$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea842e5b-0de7-38f4-8af9-b017a7059cbb.roa File: ea842e5b-0de7-38f4-8af9-b017a7059cbb.roa (raw, json) Hash identifier: 7HP4etSU5UEr/A/oBof67cQeyGoFM9KAPF6tegHLx3U= Subject key identifier: 6F:37:D3:32:D6:2F:47:C8:EA:CF:EE:24:D8:B1:88:83:CC:85:C0:06 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AFC1BEC3374B35E83152FC700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea842e5b-0de7-38f4-8af9-b017a7059cbb.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.19.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ec:33:74:b3:5e:83:15:2f:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=bba4d1b9-48b8-48f8-8d21-10d13c8cc1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b1:c1:6a:4d:fe:50:40:b4:5d:31:7b:82:37: 51:1b:7b:82:17:cc:1d:e0:17:c0:b7:83:0f:92:da: 09:e7:9c:b6:ce:1c:57:51:ed:26:c3:03:af:30:e7: 6f:f0:c6:41:d9:e8:5a:98:96:58:18:67:79:5d:f8: da:87:84:da:e0:1f:ab:d0:ab:65:25:77:6a:aa:80: ae:7a:2c:08:41:29:2a:51:31:74:f5:63:8f:a2:1d: 62:f5:be:c2:86:98:c6:75:05:05:42:fd:87:b8:a8: d7:75:2f:7b:55:60:b7:22:ad:fa:bb:13:6e:b2:18: f0:5a:e3:5e:a1:88:c1:90:66:d7:07:c1:0e:91:03: 57:40:6f:e2:8d:dc:e0:7c:83:d5:e4:a7:cd:c0:a5: fa:66:6d:00:c1:5e:95:09:89:b8:7e:d4:c6:e5:da: ef:62:38:47:ee:cc:32:6e:63:ec:e5:f1:20:a6:44: 4a:2d:64:e4:f7:02:69:ea:99:88:ea:0d:b1:85:40: 2e:1d:ed:4c:c6:12:83:f0:eb:14:ae:1c:ef:82:33: 84:40:29:66:40:03:77:72:86:5e:54:c8:4c:12:c6: bb:f1:e4:7e:24:96:5a:00:f5:c8:d6:55:60:3a:2b: 17:a1:f8:c7:4f:53:10:b1:b1:b1:e4:49:81:57:f4: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:37:D3:32:D6:2F:47:C8:EA:CF:EE:24:D8:B1:88:83:CC:85:C0:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea842e5b-0de7-38f4-8af9-b017a7059cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d3:6c:6d:68:f8:00:3a:a2:d3:15:36:c8:ca:4b:69:1d:6f: 2e:50:a4:5e:49:89:c9:8d:03:71:e2:43:a0:92:22:ef:fc:1d: 28:33:de:31:d9:7a:55:8b:33:7b:77:b2:b5:44:e0:a1:fa:13: ea:3c:11:6c:c1:17:3e:bb:13:20:a1:a5:6e:25:a2:7e:ba:06: e4:4e:b7:7e:27:38:d2:ec:8e:06:de:c4:31:28:28:25:a8:1f: 38:25:50:c3:56:c0:01:72:41:e1:b6:a6:5a:06:55:ae:37:9a: 18:14:0b:19:7c:40:ae:ea:d3:22:dc:2c:52:07:1e:b8:ac:ee: bf:b1:ff:f9:77:55:ab:c9:bf:3c:62:3e:b2:ac:63:ef:1d:d4: 4c:66:01:69:09:77:91:6a:a0:57:91:ce:74:ce:0c:0a:13:29: 5d:9e:7a:b8:f4:50:35:80:b7:b1:07:15:d0:48:e9:96:38:aa: 81:b4:48:b9:ce:d2:35:d9:8a:47:f0:94:e0:81:e7:58:2e:95: 06:ef:8d:fd:a5:99:44:5c:74:82:56:77:88:bf:dd:0e:e7:6e: f1:fc:4f:9c:c2:7e:26:32:46:31:81:45:e6:0e:f6:f3:a5:6b: 94:56:87:81:d1:1c:04:ab:c3:45:9f:d1:7b:d2:dc:f5:77:83: c2:ec:61:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G+wzdLNegxUvxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YmJhNGQxYjktNDhiOC00OGY4LThkMjEtMTBkMTNjOGNjMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrHBak3+UEC0XTF7gjdRG3uCF8wd4BfAt4MP ktoJ55y2zhxXUe0mwwOvMOdv8MZB2ehamJZYGGd5Xfjah4Ta4B+r0KtlJXdqqoCu eiwIQSkqUTF09WOPoh1i9b7ChpjGdQUFQv2HuKjXdS97VWC3Iq36uxNushjwWuNe oYjBkGbXB8EOkQNXQG/ijdzgfIPV5KfNwKX6Zm0AwV6VCYm4ftTG5drvYjhH7swy bmPs5fEgpkRKLWTk9wJp6pmI6g2xhUAuHe1MxhKD8OsUrhzvgjOEQClmQAN3coZe VMhMEsa78eR+JJZaAPXI1lVgOisXofjHT1MQsbGx5EmBV/ROAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG830zLWL0fI6s/uJNixiIPMhcAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWE4NDJlNWItMGRlNy0z OGY0LThhZjktYjAxN2E3MDU5Y2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3TbG1o+AA6otMVNsjKS2kdby5QpF5JicmNA3HiQ6CSIu/8HSgz3jHZ elWLM3t3srVE4KH6E+o8EWzBFz67EyChpW4lon66BuROt34nONLsjgbexDEoKCWo HzglUMNWwAFyQeG2ploGVa43mhgUCxl8QK7q0yLcLFIHHris7r+x//l3VavJvzxi PrKsY+8d1ExmAWkJd5FqoFeRznTODAoTKV2eerj0UDWAt7EHFdBI6ZY4qoG0SLnO 0jXZikfwlOCB51gulQbvjf2lmURcdIJWd4i/3Q7nbvH8T5zCfiYyRjGBReYO9vOl a5RWh4HRHASrw0Wf0XvS3PV3g8LsYb0= -----END CERTIFICATE-----Generated at Fri Oct 10 22:23:32 2025 by rpki-client