$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa File: a76862bc-99e6-3f16-a88d-6b07293a09d3.roa (raw, json) Hash identifier: 2cuYhN0lsFfqT+Jh1p4ciYoWDFOlxC3xDJDZSmY1fnc= Subject key identifier: 6C:28:06:30:7A:79:4C:8F:7B:CF:2B:11:F0:C8:C0:7A:2F:CB:4E:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA74503D66A6ADA4AB9B0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 98.23.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a7:45:03:d6:6a:6a:da:4a:b9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=7799d48c-32de-48c9-be71-fc51f2cdd1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:8d:78:b5:cd:e4:26:dc:98:98:6f:d9:87: df:1a:83:bc:ca:69:2c:8f:1e:8d:d5:38:d3:04:a5: e2:c6:7c:5e:14:3f:5a:aa:36:0f:2d:04:b7:bd:7f: 93:b2:b1:23:5e:9c:62:0a:54:d6:23:69:f4:4a:87: 20:81:10:a0:39:76:ad:55:45:c1:57:94:29:03:a7: 3a:4d:9b:89:4d:fa:55:5a:9b:02:64:b1:43:d9:73: 67:12:c2:49:ee:c6:38:33:ed:0d:69:e6:88:8c:d9: 43:fa:c7:7c:79:62:45:f9:42:29:5b:74:97:0d:a2: 89:59:bd:99:9e:92:59:47:90:a0:33:94:80:bc:17: dc:87:46:ce:2d:cb:4d:4f:c0:68:11:37:b1:aa:4a: ed:5c:e7:da:9c:31:bc:11:70:ff:15:68:59:53:38: c2:b8:6c:0c:a8:2d:74:fc:05:90:f4:ef:42:17:b8: 94:25:1b:86:d9:fb:a1:e2:34:c5:38:a4:64:21:67: 35:a8:d3:b6:07:66:6f:81:81:6e:13:61:86:f6:a1: cc:21:a6:87:48:15:75:97:77:b4:33:0f:43:8a:1d: bc:b8:8f:f2:a6:43:ea:f3:8b:e9:04:91:96:f5:a5: b2:b4:2f:29:b4:ee:78:a5:bf:6e:21:77:3b:49:d2: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:28:06:30:7A:79:4C:8F:7B:CF:2B:11:F0:C8:C0:7A:2F:CB:4E:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:3d:6f:81:18:52:54:35:f2:22:00:b9:75:30:c8:9a:07:f8: 1f:88:bb:d5:fa:96:ca:62:89:60:4c:18:c0:0f:ae:5a:03:5d: b3:d4:97:e5:30:19:d5:d7:80:58:5a:91:5f:fb:40:58:f7:04: 03:f1:cd:54:5e:1a:c8:73:23:c8:26:64:09:2f:fc:0b:b7:2c: 32:a9:8b:50:70:09:9e:f1:10:36:62:f2:c7:79:95:9a:c3:f4: 00:7e:3f:d5:8d:32:ff:3f:94:5b:30:71:5c:4e:bd:1e:3a:f9: b8:52:cb:12:9b:2e:df:84:69:1c:d5:19:a7:12:6e:93:fb:c1: dc:ac:69:65:2f:cc:2e:17:12:34:e2:fc:10:64:97:84:25:f1: 84:fa:ab:9d:17:71:8a:8e:cc:5c:af:b0:ea:10:82:7e:94:66: be:3f:4e:06:9b:ec:dc:23:17:d6:e9:eb:b9:6b:d2:82:64:98: b0:21:12:77:65:16:37:67:8c:10:57:f9:43:37:bf:8f:14:28: f8:08:1f:91:5c:0f:4a:ba:00:22:b9:ed:5a:5c:dd:0c:0f:f3: 11:59:c1:29:87:fa:7d:11:5f:2f:7b:48:34:ed:d5:01:f9:05: 73:77:d3:e0:8d:3f:e8:b2:a3:50:af:41:39:7e:92:7b:4f:b5: 42:df:12:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKdFA9ZqatpKubAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk Nzc5OWQ0OGMtMzJkZS00OGM5LWJlNzEtZmM1MWYyY2RkMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T6NeLXN5CbcmJhv2YffGoO8ymksjx6N1TjT BKXixnxeFD9aqjYPLQS3vX+TsrEjXpxiClTWI2n0SocggRCgOXatVUXBV5QpA6c6 TZuJTfpVWpsCZLFD2XNnEsJJ7sY4M+0NaeaIjNlD+sd8eWJF+UIpW3SXDaKJWb2Z npJZR5CgM5SAvBfch0bOLctNT8BoETexqkrtXOfanDG8EXD/FWhZUzjCuGwMqC10 /AWQ9O9CF7iUJRuG2fuh4jTFOKRkIWc1qNO2B2ZvgYFuE2GG9qHMIaaHSBV1l3e0 Mw9Dih28uI/ypkPq84vpBJGW9aWytC8ptO54pb9uIXc7SdKopQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwoBjB6eUyPe88rEfDIwHovy07TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTc2ODYyYmMtOTllNi0z ZjE2LWE4OGQtNmIwNzI5M2EwOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE09b4EYUlQ18iIAuXUwyJoH+B+Iu9X6lspiiWBMGMAPrloDXbPUl+Uw GdXXgFhakV/7QFj3BAPxzVReGshzI8gmZAkv/Au3LDKpi1BwCZ7xEDZi8sd5lZrD 9AB+P9WNMv8/lFswcVxOvR46+bhSyxKbLt+EaRzVGacSbpP7wdysaWUvzC4XEjTi /BBkl4Ql8YT6q50XcYqOzFyvsOoQgn6UZr4/Tgab7NwjF9bp67lr0oJkmLAhEndl FjdnjBBX+UM3v48UKPgIH5FcD0q6ACK57Vpc3QwP8xFZwSmH+n0RXy97SDTt1QH5 BXN30+CNP+iyo1CvQTl+kntPtULfEmM= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:38 2025 by rpki-client