$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65c051a-9022-3436-b16e-e62d98c54372.roa File: a65c051a-9022-3436-b16e-e62d98c54372.roa (raw, json) Hash identifier: 92G0HH2OjYDsmoh5E1qEqGV8gdGM1pTxJe2yO2iwZa0= Subject key identifier: 47:F7:D6:22:94:56:42:93:50:D9:02:B9:17:15:4D:16:4E:E4:E5:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B5F374CE342ACDA2C41572BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65c051a-9022-3436-b16e-e62d98c54372.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.19.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:4c:e3:42:ac:da:2c:41:57:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=5f2d1a11-ab3c-4182-8795-5f0a90fb0199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:3b:78:d9:03:a2:6e:de:bc:02:5c:e3:99: 2b:a1:b7:80:60:e3:92:f1:a7:ac:9c:07:50:28:47: e0:6d:21:78:b2:2d:a3:81:a4:84:1f:84:b2:a9:53: 39:5b:07:f0:c5:70:a2:67:9d:f1:41:a3:54:91:d0: d5:dc:da:61:28:30:44:6d:7e:43:f7:3f:1f:67:61: 2f:bf:47:a3:c5:82:da:ec:34:e2:60:76:9c:14:03: 95:97:e6:2c:1d:41:ca:c6:13:bb:2b:69:53:f5:c6: ef:fc:5c:f1:c5:ef:c5:df:ae:9d:38:42:9a:39:07: 7f:17:fb:a1:73:81:35:af:f7:46:c7:48:4c:5c:6a: 34:9d:b8:b6:6d:82:8a:5a:de:86:57:60:f9:07:93: 40:aa:8b:1b:69:7a:5d:30:8c:96:46:17:f0:96:b7: 8f:2f:82:ef:b0:e3:21:20:f9:d2:03:e2:c6:7f:0b: 04:e9:97:bc:1e:8e:18:83:49:7a:d7:37:3c:c0:0c: c3:19:66:03:86:a7:19:0d:d0:a2:b1:86:4a:22:4c: b3:fc:69:4c:0e:c7:da:3b:33:6c:31:06:2d:f6:d9: 74:5d:6c:ea:81:e8:57:76:ca:fb:5e:3a:67:6a:f9: 9c:7f:1f:33:8b:dd:92:dd:b6:aa:07:b0:6f:b2:fc: 97:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F7:D6:22:94:56:42:93:50:D9:02:B9:17:15:4D:16:4E:E4:E5:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a65c051a-9022-3436-b16e-e62d98c54372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c0:de:20:3e:f5:ab:5d:e1:71:83:41:ba:f0:b4:19:97:ff: d7:43:0e:92:3a:0a:6d:5b:55:35:b4:8d:84:81:62:ad:d5:3f: 6c:0a:42:c4:f2:49:c3:23:5e:79:71:e8:1f:bb:76:59:de:d4: f3:70:29:d2:24:7b:9a:be:1f:67:90:15:c7:11:37:6f:45:74: f2:03:d0:74:eb:7b:d2:f5:a7:da:65:74:0d:4a:a5:1d:67:d4: 44:07:62:33:6c:48:c6:6d:df:8f:47:88:82:58:ab:44:db:41: 94:97:31:93:c2:8f:1f:8e:1f:36:96:a0:4f:06:56:97:bd:2d: b0:09:bf:a3:29:a7:d1:36:ac:a7:2a:d2:07:3a:e1:34:d6:b9: f5:69:23:4a:9b:da:98:c4:4b:8a:68:52:bb:a5:9d:7a:07:b1: 7d:ca:30:19:29:ea:68:26:f9:ed:4d:aa:13:5d:77:a8:9f:cc: c5:95:fb:9b:ea:cd:c0:f0:0f:4c:d0:70:a0:dc:74:db:bb:88: 10:86:a8:89:ca:10:c1:49:9c:12:30:32:3f:fe:3f:2e:76:64: 54:fa:44:eb:ac:9d:c2:8d:8d:51:7a:3d:d3:ac:2b:d9:e9:0d: df:e2:40:37:75:e8:9e:9d:5e:56:26:ff:26:21:14:9b:ba:d1: cb:38:a4:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0zjQqzaLEFXK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NWYyZDFhMTEtYWIzYy00MTgyLTg3OTUtNWYwYTkwZmIwMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqro7eNkDom7evAJc45krobeAYOOS8aesnAdQ KEfgbSF4si2jgaSEH4SyqVM5WwfwxXCiZ53xQaNUkdDV3NphKDBEbX5D9z8fZ2Ev v0ejxYLa7DTiYHacFAOVl+YsHUHKxhO7K2lT9cbv/Fzxxe/F366dOEKaOQd/F/uh c4E1r/dGx0hMXGo0nbi2bYKKWt6GV2D5B5NAqosbaXpdMIyWRhfwlrePL4LvsOMh IPnSA+LGfwsE6Ze8Ho4Yg0l61zc8wAzDGWYDhqcZDdCisYZKIkyz/GlMDsfaOzNs MQYt9tl0XWzqgehXdsr7Xjpnavmcfx8zi92S3baqB7BvsvyXkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf31iKUVkKTUNkCuRcVTRZO5OVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY1YzA1MWEtOTAyMi0z NDM2LWIxNmUtZTYyZDk4YzU0MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnA3iA+9atd4XGDQbrwtBmX/9dDDpI6Cm1bVTW0jYSBYq3VP2wKQsTy ScMjXnlx6B+7dlne1PNwKdIke5q+H2eQFccRN29FdPID0HTre9L1p9pldA1KpR1n 1EQHYjNsSMZt349HiIJYq0TbQZSXMZPCjx+OHzaWoE8GVpe9LbAJv6Mpp9E2rKcq 0gc64TTWufVpI0qb2pjES4poUrulnXoHsX3KMBkp6mgm+e1NqhNdd6ifzMWV+5vq zcDwD0zQcKDcdNu7iBCGqInKEMFJnBIwMj/+Py52ZFT6ROusncKNjVF6PdOsK9np Dd/iQDd16J6dXlYm/yYhFJu60cs4pCQ= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:39 2025 by rpki-client