$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e66b6b29-49e9-3731-8ad2-6f18524fd008.roa File: e66b6b29-49e9-3731-8ad2-6f18524fd008.roa (raw, json) Hash identifier: o0fO+JVeL3f8fWdMxLOlhNFHQLNJaOaQJ6FnzY1qFqU= Subject key identifier: 56:14:91:07:9E:54:B1:77:D3:4C:D9:CD:3E:73:C0:FC:D9:65:2F:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B4A4711662B93B7F1887DD420 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e66b6b29-49e9-3731-8ad2-6f18524fd008.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 7029 IP address blocks: 98.18.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:11:66:2b:93:b7:f1:88:7d:d4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=d785a475-1d0c-40ad-8ef0-1fdc1ad1098e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:00:28:5a:72:f9:79:12:67:b6:58:b1:1a: f2:bb:d9:cb:df:ec:d1:76:b0:f5:fd:fc:b1:a0:be: a1:39:fb:69:7b:93:20:25:9f:16:06:d4:1a:7b:b7: 9f:c4:28:79:ce:ba:48:1e:88:ef:b7:4a:5e:d9:86: 42:ca:c5:5f:d2:5a:12:45:5b:17:7b:b5:4c:43:5b: 1c:03:a4:a3:f6:a1:e9:1e:c6:0c:2a:74:dc:2e:30: 2a:c6:b1:cc:0a:39:18:f1:88:a1:d3:a1:3b:89:4c: fa:86:7c:75:c0:bd:ed:1b:50:8b:6a:a9:4d:97:b9: 92:3b:13:e6:d1:64:c8:ab:45:18:c9:39:1c:12:84: a0:05:f3:29:f9:3b:bb:64:12:53:4b:a4:ac:83:c2: a5:8a:db:38:f1:24:c4:96:fd:89:bc:42:b1:40:c6: ea:4a:d7:e1:32:fc:d7:a1:ef:51:fe:cc:44:7d:82: 4d:2f:cc:cd:de:5b:7b:36:57:7e:3b:56:d8:7f:e4: da:42:ad:29:be:7d:fb:52:d6:dd:92:bc:a0:b8:7a: f6:81:8b:5e:71:f1:00:49:3e:49:ba:c3:c8:55:42: 3c:54:91:16:57:9c:05:d8:e6:00:0c:31:00:34:c3: 2f:38:f1:e8:5a:c0:16:dd:56:bf:64:ea:f7:e9:bc: 69:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:14:91:07:9E:54:B1:77:D3:4C:D9:CD:3E:73:C0:FC:D9:65:2F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e66b6b29-49e9-3731-8ad2-6f18524fd008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ec:37:2d:a2:17:05:ad:a6:a2:79:05:a6:bf:8b:9c:b2:36: 41:16:e6:4c:e2:31:fe:39:f1:cb:6c:2f:76:c3:60:9f:8f:7d: 6f:9e:c1:fc:35:87:5c:ec:a0:b2:41:e2:01:eb:5d:5d:05:f0: 02:45:db:cd:f4:6b:ca:40:70:c3:66:96:54:0e:67:c6:4d:f2: e5:f1:26:aa:5c:b0:57:7a:c0:30:3d:7c:ba:f1:cc:fd:d9:24: 2e:1a:5a:a7:5c:eb:cb:ed:17:47:2d:f4:5c:fc:49:5e:d8:be: e3:de:4f:3b:06:5d:90:70:11:0c:f9:80:d6:db:7b:3c:84:cd: af:a5:a5:ff:60:f3:24:fd:26:01:e2:90:a2:29:fa:1f:72:38: 3d:b8:06:a0:27:ef:82:d3:a5:83:e4:5f:b1:62:36:54:48:5f: de:18:01:6f:d9:4e:07:9b:89:1d:0f:3e:59:6a:89:74:87:d9: 09:1a:08:6f:e4:3f:14:2f:49:fd:80:a6:a2:dc:05:ab:e2:aa: 5f:2b:7f:ed:d7:b2:1f:de:6e:dc:b3:7e:d4:4b:d2:07:11:07: 8c:7a:43:9c:7c:62:ba:2b:c3:36:7c:91:6b:da:8a:30:61:2e: 6c:c2:d9:55:a2:7e:55:4a:18:d1:1c:4e:0e:18:16:4d:18:d8: 83:df:9b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxFmK5O38Yh91CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZDc4NWE0NzUtMWQwYy00MGFkLThlZjAtMWZkYzFhZDEwOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycAAKFpy+XkSZ7ZYsRryu9nL3+zRdrD1/fyx oL6hOftpe5MgJZ8WBtQae7efxCh5zrpIHojvt0pe2YZCysVf0loSRVsXe7VMQ1sc A6Sj9qHpHsYMKnTcLjAqxrHMCjkY8Yih06E7iUz6hnx1wL3tG1CLaqlNl7mSOxPm 0WTIq0UYyTkcEoSgBfMp+Tu7ZBJTS6Ssg8Klits48STElv2JvEKxQMbqStfhMvzX oe9R/sxEfYJNL8zN3lt7Nld+O1bYf+TaQq0pvn37UtbdkryguHr2gYtecfEAST5J usPIVUI8VJEWV5wF2OYADDEANMMvOPHoWsAW3Va/ZOr36bxpfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYUkQeeVLF300zZzT5zwPzZZS+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTY2YjZiMjktNDllOS0z NzMxLThhZDItNmYxODUyNGZkMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfsNy2iFwWtpqJ5Baa/i5yyNkEW5kziMf458ctsL3bDYJ+PfW+ewfw1 h1zsoLJB4gHrXV0F8AJF2830a8pAcMNmllQOZ8ZN8uXxJqpcsFd6wDA9fLrxzP3Z JC4aWqdc68vtF0ct9Fz8SV7YvuPeTzsGXZBwEQz5gNbbezyEza+lpf9g8yT9JgHi kKIp+h9yOD24BqAn74LTpYPkX7FiNlRIX94YAW/ZTgebiR0PPllqiXSH2QkaCG/k PxQvSf2ApqLcBaviql8rf+3Xsh/ebtyzftRL0gcRB4x6Q5x8YrorwzZ8kWvaijBh LmzC2VWiflVKGNEcTg4YFk0Y2IPfm/Y= -----END CERTIFICATE-----Generated at Fri Oct 10 17:52:04 2025 by rpki-client