$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de0d850c-b09a-3f82-9faf-277618cc2665.roa File: de0d850c-b09a-3f82-9faf-277618cc2665.roa (raw, json) Hash identifier: aNvJYsWNRjmFpihTSdB2wifXOc6x5I80EFxR7jS08UM= Subject key identifier: 6A:20:7D:EE:B4:2A:9B:C9:E9:C6:5A:40:0E:01:54:19:34:09:97:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6E91FF8D55AC74DD7A7FC6E8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de0d850c-b09a-3f82-9faf-277618cc2665.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 7029 IP address blocks: 98.23.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:ff:8d:55:ac:74:dd:7a:7f:c6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=91cc0075-3942-4d79-ac2f-ae071680ecbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:47:be:f7:cc:d6:42:57:10:7f:5e:57:e3: 34:4c:d6:65:28:7c:a1:cb:ec:c6:af:6e:ab:70:f9: 12:eb:e3:0d:85:65:46:d8:a6:7d:00:f7:81:bb:58: 05:a0:ff:9b:92:0f:52:fb:4f:fb:cf:9e:9d:3e:b5: 7e:5c:3f:aa:b7:06:2c:a7:a9:ee:66:66:ac:00:9c: e0:b8:ce:ac:b2:03:1d:c9:05:9d:59:7d:23:42:9f: 72:c2:54:d7:df:71:a3:73:c5:63:3c:5c:40:6d:af: 77:10:39:1a:48:3e:6d:fb:5a:5d:ab:1b:9b:5a:80: a0:a3:c4:14:26:59:75:8b:13:63:c0:4f:7e:93:d6: f9:5b:b5:a1:2c:9b:31:66:6c:3b:83:e7:0e:ef:27: 34:84:7f:be:a2:92:66:73:0c:50:55:bb:04:bf:5c: 1d:ee:26:07:4b:bc:f5:64:54:bd:f4:4c:1b:58:f3: 5a:21:14:37:3b:6a:5a:ff:02:a2:06:41:aa:eb:51: d5:3b:8d:a8:a6:8b:0a:40:7e:48:14:c8:1c:8d:e6: e6:bc:39:95:36:05:6a:69:8d:07:2f:dd:82:96:af: bb:57:a9:b5:b2:7d:b8:70:e4:17:34:96:7b:e3:ae: 94:22:a6:f8:16:0c:1d:92:a6:84:56:41:50:85:57: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:20:7D:EE:B4:2A:9B:C9:E9:C6:5A:40:0E:01:54:19:34:09:97:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de0d850c-b09a-3f82-9faf-277618cc2665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:54:9e:1f:e7:91:7a:7e:69:85:a0:51:f6:ad:38:6c:80:a3: e7:57:f2:9d:79:45:38:53:0f:41:73:e9:85:8a:1b:dd:4d:a8: 8b:5b:fd:c0:77:1c:82:0f:b0:5d:b4:60:09:04:54:e4:04:59: 81:44:df:a9:37:cc:e0:20:26:2b:71:f8:8b:cc:fe:0d:97:6e: 4c:5b:4a:08:39:31:b3:22:d7:6d:1a:cf:c6:cf:17:85:1c:fd: 09:fc:93:1b:f1:a0:3a:f0:88:53:87:3b:4c:0d:91:2d:f4:59: 42:cf:af:65:fa:2d:5e:53:a0:07:6b:41:24:8b:77:c4:52:d2: 78:a6:09:7b:8b:68:33:8e:c2:63:ca:f9:e2:e6:21:4b:76:d6: 1f:a6:b4:15:65:45:c3:86:e6:d1:c4:f6:d1:af:53:03:9c:37: 2a:98:76:3d:dd:c3:68:22:e7:20:43:76:94:8a:5c:2a:2d:ae: 13:a1:1c:da:f1:90:db:38:a1:6c:70:c4:67:e8:d5:70:33:08: ad:e3:af:00:24:a3:3d:80:14:00:a8:40:39:0c:02:a5:07:7e: ea:2f:41:f2:5c:c6:20:76:c2:33:5a:8e:fe:6e:88:ae:ef:32: 17:60:4d:9d:56:4a:5e:19:d5:eb:d3:bf:82:56:44:8e:2a:f7: f7:67:15:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukf+NVax03Xp/xugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk OTFjYzAwNzUtMzk0Mi00ZDc5LWFjMmYtYWUwNzE2ODBlY2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YhHvvfM1kJXEH9eV+M0TNZlKHyhy+zGr26r cPkS6+MNhWVG2KZ9APeBu1gFoP+bkg9S+0/7z56dPrV+XD+qtwYsp6nuZmasAJzg uM6ssgMdyQWdWX0jQp9ywlTX33Gjc8VjPFxAba93EDkaSD5t+1pdqxubWoCgo8QU Jll1ixNjwE9+k9b5W7WhLJsxZmw7g+cO7yc0hH++opJmcwxQVbsEv1wd7iYHS7z1 ZFS99EwbWPNaIRQ3O2pa/wKiBkGq61HVO42oposKQH5IFMgcjebmvDmVNgVqaY0H L92Clq+7V6m1sn24cOQXNJZ7466UIqb4FgwdkqaEVkFQhVfuSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGogfe60KpvJ6cZaQA4BVBk0CZdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGUwZDg1MGMtYjA5YS0z ZjgyLTlmYWYtMjc3NjE4Y2MyNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRUnh/nkXp+aYWgUfatOGyAo+dX8p15RThTD0Fz6YWKG91NqItb/cB3 HIIPsF20YAkEVOQEWYFE36k3zOAgJitx+IvM/g2XbkxbSgg5MbMi120az8bPF4Uc /Qn8kxvxoDrwiFOHO0wNkS30WULPr2X6LV5ToAdrQSSLd8RS0nimCXuLaDOOwmPK +eLmIUt21h+mtBVlRcOG5tHE9tGvUwOcNyqYdj3dw2gi5yBDdpSKXCotrhOhHNrx kNs4oWxwxGfo1XAzCK3jrwAkoz2AFACoQDkMAqUHfuovQfJcxiB2wjNajv5uiK7v MhdgTZ1WSl4Z1evTv4JWRI4q9/dnFYA= -----END CERTIFICATE-----Generated at Fri Oct 10 22:07:45 2025 by rpki-client