$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a769fb3b-61a6-3cd3-b01d-325141f38c73.roa File: a769fb3b-61a6-3cd3-b01d-325141f38c73.roa (raw, json) Hash identifier: 3VmHFLYD5vMRVMhcklZ4lBrTUKwTpKHS1M9RJrXcWhI= Subject key identifier: 6E:F7:2A:6F:91:B9:67:81:21:F6:61:2A:BF:E0:9B:99:04:1A:31:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B5F3776AD1BF2D1B11B6B5A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a769fb3b-61a6-3cd3-b01d-325141f38c73.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.21.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:76:ad:1b:f2:d1:b1:1b:6b:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=1032f3f5-bf06-4635-98f4-3ab1e06f6897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:e4:0d:52:e4:cb:fe:b6:5c:cb:3a:68:5f: 09:68:94:07:a2:bc:87:0c:ca:b0:ee:19:67:b3:33: d3:45:91:4f:23:e9:a8:29:07:f1:45:29:fc:57:81: 3a:25:ef:8b:fb:1e:04:d5:ff:9c:c6:e8:87:9e:ab: 95:d2:3a:f9:55:31:2a:80:49:fc:db:7e:17:07:19: 58:91:d5:8b:df:85:88:a2:8f:cb:c0:de:63:ef:99: 16:7b:e1:cf:45:57:4b:89:e2:e3:19:46:34:95:03: 2f:e8:cd:97:d7:ce:a2:7e:44:78:cf:44:cb:6e:2e: 9e:84:f4:e0:40:be:a6:00:6f:ab:0b:ee:1d:a3:16: e6:d1:3d:52:d3:e0:9b:55:3f:46:df:aa:af:1b:94: 5d:c3:d8:92:dc:6c:35:d7:df:4f:a6:88:7c:04:8c: 1e:62:eb:40:e4:8d:36:8f:20:0d:e5:72:d5:14:73: af:34:47:9e:14:a0:2e:4d:c3:f4:6b:2e:4f:52:89: 30:22:77:67:fc:f9:2b:98:ae:31:81:de:64:53:3b: 49:41:b1:08:e5:55:7b:4a:d8:4a:0e:08:34:3c:fe: 56:a9:73:e0:17:c7:4b:fa:35:2b:5d:0b:46:e9:15: 4c:56:3c:f4:04:3e:f4:c1:15:57:2d:b0:8f:ff:d2: 2a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F7:2A:6F:91:B9:67:81:21:F6:61:2A:BF:E0:9B:99:04:1A:31:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a769fb3b-61a6-3cd3-b01d-325141f38c73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:75:8e:7a:57:2f:7c:a0:d4:ea:a3:25:71:51:1b:c1:7d:47: 7f:62:85:8d:65:3e:ff:c2:e7:aa:dc:a7:68:df:b1:83:06:b4: 62:5c:24:49:ec:85:c4:32:e1:2d:83:58:0d:3b:6e:dc:5a:22: 4c:fe:29:22:7b:0b:20:3a:8d:2a:89:26:15:49:8a:7a:f6:ec: 05:3b:d5:6f:44:0a:ca:a3:73:90:cd:91:97:24:7a:b0:1e:40: 94:24:75:39:4c:b1:fe:25:55:08:55:83:e1:a9:b6:a0:c9:3b: 1e:e5:e7:cb:03:3b:68:17:3f:75:0f:fb:21:6c:a0:72:10:a9: 58:76:5d:43:c1:11:3b:8e:cf:31:98:da:48:a9:72:6f:6f:a1: 0b:94:a9:80:be:a8:b8:26:1a:49:33:00:c5:c5:9d:77:1e:8f: 83:13:70:87:2f:9e:8d:39:ed:1f:0d:b0:5b:63:d0:a4:40:63: 24:0a:30:ad:26:5f:06:c9:94:17:e6:ae:58:d3:26:28:06:c8: bd:68:ca:7e:e8:d7:4e:6a:8c:c5:7a:c4:f2:bf:8e:6c:91:dd: 71:0c:81:90:58:42:62:6d:18:48:68:48:a6:9b:40:b7:1f:26: 4d:aa:76:e8:af:07:3f:91:0a:02:29:23:cd:1a:e2:cf:c0:4e: be:a3:5e:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN3atG/LRsRtrWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk MTAzMmYzZjUtYmYwNi00NjM1LTk4ZjQtM2FiMWUwNmY2ODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfzkDVLky/62XMs6aF8JaJQHoryHDMqw7hln szPTRZFPI+moKQfxRSn8V4E6Je+L+x4E1f+cxuiHnquV0jr5VTEqgEn8234XBxlY kdWL34WIoo/LwN5j75kWe+HPRVdLieLjGUY0lQMv6M2X186ifkR4z0TLbi6ehPTg QL6mAG+rC+4doxbm0T1S0+CbVT9G36qvG5Rdw9iS3Gw1199Ppoh8BIweYutA5I02 jyAN5XLVFHOvNEeeFKAuTcP0ay5PUokwIndn/PkrmK4xgd5kUztJQbEI5VV7SthK Dgg0PP5WqXPgF8dL+jUrXQtG6RVMVjz0BD70wRVXLbCP/9IqZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG73Km+RuWeBIfZhKr/gm5kEGjGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTc2OWZiM2ItNjFhNi0z Y2QzLWIwMWQtMzI1MTQxZjM4YzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl1jnpXL3yg1OqjJXFRG8F9R39ihY1lPv/C56rcp2jfsYMGtGJcJEns hcQy4S2DWA07btxaIkz+KSJ7CyA6jSqJJhVJinr27AU71W9ECsqjc5DNkZckerAe QJQkdTlMsf4lVQhVg+GptqDJOx7l58sDO2gXP3UP+yFsoHIQqVh2XUPBETuOzzGY 2kipcm9voQuUqYC+qLgmGkkzAMXFnXcej4MTcIcvno057R8NsFtj0KRAYyQKMK0m XwbJlBfmrljTJigGyL1oyn7o105qjMV6xPK/jmyR3XEMgZBYQmJtGEhoSKabQLcf Jk2qduivBz+RCgIpI80a4s/ATr6jXpw= -----END CERTIFICATE-----Generated at Fri Oct 10 20:04:32 2025 by rpki-client