$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89b2af7d-b9fb-3428-971f-3609eed7eb7f.roa File: 89b2af7d-b9fb-3428-971f-3609eed7eb7f.roa (raw, json) Hash identifier: LxOxX0a3U/voYv8V8iAhqjeqqYYdMg1OXdMjtaLWIGQ= Subject key identifier: EA:B1:6D:3A:5C:AE:0B:3C:06:AD:FC:F0:3F:AD:5C:83:6A:ED:15:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C5AF9EAF2DD27F7C85D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89b2af7d-b9fb-3428-971f-3609eed7eb7f.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.17.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:5a:f9:ea:f2:dd:27:f7:c8:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=0e2db748-eb14-4f49-b327-fbf6155388fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:2a:2f:7c:81:c0:45:a8:a8:25:f6:83:4c: 68:10:e0:30:a6:9d:23:06:e9:57:99:7b:6f:e6:7b: 20:ce:68:38:37:0a:4e:c3:c7:ad:90:8a:34:0c:46: d6:22:71:37:f6:0c:22:2a:7a:2e:83:39:dd:7f:df: e2:d0:60:ee:a4:90:41:a5:4c:17:e2:de:19:ff:8f: 8a:d6:53:65:19:cd:bd:f2:3a:7f:b5:55:29:b2:24: 91:49:e0:1b:b7:57:12:90:5a:ea:ae:ac:4c:c1:f3: 16:75:15:9b:4c:2b:ed:d1:91:0a:be:a9:a4:37:f7: ca:ac:0a:b6:8b:f5:63:8b:73:8f:70:e8:a7:0e:a0: 59:64:88:48:9a:0c:49:e4:38:6c:79:a1:8f:6d:ef: f1:a9:a4:28:26:0f:3d:c0:d1:75:a3:65:8a:c3:06: 38:78:7b:49:c1:13:b0:c3:2a:76:1c:23:f1:39:e0: 3a:60:27:76:a0:28:c4:14:ce:25:33:bc:8b:5d:4c: c9:6e:d0:36:b6:e0:14:e7:a0:c9:af:82:03:02:52: ff:73:5d:5f:28:b8:0f:0e:61:36:45:ce:9f:d9:6f: 5e:92:31:74:8c:72:8f:67:6b:3c:9a:30:7e:bd:b1: 61:ba:f2:61:ae:fd:92:6d:05:f0:d0:c7:a3:4d:52: f0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B1:6D:3A:5C:AE:0B:3C:06:AD:FC:F0:3F:AD:5C:83:6A:ED:15:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89b2af7d-b9fb-3428-971f-3609eed7eb7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b1:c5:04:f0:9c:58:f5:6b:09:3f:51:90:96:14:7b:27:16: f8:81:cb:db:c6:4f:6f:6f:f2:a6:1c:bc:fd:18:48:f5:88:2b: 62:1e:d7:2e:47:f6:6c:47:9d:53:cc:24:4b:be:81:c9:80:71: e8:49:81:dc:5e:b1:4b:ee:0a:f1:29:39:ad:f2:d7:e8:09:33: cd:26:98:e0:65:24:7b:fe:9a:59:fc:a3:26:5f:69:24:4d:bd: 30:01:f7:86:c3:f8:15:97:7d:ad:25:b2:4f:00:e8:3f:b4:e0: 63:d3:16:f1:39:2e:7b:c4:67:ef:da:db:2d:64:99:96:14:f3: f0:08:fa:3a:71:57:c3:fa:bb:b6:28:27:e0:ee:b0:ed:4d:13: 2d:f4:57:16:4b:91:8e:a3:c5:47:3e:66:e3:cb:dc:3e:f9:6d: d3:04:0d:78:94:a4:99:54:aa:df:ee:c1:50:98:9f:09:ee:90: dd:c9:e7:ea:d0:25:8f:9d:f2:d5:b2:4a:d0:2b:48:28:e5:4d: 17:3b:62:37:2c:f9:f7:e5:d3:4a:60:1d:88:fb:8f:76:73:64: 07:83:bf:bd:eb:d9:a6:ff:0c:2e:2f:c4:69:50:fc:01:6d:02: 6e:bd:68:39:a6:da:d5:a5:83:55:6f:ad:ff:a2:1a:c3:84:ed: 7d:d3:75:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFr56vLdJ/fIXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk MGUyZGI3NDgtZWIxNC00ZjQ5LWIzMjctZmJmNjE1NTM4OGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/kqL3yBwEWoqCX2g0xoEOAwpp0jBulXmXtv 5nsgzmg4NwpOw8etkIo0DEbWInE39gwiKnougzndf9/i0GDupJBBpUwX4t4Z/4+K 1lNlGc298jp/tVUpsiSRSeAbt1cSkFrqrqxMwfMWdRWbTCvt0ZEKvqmkN/fKrAq2 i/Vji3OPcOinDqBZZIhImgxJ5DhseaGPbe/xqaQoJg89wNF1o2WKwwY4eHtJwROw wyp2HCPxOeA6YCd2oCjEFM4lM7yLXUzJbtA2tuAU56DJr4IDAlL/c11fKLgPDmE2 Rc6f2W9ekjF0jHKPZ2s8mjB+vbFhuvJhrv2SbQXw0MejTVLwAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqxbTpcrgs8Bq388D+tXINq7RU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODliMmFmN2QtYjlmYi0z NDI4LTk3MWYtMzYwOWVlZDdlYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByxxQTwnFj1awk/UZCWFHsnFviBy9vGT29v8qYcvP0YSPWIK2Ie1y5H 9mxHnVPMJEu+gcmAcehJgdxesUvuCvEpOa3y1+gJM80mmOBlJHv+mln8oyZfaSRN vTAB94bD+BWXfa0lsk8A6D+04GPTFvE5LnvEZ+/a2y1kmZYU8/AI+jpxV8P6u7Yo J+DusO1NEy30VxZLkY6jxUc+ZuPL3D75bdMEDXiUpJlUqt/uwVCYnwnukN3J5+rQ JY+d8tWyStArSCjlTRc7Yjcs+ffl00pgHYj7j3ZzZAeDv73r2ab/DC4vxGlQ/AFt Am69aDmm2tWlg1Vvrf+iGsOE7X3TdW8= -----END CERTIFICATE-----Generated at Fri Oct 10 19:52:11 2025 by rpki-client