$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/522b3d16-d0cc-3519-872e-aa535e2b9c9f.roa File: 522b3d16-d0cc-3519-872e-aa535e2b9c9f.roa (raw, json) Hash identifier: lICTg7gcV+2o90T8R/hzO5XxQ5sVTn01WXGVZf1BdFU= Subject key identifier: 7B:44:E5:19:78:F0:BC:A3:11:F9:CF:94:C8:E3:C7:9B:0B:93:16:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2C9F8F439EB2C90F6D1980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/522b3d16-d0cc-3519-872e-aa535e2b9c9f.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 98.23.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:9f:8f:43:9e:b2:c9:0f:6d:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=50648146-c94e-47c4-ab2f-95de1e4324d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:df:c4:29:02:61:2a:ec:99:1f:b4:b5:f3:70: 23:04:38:a6:29:0e:16:ed:42:d8:7b:4b:80:d2:5e: 6f:8e:a2:a5:16:0a:35:e8:e0:68:0e:e9:e5:7a:86: 35:72:47:40:6f:94:cf:97:26:84:bc:85:e9:a7:ce: dc:78:d6:cc:43:f3:71:7b:a3:c6:dd:f5:e6:56:19: 63:d5:cf:37:10:d3:7a:10:ff:e3:fb:8d:5b:c3:cf: 93:8a:61:ab:8a:38:79:df:a1:6b:32:7e:27:40:47: 88:bb:34:4f:02:a7:7c:bc:ec:e5:bd:37:0f:0a:64: d1:67:02:9b:c2:d1:f6:09:c5:fb:e5:67:e7:96:6e: d4:6f:74:1f:fa:36:c2:2d:f3:2b:a4:9e:08:24:1a: 1c:c6:33:3c:9f:3e:6e:40:57:66:6e:b7:cd:7a:34: 99:ed:8a:4f:ff:39:a0:19:ec:59:10:19:a6:4a:94: 83:e6:ce:c6:31:94:38:2f:51:f3:81:9c:ea:54:55: 2a:d4:b4:c9:67:c5:20:b4:6f:60:d7:43:60:36:71: 28:bc:a1:0e:9f:49:6e:bf:e8:24:12:d2:7c:e1:24: 0a:63:26:42:76:d2:61:92:b8:c0:60:ed:51:c5:d6: 93:05:f1:21:7f:0c:76:e2:89:8f:ca:48:10:22:e0: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:44:E5:19:78:F0:BC:A3:11:F9:CF:94:C8:E3:C7:9B:0B:93:16:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/522b3d16-d0cc-3519-872e-aa535e2b9c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d0:78:c8:6e:0d:44:4b:74:fe:72:ce:a5:ef:43:ff:32:56: 24:33:2f:d2:db:a3:fc:65:94:b0:04:cb:b2:1b:00:a7:3f:54: bd:58:e0:9f:6d:09:81:91:6e:7a:33:07:74:82:2c:5f:fd:5c: 6e:ed:d3:c5:c1:e5:44:ba:41:c5:29:c5:39:73:14:36:b7:f7: d8:0e:16:53:95:94:62:d5:df:63:85:2e:a4:4f:6d:83:cb:ec: ec:04:9d:88:4b:af:4c:cb:e8:74:90:8b:ca:be:2d:58:15:02: ea:d8:a6:40:62:74:4e:3f:6d:11:14:73:70:e4:37:06:23:b5: 81:92:b7:82:70:dd:16:76:7f:5a:fe:65:2b:8b:09:97:fd:4e: bf:a5:29:f7:8f:74:63:0f:e4:be:c2:c0:40:e3:66:8a:a6:d9: bc:87:b1:7d:58:da:29:4e:2e:c3:c3:5c:7b:8c:af:75:55:c1: a9:82:0a:c1:1a:aa:f2:cb:03:ea:12:71:7d:b0:91:1c:b5:40: 4b:cc:e9:af:2b:a5:31:4a:33:53:01:25:65:b4:62:76:92:55: d5:68:27:85:d3:fc:7f:db:25:0f:7c:e6:8c:61:8f:26:5a:4d: c2:44:0b:b3:b2:ce:a4:08:96:4b:59:b1:22:78:82:d5:93:89: 44:eb:a7:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJ+PQ56yyQ9tGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NTA2NDgxNDYtYzk0ZS00N2M0LWFiMmYtOTVkZTFlNDMyNGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt/EKQJhKuyZH7S183AjBDimKQ4W7ULYe0uA 0l5vjqKlFgo16OBoDunleoY1ckdAb5TPlyaEvIXpp87ceNbMQ/Nxe6PG3fXmVhlj 1c83ENN6EP/j+41bw8+TimGrijh536FrMn4nQEeIuzRPAqd8vOzlvTcPCmTRZwKb wtH2CcX75Wfnlm7Ub3Qf+jbCLfMrpJ4IJBocxjM8nz5uQFdmbrfNejSZ7YpP/zmg GexZEBmmSpSD5s7GMZQ4L1HzgZzqVFUq1LTJZ8UgtG9g10NgNnEovKEOn0luv+gk EtJ84SQKYyZCdtJhkrjAYO1RxdaTBfEhfwx24omPykgQIuAj+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtE5Rl48LyjEfnPlMjjx5sLkxbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIyYjNkMTYtZDBjYy0z NTE5LTg3MmUtYWE1MzVlMmI5YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfQeMhuDURLdP5yzqXvQ/8yViQzL9Lbo/xllLAEy7IbAKc/VL1Y4J9t CYGRbnozB3SCLF/9XG7t08XB5US6QcUpxTlzFDa399gOFlOVlGLV32OFLqRPbYPL 7OwEnYhLr0zL6HSQi8q+LVgVAurYpkBidE4/bREUc3DkNwYjtYGSt4Jw3RZ2f1r+ ZSuLCZf9Tr+lKfePdGMP5L7CwEDjZoqm2byHsX1Y2ilOLsPDXHuMr3VVwamCCsEa qvLLA+oScX2wkRy1QEvM6a8rpTFKM1MBJWW0YnaSVdVoJ4XT/H/bJQ985oxhjyZa TcJEC7OyzqQIlktZsSJ4gtWTiUTrp7A= -----END CERTIFICATE-----Generated at Fri Oct 10 20:06:56 2025 by rpki-client