$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df5c6ea5-e9eb-3549-b5ae-6f4d89811fa8.roa File: df5c6ea5-e9eb-3549-b5ae-6f4d89811fa8.roa (raw, json) Hash identifier: kmMOnJNSJ5DMbga8H2TxcMJ6DAr/uHZCtUxL0wTxj8E= Subject key identifier: 0F:B4:05:8D:28:5D:D8:4C:52:4A:9F:90:A4:AE:BC:7D:41:DD:C5:74 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C464E20F2D67010746E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df5c6ea5-e9eb-3549-b5ae-6f4d89811fa8.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.17.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:46:4e:20:f2:d6:70:10:74:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=ff8a9bc3-4fdd-4edb-a232-6cacd080be7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:c5:a4:e0:77:b7:24:18:56:de:9e:07:a9: a1:a3:1b:9b:e9:a0:44:e0:52:d4:0b:2c:0c:3f:d0: 0e:33:6b:ad:9d:28:ee:0a:43:71:cc:de:e9:2e:2c: 37:c0:f4:f2:8f:c4:e3:ac:c5:48:b3:02:3b:b5:9a: 29:c8:43:51:bf:91:50:39:df:55:0c:e0:2d:28:67: 23:46:8c:2d:c2:66:d2:bc:3e:68:a8:02:db:b5:a6: 44:5a:32:4f:1e:da:d8:10:31:b1:56:3d:8b:d1:24: 26:59:51:fc:28:d4:4d:f3:cd:a5:79:31:76:83:42: d6:8c:f0:44:16:7d:bb:29:12:99:e7:79:6e:1e:06: 2c:c6:5f:cc:06:02:98:bd:e0:9d:fb:31:e5:39:e6: 08:4f:6f:65:9d:21:49:1f:45:fa:20:a9:0f:27:2c: 61:8d:51:93:d9:46:18:c5:61:fc:1d:06:36:07:32: 39:88:0b:d2:6b:e0:f8:03:b0:17:9e:89:a3:57:c4: 8a:8a:d4:b1:c1:1b:45:d7:c5:93:18:07:19:b4:c2: e8:31:d5:fb:35:4e:fc:c6:66:c7:dd:5e:30:3a:17: 6c:0a:f2:9d:a8:c9:11:d1:1d:15:07:fe:ec:c0:b4: f5:b3:16:ba:29:64:2f:b3:4d:4a:13:dd:fb:fe:78: fc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B4:05:8D:28:5D:D8:4C:52:4A:9F:90:A4:AE:BC:7D:41:DD:C5:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df5c6ea5-e9eb-3549-b5ae-6f4d89811fa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:97:ef:55:97:a0:ca:b0:ca:c6:d6:90:31:6d:63:fd:63:c5: 3b:c1:07:c5:ad:78:84:86:13:ae:3c:b0:9b:24:88:c4:fc:0d: 4e:9c:11:29:a6:49:b4:ec:21:93:7b:88:f3:25:a4:d6:99:08: 69:0b:68:fe:66:90:57:e3:dc:c8:c2:b7:6a:4f:8a:3e:26:3e: 3d:d7:82:a5:f3:36:e5:01:a9:6c:f0:6b:95:70:c5:e1:ec:c7: ab:ff:a7:02:ae:52:1c:d6:49:dd:4d:a2:cf:33:12:90:37:bd: 95:ab:3e:3a:5e:0e:8e:52:3c:fc:40:64:6b:e3:ac:a0:c8:5a: 19:a5:be:d6:b1:13:5f:92:1c:78:6a:2f:03:ba:4a:fb:f6:ef: 89:f2:db:dd:b1:ea:4a:e3:db:0e:a2:d9:39:b2:db:1e:58:0b: ab:10:3a:3f:05:ed:e9:df:1b:3c:93:bb:56:07:2e:7f:b0:a4: 65:a2:ad:dc:5c:04:2f:a5:fb:d7:02:b5:78:3f:9a:15:30:74: 5b:db:3f:66:47:73:19:86:d7:44:6e:b5:1d:25:e0:4d:22:f4: c1:15:60:67:96:a2:ce:15:36:9b:ad:4b:18:c3:12:65:53:c8: 00:20:d0:c3:87:12:33:a6:48:0a:8e:c5:b2:c8:f6:33:85:52: 42:47:79:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEZOIPLWcBB0boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZmY4YTliYzMtNGZkZC00ZWRiLWEyMzItNmNhY2QwODBiZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIbFpOB3tyQYVt6eB6mhoxub6aBE4FLUCywM P9AOM2utnSjuCkNxzN7pLiw3wPTyj8TjrMVIswI7tZopyENRv5FQOd9VDOAtKGcj RowtwmbSvD5oqALbtaZEWjJPHtrYEDGxVj2L0SQmWVH8KNRN882leTF2g0LWjPBE Fn27KRKZ53luHgYsxl/MBgKYveCd+zHlOeYIT29lnSFJH0X6IKkPJyxhjVGT2UYY xWH8HQY2BzI5iAvSa+D4A7AXnomjV8SKitSxwRtF18WTGAcZtMLoMdX7NU78xmbH 3V4wOhdsCvKdqMkR0R0VB/7swLT1sxa6KWQvs01KE937/nj8eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+0BY0oXdhMUkqfkKSuvH1B3cV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGY1YzZlYTUtZTllYi0z NTQ5LWI1YWUtNmY0ZDg5ODExZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhF0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyX71WXoMqwysbWkDFtY/1jxTvBB8WteISGE648sJskiMT8DU6cESmm SbTsIZN7iPMlpNaZCGkLaP5mkFfj3MjCt2pPij4mPj3XgqXzNuUBqWzwa5VwxeHs x6v/pwKuUhzWSd1Nos8zEpA3vZWrPjpeDo5SPPxAZGvjrKDIWhmlvtaxE1+SHHhq LwO6Svv274ny292x6krj2w6i2Tmy2x5YC6sQOj8F7enfGzyTu1YHLn+wpGWirdxc BC+l+9cCtXg/mhUwdFvbP2ZHcxmG10RutR0l4E0i9MEVYGeWos4VNputSxjDEmVT yAAg0MOHEjOmSAqOxbLI9jOFUkJHebU= -----END CERTIFICATE-----Generated at Fri Oct 10 17:51:29 2025 by rpki-client