$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa File: c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa (raw, json) Hash identifier: ckkifgk1KOu2EFRhjmMr7duGEHsGrDzqdl7kxCoTloM= Subject key identifier: F8:0D:15:ED:E4:6E:31:70:74:C5:91:1F:4D:01:E7:AB:D9:F3:84:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C4787F85EED49BF9335DC Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.22.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:47:87:f8:5e:ed:49:bf:93:35:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=77f5addd-8723-452b-be1f-f677d8233a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:ff:0c:a6:c4:df:25:46:d2:f8:c3:40:a5: 37:24:c1:1e:f9:0f:45:ff:88:59:9c:e9:a4:d2:d3: b5:a2:86:ef:c8:db:fd:3e:4d:72:8c:ad:c1:ff:9a: ce:55:a2:1a:e6:97:75:4a:39:36:52:90:7d:11:ef: 53:4e:45:31:0d:a9:cf:8e:69:0f:1a:92:bf:f6:a2: 34:36:31:90:bb:5b:01:99:20:ac:43:80:05:25:20: cc:c3:a8:99:6b:f8:73:f4:6d:d0:1c:12:ba:ff:ad: 77:30:a4:41:2d:5c:6f:75:60:9d:ea:00:d9:f0:52: dc:56:16:d3:24:cd:10:57:4f:19:f0:01:e8:11:22: ac:fb:9f:97:58:b2:1f:25:4b:40:64:89:a1:24:ad: 33:fa:c0:5a:59:e3:48:08:7b:3f:7d:a7:05:cd:2d: ca:80:24:09:94:11:c8:7b:b2:6f:f3:e5:9d:48:1a: 77:75:ed:4e:f9:77:16:a0:a5:17:0d:7c:7f:d3:a7: 08:c0:73:42:ab:f6:93:f6:6b:88:82:1b:e8:37:eb: 04:a9:5a:1f:e0:a0:ef:9d:3c:be:68:1f:ae:57:4c: af:1a:2e:a6:3c:1c:ef:79:ee:3e:27:51:ba:05:3d: 5a:ce:7b:b7:74:85:2d:c4:05:78:04:c3:e7:3a:66: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0D:15:ED:E4:6E:31:70:74:C5:91:1F:4D:01:E7:AB:D9:F3:84:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:93:70:52:b4:18:29:7e:08:79:9b:a3:9d:2b:7a:80:52:df: 2a:67:30:15:69:42:ef:1f:55:74:9f:7c:f3:a6:4f:49:68:da: 06:2b:9e:99:0e:69:0a:23:69:40:27:cd:8f:96:72:14:c5:64: a4:ae:09:2e:43:52:15:11:eb:3a:c6:74:9b:f7:a6:d1:0f:92: 41:e3:21:8b:c8:1e:a0:85:85:eb:55:cd:b3:dc:26:b6:1e:9e: b4:c5:52:54:0f:ba:45:fe:3f:bb:ef:75:cb:c2:e1:6a:27:53: 84:9f:c7:eb:70:45:ac:00:aa:bc:2a:c1:2c:27:d3:34:3a:de: d5:ad:da:37:b1:22:3e:e8:4e:e3:f7:a8:db:29:24:f1:96:8b: 2e:31:bb:ef:9e:38:da:24:5a:a3:16:cf:82:73:35:7a:56:69: 99:cf:67:d2:45:31:cc:fc:0e:cc:e3:60:0a:b5:31:0d:90:40: 88:a4:fa:4f:da:20:e0:b7:e1:ff:38:74:40:33:14:89:5c:db: cb:98:ef:90:5a:3d:3b:ad:00:a3:2a:6b:f9:07:e1:6d:b7:60: 17:90:98:9d:ba:ce:52:c8:05:be:1b:d8:0f:0d:60:b7:e5:79: b8:e3:ae:9b:fe:d1:b5:29:d6:7e:d0:36:47:76:49:25:d8:91: 22:9c:75:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEeH+F7tSb+TNdwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NzdmNWFkZGQtODcyMy00NTJiLWJlMWYtZjY3N2Q4MjMzYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqz/DKbE3yVG0vjDQKU3JMEe+Q9F/4hZnOmk 0tO1oobvyNv9Pk1yjK3B/5rOVaIa5pd1Sjk2UpB9Ee9TTkUxDanPjmkPGpK/9qI0 NjGQu1sBmSCsQ4AFJSDMw6iZa/hz9G3QHBK6/613MKRBLVxvdWCd6gDZ8FLcVhbT JM0QV08Z8AHoESKs+5+XWLIfJUtAZImhJK0z+sBaWeNICHs/facFzS3KgCQJlBHI e7Jv8+WdSBp3de1O+XcWoKUXDXx/06cIwHNCq/aT9muIghvoN+sEqVof4KDvnTy+ aB+uV0yvGi6mPBzvee4+J1G6BT1aznu3dIUtxAV4BMPnOmalLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgNFe3kbjFwdMWRH00B56vZ84ReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzljMzA0MWYtYjRlMC0z NTk4LTg4ZTgtNmFhMGJmNzQ0MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaTcFK0GCl+CHmbo50reoBS3ypnMBVpQu8fVXSffPOmT0lo2gYrnpkO aQojaUAnzY+WchTFZKSuCS5DUhUR6zrGdJv3ptEPkkHjIYvIHqCFhetVzbPcJrYe nrTFUlQPukX+P7vvdcvC4WonU4Sfx+twRawAqrwqwSwn0zQ63tWt2jexIj7oTuP3 qNspJPGWiy4xu++eONokWqMWz4JzNXpWaZnPZ9JFMcz8DszjYAq1MQ2QQIik+k/a IOC34f84dEAzFIlc28uY75BaPTutAKMqa/kH4W23YBeQmJ26zlLIBb4b2A8NYLfl ebjjrpv+0bUp1n7QNkd2SSXYkSKcddI= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:14 2025 by rpki-client