$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63997c26-dc9a-365b-9697-ca8e4f07b6d7.roa File: 63997c26-dc9a-365b-9697-ca8e4f07b6d7.roa (raw, json) Hash identifier: uDCHARZXInaquCMseKLTk5cYHd9LNx9QParONkvl8W4= Subject key identifier: 65:B8:05:1A:F9:4C:57:21:0D:78:12:98:9D:1B:AD:34:33:39:E0:49 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C4690C638A0FE56C3E110 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63997c26-dc9a-365b-9697-ca8e4f07b6d7.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.19.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:46:90:c6:38:a0:fe:56:c3:e1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=721c5d4f-0582-413c-b981-2d03cf42fce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:47:db:e3:68:64:6c:1a:77:02:7d:c5:82:80: 4e:30:fc:2a:73:11:2d:5c:d1:99:a6:c3:9c:e3:9f: c0:e6:39:da:92:31:2f:14:27:2b:b3:61:72:03:86: 71:b7:29:3d:3b:23:98:80:70:7d:23:0b:e2:97:12: f6:cf:96:01:e8:4b:9e:7d:25:20:33:46:ff:b4:0f: 46:78:b3:93:e5:d3:47:51:8c:43:0f:16:c6:7c:ff: 7f:79:e4:5f:6a:7c:b4:56:8c:16:06:c6:d4:f4:51: be:cf:64:b5:62:8e:41:f9:4b:f5:ea:d7:3b:3c:80: 25:93:96:30:b2:d7:a3:ed:c0:60:3f:37:9b:b7:15: 57:9f:a8:84:39:87:dc:1f:98:af:71:42:94:8f:b0: e8:dd:1f:3d:f2:27:3d:a0:ef:c7:ef:eb:11:0a:f5: c9:74:64:43:b4:4b:ad:a3:af:50:24:4d:c3:2c:11: fa:0a:03:da:66:29:22:0c:21:dc:df:86:89:9f:62: eb:8c:de:2e:c4:9f:64:25:08:57:55:ab:c0:cc:2b: ff:cf:20:00:39:1d:b6:df:0c:86:f3:9f:fc:53:27: f1:2d:fa:34:4f:35:da:9f:7b:88:ea:10:1b:1d:12: bc:2c:0d:4b:06:ff:c7:4a:a4:03:e0:b7:a9:19:1f: 2e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B8:05:1A:F9:4C:57:21:0D:78:12:98:9D:1B:AD:34:33:39:E0:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63997c26-dc9a-365b-9697-ca8e4f07b6d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:3c:a7:52:8d:57:8b:a3:2d:32:d2:84:f3:6f:60:18:0a:1d: ce:29:9d:38:c7:91:7e:b3:80:83:66:66:fb:01:73:63:fe:fa: 3e:fe:34:13:b6:35:fb:48:ea:6c:0b:ac:66:3b:3c:22:78:56: 6d:e8:d9:3f:d6:85:83:39:30:c8:3a:9f:cf:27:01:87:4e:17: 96:dc:44:b5:4a:12:c1:86:a0:19:38:22:6b:33:61:66:7c:1e: a1:68:3a:bc:b1:ef:fc:ad:e2:dc:b0:cb:70:f5:75:40:64:48: 8e:42:e5:7b:2a:23:41:f6:f1:5f:19:0d:15:78:61:1b:8e:51: c5:43:c0:c9:d6:a0:e4:05:57:62:31:a2:a5:b1:35:61:65:f1: 86:01:5b:03:e9:9d:56:7c:e9:de:ad:7d:61:38:f8:c2:f0:97: 79:91:7f:da:6c:b8:f0:cd:57:da:b5:16:53:77:b7:b1:30:c1: 5c:30:42:6f:9b:ac:16:18:1b:81:d4:db:17:c0:4e:c9:e6:b8: 3b:34:3a:4d:e4:23:87:b1:74:62:76:c3:6d:0b:87:1a:fb:9b: 69:e8:10:92:d8:fc:31:5c:c8:63:b2:46:bf:07:df:fe:da:74: 35:22:bd:05:a1:83:28:9b:b1:13:fb:07:b1:02:8d:03:e8:99: 80:da:4c:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEaQxjig/lbD4RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NzIxYzVkNGYtMDU4Mi00MTNjLWI5ODEtMmQwM2NmNDJmY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Efb42hkbBp3An3FgoBOMPwqcxEtXNGZpsOc 45/A5jnakjEvFCcrs2FyA4Zxtyk9OyOYgHB9IwvilxL2z5YB6EuefSUgM0b/tA9G eLOT5dNHUYxDDxbGfP9/eeRfany0VowWBsbU9FG+z2S1Yo5B+Uv16tc7PIAlk5Yw stej7cBgPzebtxVXn6iEOYfcH5ivcUKUj7Do3R898ic9oO/H7+sRCvXJdGRDtEut o69QJE3DLBH6CgPaZikiDCHc34aJn2LrjN4uxJ9kJQhXVavAzCv/zyAAOR223wyG 85/8UyfxLfo0TzXan3uI6hAbHRK8LA1LBv/HSqQD4LepGR8u0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGW4BRr5TFchDXgSmJ0brTQzOeBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjM5OTdjMjYtZGM5YS0z NjViLTk2OTctY2E4ZTRmMDdiNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo8p1KNV4ujLTLShPNvYBgKHc4pnTjHkX6zgINmZvsBc2P++j7+NBO2 NftI6mwLrGY7PCJ4Vm3o2T/WhYM5MMg6n88nAYdOF5bcRLVKEsGGoBk4ImszYWZ8 HqFoOryx7/yt4tywy3D1dUBkSI5C5XsqI0H28V8ZDRV4YRuOUcVDwMnWoOQFV2Ix oqWxNWFl8YYBWwPpnVZ86d6tfWE4+MLwl3mRf9psuPDNV9q1FlN3t7EwwVwwQm+b rBYYG4HU2xfATsnmuDs0Ok3kI4exdGJ2w20Lhxr7m2noEJLY/DFcyGOyRr8H3/7a dDUivQWhgyibsRP7B7ECjQPomYDaTNY= -----END CERTIFICATE-----Generated at Fri Oct 10 22:05:59 2025 by rpki-client