$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7c15379-9d7e-300d-a34d-48d0b1e884d4.roa File: a7c15379-9d7e-300d-a34d-48d0b1e884d4.roa (raw, json) Hash identifier: EBQA4GdsZetQ6yRQuRHc6BgKbDMoQwAFsSwfKSjHQfI= Subject key identifier: D3:5E:B9:FA:D2:15:09:85:60:F5:87:A3:DF:36:D5:9A:4D:04:62:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2C9D5724437DD29EDAE000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7c15379-9d7e-300d-a34d-48d0b1e884d4.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 98.16.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:9d:57:24:43:7d:d2:9e:da:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=1fb1bf44-7225-4f53-9fd3-71ef0bc38296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:95:f0:95:f3:26:4c:60:c4:ec:ff:35:35:57: a2:20:26:21:83:79:f1:f0:43:84:77:58:d1:68:80: 62:b5:4f:70:73:e6:be:0d:a9:e4:fe:6c:25:8f:70: 55:c3:75:30:f4:9e:dc:fe:8f:d5:67:7e:71:94:76: 2a:e8:4e:70:23:88:a5:0a:bb:74:19:3f:1f:70:c7: 08:43:16:83:f6:90:51:29:b5:51:33:21:38:84:7d: 28:b7:cb:35:da:ef:9f:4b:c7:76:fa:57:94:49:47: 78:ec:6c:1c:59:3a:95:55:99:fd:92:7a:01:4d:42: 65:54:ee:73:35:58:12:a3:51:a4:91:bf:23:5c:b0: 00:63:11:a6:d9:ee:c1:60:7e:fc:eb:ef:2b:ef:ab: fa:ee:e6:12:c2:49:2e:1b:cd:d5:3d:9f:6c:1e:0f: e3:36:d9:88:e1:75:6e:28:c8:54:15:6e:3c:69:d0: be:6d:a1:39:4c:8f:b6:af:89:9c:63:2e:0a:fa:45: 38:3e:75:da:de:ed:c5:7e:42:95:ae:b5:19:34:e2: f0:38:4e:57:9a:9b:b9:f7:44:dd:aa:66:89:b0:39: 3c:4d:9a:4c:b4:f4:69:f4:1d:1b:7d:8c:18:b5:ba: 58:11:2b:20:a9:ad:8c:17:ac:f0:4e:17:7c:80:5c: 46:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5E:B9:FA:D2:15:09:85:60:F5:87:A3:DF:36:D5:9A:4D:04:62:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7c15379-9d7e-300d-a34d-48d0b1e884d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3c:0c:67:d7:83:12:cd:80:9d:2a:23:4b:7c:d2:88:6f:c9: f7:30:be:cf:d4:b8:bc:f0:54:6e:56:17:7f:55:3e:46:de:8c: 0e:ce:ab:e8:45:68:d6:9e:83:2e:01:c2:87:b2:46:3b:4b:d9: 16:89:41:15:ab:4f:3b:01:ce:db:bd:7b:ae:25:51:85:35:68: 18:18:00:42:72:93:8b:30:c4:b9:76:6b:13:e8:f8:da:79:fd: 11:43:97:a8:24:f0:ee:47:dc:9e:97:a0:bd:ef:ad:0f:3d:0f: cc:a4:d0:3c:c1:4b:36:53:d8:2a:76:40:2d:1e:42:3d:6f:c5: 42:4c:6b:66:23:30:b1:a0:98:c3:49:91:79:b3:de:6a:1c:27: 6c:8d:4e:4f:5a:63:05:b1:41:34:c8:e4:86:4c:a2:ad:9b:ca: e4:59:c9:63:30:58:6d:0b:5f:9d:e5:f8:69:be:79:6d:9a:c7: a8:92:cd:9e:a6:93:2e:d0:db:06:da:c7:bf:18:73:b9:03:b5: 75:a6:e9:09:cc:f9:3e:ff:2a:d9:cf:84:5f:70:9b:f9:4f:19: f5:db:9e:9f:08:8a:9a:6a:97:6a:5e:eb:3c:3d:53:30:93:11: 3e:23:0a:57:e0:c9:cb:eb:4f:7b:02:d1:de:2c:2e:ad:ec:25: 85:56:f2:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJ1XJEN90p7a4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MWZiMWJmNDQtNzIyNS00ZjUzLTlmZDMtNzFlZjBiYzM4Mjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZXwlfMmTGDE7P81NVeiICYhg3nx8EOEd1jR aIBitU9wc+a+Dank/mwlj3BVw3Uw9J7c/o/VZ35xlHYq6E5wI4ilCrt0GT8fcMcI QxaD9pBRKbVRMyE4hH0ot8s12u+fS8d2+leUSUd47GwcWTqVVZn9knoBTUJlVO5z NVgSo1Gkkb8jXLAAYxGm2e7BYH786+8r76v67uYSwkkuG83VPZ9sHg/jNtmI4XVu KMhUFW48adC+baE5TI+2r4mcYy4K+kU4PnXa3u3FfkKVrrUZNOLwOE5Xmpu590Td qmaJsDk8TZpMtPRp9B0bfYwYtbpYESsgqa2MF6zwThd8gFxGTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNeufrSFQmFYPWHo9821ZpNBGIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTdjMTUzNzktOWQ3ZS0z MDBkLWEzNGQtNDhkMGIxZTg4NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE8DGfXgxLNgJ0qI0t80ohvyfcwvs/UuLzwVG5WF39VPkbejA7Oq+hF aNaegy4BwoeyRjtL2RaJQRWrTzsBztu9e64lUYU1aBgYAEJyk4swxLl2axPo+Np5 /RFDl6gk8O5H3J6XoL3vrQ89D8yk0DzBSzZT2Cp2QC0eQj1vxUJMa2YjMLGgmMNJ kXmz3mocJ2yNTk9aYwWxQTTI5IZMoq2byuRZyWMwWG0LX53l+Gm+eW2ax6iSzZ6m ky7Q2wbax78Yc7kDtXWm6QnM+T7/KtnPhF9wm/lPGfXbnp8Iippql2pe6zw9UzCT ET4jClfgycvrT3sC0d4sLq3sJYVW8jE= -----END CERTIFICATE-----Generated at Fri Oct 10 17:51:44 2025 by rpki-client