$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa File: b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa (raw, json) Hash identifier: M8i7nkdWnUmiugHaY0XeaiPitpT/rGtHHMAcyCDED20= Subject key identifier: C9:75:1E:02:97:DD:54:69:1B:6B:83:E5:6E:C7:2F:1B:B9:F3:24:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF76D43A6D67EAE051E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 98.20.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f7:6d:43:a6:d6:7e:ae:05:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ebb84738-14df-4ac5-b080-0d7ac6fa2fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ef:f2:34:56:a4:3d:bc:45:e8:03:32:75:54: e0:30:93:45:96:89:2b:d8:9c:e6:a3:f6:74:52:a0: d1:8e:42:f8:32:ec:86:bd:9f:60:99:ac:b9:50:6f: 8d:ac:d3:db:7e:e4:95:b2:1f:87:2b:d0:a1:57:10: 9c:2b:43:5c:50:1c:d4:38:0f:e9:fd:6c:8a:6c:02: d9:99:df:59:93:44:c6:db:4c:1f:e0:0e:6f:33:07: 3b:40:be:3b:b8:31:2e:88:e8:bd:9b:b5:84:1f:e1: 1c:30:73:05:06:00:79:07:06:44:54:e5:56:3c:69: 1f:7c:ca:ac:90:2a:40:9f:89:12:e3:7b:f7:9a:b9: 33:01:3e:21:5e:ab:12:92:7d:25:15:86:5a:06:fd: 57:20:5e:9b:d4:0d:d9:18:d7:f4:10:1c:d8:69:d9: b1:26:a7:bd:ef:04:87:e7:17:4f:29:70:24:25:26: dd:36:e5:25:c9:bc:16:96:d7:bf:34:6e:c4:c6:fe: d7:09:92:71:01:20:01:74:21:54:e6:30:a1:b7:60: 35:aa:2e:f9:83:8c:f1:7e:fb:0b:cb:8d:10:99:a5: a1:bd:50:9c:6e:de:62:82:ca:70:9e:26:c4:ca:f4: 56:0b:2b:81:4c:61:f3:e7:69:03:8b:6f:c5:7e:ec: 32:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:75:1E:02:97:DD:54:69:1B:6B:83:E5:6E:C7:2F:1B:B9:F3:24:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0633eb3-8e51-3ffc-8af7-e0a65f00f857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e5:64:ac:8d:17:c9:64:52:ef:bb:1d:49:41:32:0a:01:0b: 07:42:53:10:e7:8c:0f:3e:12:d1:3c:73:b0:f2:0c:f5:c8:d2: a3:60:45:b5:40:06:d4:20:66:24:7b:1b:32:5e:ce:62:2b:2d: 0b:fb:c2:66:46:13:b9:51:58:54:0e:7f:0d:87:1b:0c:55:9d: 0a:e4:62:cd:40:b2:f7:93:58:5c:65:85:32:92:4e:2b:ad:54: 7f:6c:ca:bc:bb:46:e2:47:a7:36:af:83:81:a4:6a:81:38:e2: 6b:b2:70:04:ef:e1:14:db:e0:0b:78:7f:1b:5d:66:83:72:5d: 6d:1f:25:e0:af:f9:70:42:10:8a:83:0d:1a:73:3b:03:23:d4: e7:17:d4:d4:c1:7c:b0:5e:57:d9:20:a8:dd:87:3a:b2:44:88: 11:e0:98:9b:be:82:50:87:38:17:ca:83:32:1c:32:0d:55:cc: 23:1a:44:6f:d9:5e:76:35:b4:24:e9:c0:4d:f1:64:55:2c:5d: 22:83:df:17:cb:88:2c:22:8e:17:47:4e:87:7d:eb:f8:a1:bc: 8e:93:3c:6e:bb:a4:42:7a:7a:fc:1e:14:fd:58:3e:71:b6:61: 4d:83:7a:37:5a:47:7b:07:fd:0c:5d:2e:70:64:11:c5:36:4b: 5b:a8:d2:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPdtQ6bWfq4FHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZWJiODQ3MzgtMTRkZi00YWM1LWIwODAtMGQ3YWM2ZmEyZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+/yNFakPbxF6AMydVTgMJNFlokr2Jzmo/Z0 UqDRjkL4MuyGvZ9gmay5UG+NrNPbfuSVsh+HK9ChVxCcK0NcUBzUOA/p/WyKbALZ md9Zk0TG20wf4A5vMwc7QL47uDEuiOi9m7WEH+EcMHMFBgB5BwZEVOVWPGkffMqs kCpAn4kS43v3mrkzAT4hXqsSkn0lFYZaBv1XIF6b1A3ZGNf0EBzYadmxJqe97wSH 5xdPKXAkJSbdNuUlybwWlte/NG7Exv7XCZJxASABdCFU5jCht2A1qi75g4zxfvsL y40QmaWhvVCcbt5igspwnibEyvRWCyuBTGHz52kDi2/FfuwyywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMl1HgKX3VRpG2uD5W7HLxu58yQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjA2MzNlYjMtOGU1MS0z ZmZjLThhZjctZTBhNjVmMDBmODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPlZKyNF8lkUu+7HUlBMgoBCwdCUxDnjA8+EtE8c7DyDPXI0qNgRbVA BtQgZiR7GzJezmIrLQv7wmZGE7lRWFQOfw2HGwxVnQrkYs1AsveTWFxlhTKSTiut VH9syry7RuJHpzavg4GkaoE44muycATv4RTb4At4fxtdZoNyXW0fJeCv+XBCEIqD DRpzOwMj1OcX1NTBfLBeV9kgqN2HOrJEiBHgmJu+glCHOBfKgzIcMg1VzCMaRG/Z XnY1tCTpwE3xZFUsXSKD3xfLiCwijhdHTod96/ihvI6TPG67pEJ6evweFP1YPnG2 YU2DejdaR3sH/QxdLnBkEcU2S1uo0tk= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:15 2025 by rpki-client