$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9432961b-b9f4-3427-913a-57bfde8f4d9f.roa File: 9432961b-b9f4-3427-913a-57bfde8f4d9f.roa (raw, json) Hash identifier: I6KRHUZV+1jwKZoBNoXdvQz8b7FrNr/DCwuPja1S/DU= Subject key identifier: 45:11:43:09:7E:10:60:E8:BC:6E:A6:2F:C5:26:8D:82:3E:2D:D3:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC4A49F1F2CCBE00CF680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9432961b-b9f4-3427-913a-57bfde8f4d9f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 98.17.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c4:a4:9f:1f:2c:cb:e0:0c:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=69cf1f13-0c08-46d7-ae6e-2f74048c51b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:89:ba:24:2b:52:ec:f1:0a:be:c6:9e:36:43: 1a:d5:b1:c3:28:cc:ce:8e:d8:96:06:56:d6:45:16: d0:8a:75:d0:a1:f1:18:2b:75:5c:8c:24:fd:7a:12: 2c:69:8d:7f:ca:4f:00:36:cf:e3:ac:86:36:4b:fe: fb:bd:ed:28:f2:90:ac:c6:25:74:12:30:c2:aa:da: 67:18:85:f4:87:6c:ef:b2:3e:d7:86:06:76:cd:58: b8:4b:fa:0c:37:2c:cd:37:09:fb:35:9c:55:45:8f: 81:18:57:da:c1:28:8a:68:e7:fe:7f:a5:54:a2:65: 39:c2:cd:26:66:82:ec:60:ac:8d:bc:7c:c7:30:25: fe:86:19:06:ac:dc:67:c6:37:7d:33:88:37:44:b4: 01:14:46:3d:d7:87:43:9b:4a:6d:be:51:3d:57:5f: b4:a3:93:6f:63:b5:2e:f1:09:09:85:73:b0:6c:aa: 15:42:1f:8a:1d:68:63:49:75:37:4f:24:be:b4:2c: db:2d:3d:d5:c6:18:1b:ea:c4:39:95:ab:aa:62:85: ad:67:86:e4:d2:0a:cb:c4:90:fb:d0:2c:79:7a:c0: b5:c8:5e:ba:f4:30:23:46:3a:4e:66:23:87:98:8a: c5:75:6f:6b:c2:0f:61:ca:b3:82:cc:be:fc:bd:f3: 9b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:11:43:09:7E:10:60:E8:BC:6E:A6:2F:C5:26:8D:82:3E:2D:D3:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9432961b-b9f4-3427-913a-57bfde8f4d9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:7e:c6:b3:8c:1a:02:f4:7f:cc:f6:f6:d8:ba:c1:af:b6:54: e5:c7:18:8c:a7:34:ae:9c:7b:44:17:08:4a:5a:c2:f4:0d:20: de:9f:e3:11:c5:45:fc:38:34:b5:80:e9:d4:80:5a:0a:8c:3c: 70:90:3b:6b:48:29:70:24:98:73:75:c0:bc:84:34:6b:ef:28: 39:4b:d1:5d:c0:2a:95:ec:01:e9:00:53:26:3a:2a:1b:3d:71: 76:65:9a:3e:4a:78:57:cd:60:14:c6:80:90:4d:6d:de:d5:0b: 4a:f5:92:41:fb:c7:1b:20:46:10:bf:7e:96:7e:09:74:2e:fe: e2:cf:c3:1d:94:76:b4:bc:60:f6:90:ce:c4:41:50:9e:3a:86: 24:c2:0f:69:00:6a:35:91:2f:c7:c1:a7:6e:6c:87:c4:ff:87: f5:39:61:72:40:bb:93:28:2d:f4:08:4d:2a:d8:20:e9:db:7e: 9c:ec:c5:a3:8c:10:f8:21:a9:1a:be:f7:75:1b:9e:f3:8c:53: 08:c1:f3:b7:1b:9a:df:92:69:f6:10:9b:f6:77:e6:a5:ab:2a: 3a:4d:20:a2:44:02:46:80:8e:db:b1:1c:4c:c1:54:42:f2:7e: e8:98:f0:ee:3a:34:1a:e9:c3:c9:66:bd:f5:f2:9f:92:3c:8e: b0:23:10:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMSknx8sy+AM9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NjljZjFmMTMtMGMwOC00NmQ3LWFlNmUtMmY3NDA0OGM1MWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYm6JCtS7PEKvsaeNkMa1bHDKMzOjtiWBlbW RRbQinXQofEYK3VcjCT9ehIsaY1/yk8ANs/jrIY2S/77ve0o8pCsxiV0EjDCqtpn GIX0h2zvsj7XhgZ2zVi4S/oMNyzNNwn7NZxVRY+BGFfawSiKaOf+f6VUomU5ws0m ZoLsYKyNvHzHMCX+hhkGrNxnxjd9M4g3RLQBFEY914dDm0ptvlE9V1+0o5NvY7Uu 8QkJhXOwbKoVQh+KHWhjSXU3TyS+tCzbLT3Vxhgb6sQ5lauqYoWtZ4bk0grLxJD7 0Cx5esC1yF669DAjRjpOZiOHmIrFdW9rwg9hyrOCzL78vfObfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEURQwl+EGDovG6mL8UmjYI+LdOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQzMjk2MWItYjlmNC0z NDI3LTkxM2EtNTdiZmRlOGY0ZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt+xrOMGgL0f8z29ti6wa+2VOXHGIynNK6ce0QXCEpawvQNIN6f4xHF Rfw4NLWA6dSAWgqMPHCQO2tIKXAkmHN1wLyENGvvKDlL0V3AKpXsAekAUyY6Khs9 cXZlmj5KeFfNYBTGgJBNbd7VC0r1kkH7xxsgRhC/fpZ+CXQu/uLPwx2UdrS8YPaQ zsRBUJ46hiTCD2kAajWRL8fBp25sh8T/h/U5YXJAu5MoLfQITSrYIOnbfpzsxaOM EPghqRq+93UbnvOMUwjB87cbmt+SafYQm/Z35qWrKjpNIKJEAkaAjtuxHEzBVELy fuiY8O46NBrpw8lmvfXyn5I8jrAjEOY= -----END CERTIFICATE-----Generated at Fri Oct 10 23:57:08 2025 by rpki-client