$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa File: f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa (raw, json) Hash identifier: IkYw4vp4B6ZQe66HJsASs8IgiEMJ5MeW1mHSGrZo7ik= Subject key identifier: 09:EB:25:CE:21:0A:55:F9:B6:32:13:01:8A:89:08:51:97:96:EA:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA6E62CFE0EA540708C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 98.16.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a6:e6:2c:fe:0e:a5:40:70:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=8db0c4c7-c633-4b77-ac23-bebe800a8af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f8:d2:3e:81:de:1b:14:19:ca:a0:50:57:ef: 74:66:52:eb:80:0d:e7:3a:e0:d1:84:f2:3b:b1:44: a5:f4:a9:ab:9d:e3:4e:bd:f6:a2:2c:76:52:e9:31: f4:19:cb:15:24:2f:d9:e7:4c:05:0e:10:6a:8a:28: 85:a5:6d:2e:48:2d:f0:36:d9:88:bc:38:1d:8d:e2: 9c:01:20:5e:f3:52:e2:3f:b2:45:7e:a4:ad:62:78: ca:11:a4:8b:c4:53:5b:c6:f5:f9:dd:b9:9a:37:43: 61:17:9a:1c:7b:b6:19:f8:82:25:6c:55:ed:e4:ad: 66:78:90:43:0f:f6:86:76:f1:13:65:53:01:75:d5: c3:2a:64:8b:75:f2:9a:fb:6a:d3:71:2a:ff:b2:d3: 60:72:78:5f:52:3a:9f:2c:03:1f:c4:53:14:f4:ed: a5:2b:b2:1f:35:df:f2:6e:af:66:f1:4b:db:4d:37: 42:cd:06:39:df:71:2a:ce:98:3f:41:48:f2:ec:28: 36:87:98:6a:1c:fa:6a:f3:b9:f0:66:6d:26:3d:2e: 41:20:f4:94:93:22:22:c4:35:8f:c0:5e:d8:9d:22: a0:8d:d3:98:bf:2a:59:0e:18:b6:84:f7:b7:97:91: d5:3e:dd:7d:21:50:cb:69:e5:32:9c:d0:01:33:36: d1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EB:25:CE:21:0A:55:F9:B6:32:13:01:8A:89:08:51:97:96:EA:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:26:0b:82:73:9e:fc:10:4d:20:bd:b0:7c:3e:ac:42:eb:2d: 12:3a:2f:fe:30:ad:d6:8b:fd:7c:db:5f:e1:2f:be:5b:a6:af: 4c:89:b1:d8:a7:be:e1:bf:d3:b4:0a:4e:cd:fc:aa:d0:51:57: 83:91:f5:f6:5d:9a:ab:52:3c:8c:df:37:42:d5:ff:d6:6f:ab: b0:2d:1a:71:9f:14:af:7d:71:a1:bd:f0:1a:19:89:4d:a6:d6: 97:7d:b4:c1:5a:1c:27:6d:5d:72:c8:c3:f2:71:42:c3:7f:28: 5c:68:e3:3f:d1:c9:67:77:c5:f1:23:be:15:97:c7:80:99:d2: 77:84:ef:69:ad:4f:fc:5b:da:69:86:33:1d:fc:de:b9:90:12: 10:63:46:79:2f:ea:77:f9:e9:01:da:29:7a:48:00:e8:2c:27: bb:a1:9e:b3:f1:e4:e1:dc:fa:98:17:00:ab:53:dd:a8:30:7a: 89:04:bd:6a:04:af:e6:48:24:09:b3:55:79:49:6d:f3:de:b9: 6b:26:6f:94:aa:cd:f7:1f:d2:89:f7:f5:b8:36:69:d5:63:77: c2:84:8c:98:25:dc:13:90:f5:e4:7c:18:7f:56:4c:f8:0a:49: 29:20:de:5d:e4:77:8c:c0:d4:3f:8c:26:d8:4d:48:9b:66:ea: 36:59:45:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKbmLP4OpUBwjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OGRiMGM0YzctYzYzMy00Yjc3LWFjMjMtYmViZTgwMGE4YWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifjSPoHeGxQZyqBQV+90ZlLrgA3nOuDRhPI7 sUSl9KmrneNOvfaiLHZS6TH0GcsVJC/Z50wFDhBqiiiFpW0uSC3wNtmIvDgdjeKc ASBe81LiP7JFfqStYnjKEaSLxFNbxvX53bmaN0NhF5oce7YZ+IIlbFXt5K1meJBD D/aGdvETZVMBddXDKmSLdfKa+2rTcSr/stNgcnhfUjqfLAMfxFMU9O2lK7IfNd/y bq9m8UvbTTdCzQY533Eqzpg/QUjy7Cg2h5hqHPpq87nwZm0mPS5BIPSUkyIixDWP wF7YnSKgjdOYvypZDhi2hPe3l5HVPt19IVDLaeUynNABMzbR+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnrJc4hClX5tjITAYqJCFGXluqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFmM2I4OWYtMTUwNC0z ZmY4LWE0ZjctYjcwN2UyMGQ5MjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEmC4JznvwQTSC9sHw+rELrLRI6L/4wrdaL/XzbX+Evvlumr0yJsdin vuG/07QKTs38qtBRV4OR9fZdmqtSPIzfN0LV/9Zvq7AtGnGfFK99caG98BoZiU2m 1pd9tMFaHCdtXXLIw/JxQsN/KFxo4z/RyWd3xfEjvhWXx4CZ0neE72mtT/xb2mmG Mx383rmQEhBjRnkv6nf56QHaKXpIAOgsJ7uhnrPx5OHc+pgXAKtT3agweokEvWoE r+ZIJAmzVXlJbfPeuWsmb5Sqzfcf0on39bg2adVjd8KEjJgl3BOQ9eR8GH9WTPgK SSkg3l3kd4zA1D+MJthNSJtm6jZZRfs= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:35 2025 by rpki-client