$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/504bb3f9-0f56-318f-a66f-f3a42d95139c.roa File: 504bb3f9-0f56-318f-a66f-f3a42d95139c.roa (raw, json) Hash identifier: kcELop25EfTNV2KnIMayS9Kaihgo0l+CUtF9k8oj244= Subject key identifier: 10:38:6C:CA:BE:A4:16:DB:CE:6A:2C:0A:FE:3D:35:13:4A:58:B8:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C5A90C500960C7BC83600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/504bb3f9-0f56-318f-a66f-f3a42d95139c.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.19.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:5a:90:c5:00:96:0c:7b:c8:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=3da6b473-b0fc-47cb-9f83-a648601b8a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fd:3b:9b:e4:99:31:f4:e4:d8:66:ee:ec:46: 22:ab:09:9d:70:53:f7:d5:cf:e8:46:f4:7d:90:21: 46:4f:85:6b:31:d5:d4:5f:28:61:b7:11:3d:f9:89: 49:b8:33:12:d7:c6:25:58:87:50:3a:02:49:4e:87: b9:f8:8e:60:f0:65:d6:00:49:22:40:b8:17:f5:82: 3d:e2:4e:ab:8b:f2:46:b5:e1:87:43:2b:16:19:b1: 7c:4a:05:64:2a:9b:6c:4f:3c:7c:3c:72:f8:65:68: 26:7e:35:87:07:4d:d6:d8:fd:87:4d:00:94:68:8f: 19:42:4e:21:4e:79:cb:26:09:10:50:db:83:bb:c6: c7:e8:be:fd:05:27:5b:4f:32:18:0e:64:37:c8:6e: 29:06:44:78:23:23:46:38:f3:d9:02:38:59:92:4f: 41:d0:5c:4c:eb:4a:c1:9d:01:57:31:e3:36:25:44: 42:de:49:d0:8f:00:7e:3d:63:29:25:47:61:cc:3a: de:00:b8:b0:46:57:17:5a:20:a9:25:9d:d2:61:9a: 36:3c:a4:c8:0a:56:41:66:43:e0:72:e8:d8:fc:80: 0e:84:a8:4e:26:f2:4f:bf:91:03:15:1b:bf:f8:1a: 14:78:91:07:ef:e5:81:03:6e:7b:8e:23:d5:33:3f: f0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:38:6C:CA:BE:A4:16:DB:CE:6A:2C:0A:FE:3D:35:13:4A:58:B8:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/504bb3f9-0f56-318f-a66f-f3a42d95139c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:08:38:93:be:a6:08:68:33:35:d4:3f:2f:68:93:a7:e9:c3: 88:d7:04:f1:98:3d:f0:e4:92:83:cb:0c:47:df:6c:a2:c9:fd: 6c:87:f9:6e:d5:28:a9:1d:44:56:fd:67:a3:84:ae:67:0a:89: 88:5a:f1:20:d6:bf:69:7a:a7:11:51:31:68:ff:c5:8f:56:3f: 30:ad:31:5c:d1:56:d1:53:52:7b:2a:85:ec:b6:3a:fa:f3:b8: b1:dd:e4:0d:26:64:c9:70:e1:09:57:11:92:96:c4:64:24:84: 08:86:f5:6f:d0:53:b6:5d:c1:10:36:db:09:f6:51:57:e3:03: 15:b8:4f:14:fc:4b:bb:45:e3:53:6b:fc:4c:b1:f4:b1:89:9b: 4e:de:d0:f7:50:ef:63:4e:68:b7:f2:bc:9f:8b:93:3f:53:1e: 1d:1f:9f:73:e8:b7:8f:a3:bd:10:30:d7:32:d5:4f:ac:6e:fb: 34:ef:f7:04:3f:e7:5e:be:e1:33:54:91:88:ed:e7:34:3d:47: f3:71:21:85:8b:c8:4d:7c:7f:ae:c4:f9:7a:d9:e0:18:65:32: 27:ed:0d:bc:bb:0e:6e:21:2d:a0:cc:cf:c2:1e:72:71:a6:a1: b5:3e:4a:3d:86:71:de:a9:b0:0f:fd:21:79:b1:49:73:26:0f: 12:72:28:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFqQxQCWDHvINgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk M2RhNmI0NzMtYjBmYy00N2NiLTlmODMtYTY0ODYwMWI4YTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/07m+SZMfTk2Gbu7EYiqwmdcFP31c/oRvR9 kCFGT4VrMdXUXyhhtxE9+YlJuDMS18YlWIdQOgJJToe5+I5g8GXWAEkiQLgX9YI9 4k6ri/JGteGHQysWGbF8SgVkKptsTzx8PHL4ZWgmfjWHB03W2P2HTQCUaI8ZQk4h TnnLJgkQUNuDu8bH6L79BSdbTzIYDmQ3yG4pBkR4IyNGOPPZAjhZkk9B0FxM60rB nQFXMeM2JURC3knQjwB+PWMpJUdhzDreALiwRlcXWiCpJZ3SYZo2PKTIClZBZkPg cujY/IAOhKhOJvJPv5EDFRu/+BoUeJEH7+WBA257jiPVMz/w0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA4bMq+pBbbzmosCv49NRNKWLiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTA0YmIzZjktMGY1Ni0z MThmLWE2NmYtZjNhNDJkOTUxMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcIOJO+pghoMzXUPy9ok6fpw4jXBPGYPfDkkoPLDEffbKLJ/WyH+W7V KKkdRFb9Z6OErmcKiYha8SDWv2l6pxFRMWj/xY9WPzCtMVzRVtFTUnsqhey2Ovrz uLHd5A0mZMlw4QlXEZKWxGQkhAiG9W/QU7ZdwRA22wn2UVfjAxW4TxT8S7tF41Nr /Eyx9LGJm07e0PdQ72NOaLfyvJ+Lkz9THh0fn3Pot4+jvRAw1zLVT6xu+zTv9wQ/ 516+4TNUkYjt5zQ9R/NxIYWLyE18f67E+XrZ4BhlMiftDby7Dm4hLaDMz8IecnGm obU+Sj2Gcd6psA/9IXmxSXMmDxJyKBw= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:39 2025 by rpki-client