b6:08:f4:84:b9:95:59:41:16:8d:cb: 54:9a:f5:f6:d6:0a:73:3b:46:9f:75:ee:66:d9:20: ba:f0:19:0e:5d:d1:7b:a2:c0:c9:66:07:ed:60:7f: 96:74:16:d1:07:d2:3f:3d:4f:cc:88:99:9b:58:3c: 45:27:75:da:f7:a4:d3:f5:d5:e9:9b:38:9a:90:4b: aa:f1:ed:07:ef:d1:d7:d5:89:6f:9e:a9:89:3f:88: 96:ab:0b:03:3e:57:60:96:f5:e1:ef:8d:ee:d4:22: 4b:f2:d1:34:60:3b:78:17:bc:c8:03:45:f9:d5:e6: 36:b5:3c:9f:69:52:eb:d0:fe:4f:46:79:6b:e0:79: 9d:33:57:11:c3:ed:a6:35:8c:33:73:f7:2d:b4:22: 4d:b3:76:91:62:33:04:6f:99:bb:51:a5:a9:a8:37: 39:48:ee:a9:88:16:d6:94:59:ea:76:09:21:1d:e2: f6:7f:f3:9f:c2:f3:10:86:eb:16:b3:33:ab:ac:ca: fb:bf:29:e1:11:57:9a:28:4e:e4:47:d3:7d:bd:82: 4b:83:9b:db:dd:76:1a:41:58:ac:0f:b8:50:ae:e9: 90:f9:fa:68:20:31:13:f2:30:65:d6:18:d6:89:8e: 02:21:cc:33:45:79:cc:21:c0:4b:20:58:4b:8e:1f: d3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:56:19:D8:AE:48:82:19:24:F9:90:AE:3A:D2:EA:97:76:62:0A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b8a998d-88c9-3664-a411-50b7a919f703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:41:df:7f:f4:6f:0f:ad:3a:7c:84:df:a3:9e:95:e4:51:66: f4:ec:92:fa:a5:07:46:06:66:90:fa:d1:2c:2f:87:20:ec:ab: ba:78:a3:46:1f:16:c2:82:dd:5f:b5:f3:3e:24:f0:19:72:cd: b5:20:a8:e5:c3:6d:9b:7c:cc:22:f3:44:2f:02:44:5a:57:ce: 3d:a6:87:cd:0d:e9:04:f5:41:b6:8e:23:a4:53:db:44:a6:3e: d7:31:fb:1f:8e:7f:10:b4:c6:ad:bd:8a:75:8a:de:c2:39:ba: 72:74:a8:13:57:e5:a0:c3:89:7d:43:8a:da:cd:40:64:c0:1e: e5:03:f4:5c:d3:9a:eb:5e:2b:15:4d:2c:da:f8:5b:0a:05:a4: ce:43:ad:40:c6:89:c0:07:8d:e9:9d:dc:75:c2:df:96:90:77: 68:99:c9:ce:98:5e:5a:da:3e:58:67:9c:83:83:57:2e:16:04: b0:83:bc:cb:c1:47:9e:17:3b:07:71:04:58:b5:f9:d8:66:e3: 57:96:2b:2a:d1:2f:88:7f:78:a9:9c:32:ba:3f:a1:43:e3:f9: c8:a1:8e:8d:a9:db:5e:fd:73:97:2b:ab:13:af:77:f9:87:a4: 42:05:b2:58:85:5d:18:61:fa:8f:46:dd:db:28:0c:99:31:f0: aa:d2:74:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4g908VbbJoB/FkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTBkMDEyNmUtM2JkZi00NDA0LWExNGEtZjMwNGQ5Njg1MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRmttgj0hLmVWUEWjctUmvX21gpzO0afde5m 2SC68BkOXdF7osDJZgftYH+WdBbRB9I/PU/MiJmbWDxFJ3Xa96TT9dXpmziakEuq 8e0H79HX1YlvnqmJP4iWqwsDPldglvXh743u1CJL8tE0YDt4F7zIA0X51eY2tTyf aVLr0P5PRnlr4HmdM1cRw+2mNYwzc/cttCJNs3aRYjMEb5m7UaWpqDc5SO6piBbW lFnqdgkhHeL2f/OfwvMQhusWszOrrMr7vynhEVeaKE7kR9N9vYJLg5vb3XYaQVis D7hQrumQ+fpoIDET8jBl1hjWiY4CIcwzRXnMIcBLIFhLjh/T2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJWGdiuSIIZJPmQrjrS6pd2YgqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGI4YTk5OGQtODhjOS0z NjY0LWE0MTEtNTBiN2E5MTlmNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhB33/0bw+tOnyE36OeleRRZvTskvqlB0YGZpD60SwvhyDsq7p4o0Yf FsKC3V+18z4k8BlyzbUgqOXDbZt8zCLzRC8CRFpXzj2mh80N6QT1QbaOI6RT20Sm Ptcx+x+OfxC0xq29inWK3sI5unJ0qBNX5aDDiX1DitrNQGTAHuUD9FzTmuteKxVN LNr4WwoFpM5DrUDGicAHjemd3HXC35aQd2iZyc6YXlraPlhnnIODVy4WBLCDvMvB R54XOwdxBFi1+dhm41eWKyrRL4h/eKmcMro/oUPj+cihjo2p2179c5crqxOvd/mH pEIFsliFXRhh+o9G3dsoDJkx8KrSdHw= -----END CERTIFICATE-----Generated at Fri Oct 10 22:05:59 2025 by rpki-client