$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa File: f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa (raw, json) Hash identifier: H5E40NQKvu4Me85Jz9fCrUDsf8xoVCcfQIWoE5rFskI= Subject key identifier: F9:2E:F9:D0:4D:5E:8E:A6:B9:37:D4:44:59:E1:6B:A1:D4:51:96:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B5F374C531055245C697D9400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.17.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:4c:53:10:55:24:5c:69:7d:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=d3911a42-34e1-4079-a4c2-c493da1f41e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d8:58:d6:54:43:24:d4:40:38:07:b8:c5:82: 4b:0d:f7:24:8d:18:d5:e0:9a:af:03:ed:32:9c:67: 23:aa:4b:a9:07:0d:63:1d:03:5f:91:1d:20:20:00: 5d:81:fa:ec:8d:7a:a4:9c:f5:f8:64:e9:86:a9:1e: f5:6b:73:e4:5b:4d:fd:14:1d:80:86:5d:2b:56:de: 44:e4:a2:cb:f7:95:1a:36:d8:da:39:e9:e5:4c:51: 65:eb:58:bd:61:a6:ef:f5:bf:25:ef:5a:6a:1a:1e: 83:6d:a7:0d:d4:11:65:17:5e:ef:5d:7d:ee:83:04: 28:b1:12:66:dc:9f:ea:fc:38:cf:19:7f:33:4f:b7: 44:e4:18:23:05:7f:17:51:fe:6d:89:a7:01:54:fe: 4a:e2:df:b6:36:27:08:03:ef:ae:cb:11:37:a3:1d: 2f:86:e9:90:26:bd:2e:67:34:ed:a1:03:80:a6:15: c9:88:20:ce:1e:6b:21:df:1b:ce:ea:cb:cc:38:fa: 81:d6:12:86:c5:e8:92:5d:e0:0e:17:74:6b:67:99: 14:15:93:c5:8e:53:9e:dd:78:53:de:15:19:49:e4: 3e:81:5c:ec:f3:64:c7:84:be:70:ce:d7:29:ff:63: 2b:34:75:b2:4e:b5:2b:44:27:0d:21:af:02:69:77: 76:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2E:F9:D0:4D:5E:8E:A6:B9:37:D4:44:59:E1:6B:A1:D4:51:96:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f8c75953-c9ed-3dcb-902c-b93f34d4a151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e4:55:46:ff:1f:37:51:a2:86:b1:09:25:c1:5f:1d:23:09: fa:60:07:48:39:5b:d9:e9:37:a0:44:56:22:79:b4:de:ec:ea: 6e:81:4c:56:56:0d:ce:9d:d4:71:a1:30:9e:49:6d:ac:b0:5f: dd:58:c0:b0:e1:3f:01:18:31:c7:4b:d2:94:64:d0:bb:fc:5c: ee:a3:75:56:2f:94:d9:cd:17:95:66:72:39:22:70:1e:a5:4a: 42:a9:0d:05:b6:93:a1:a2:19:21:a9:2e:e0:8e:f1:36:4f:e1: 26:3f:46:4e:66:d2:75:45:4d:7d:56:b5:5f:78:9e:2a:d8:b0: 0e:6f:cb:4b:c3:5e:0e:82:f9:1f:47:06:63:48:ac:3e:df:36: f3:e2:e8:2a:c8:92:4b:99:98:09:43:01:73:9c:42:c3:16:ae: f9:19:28:ac:24:c2:c4:e1:a2:09:bd:ce:f3:8e:28:64:00:10: 77:32:8b:d2:8b:92:54:16:cf:61:53:e4:a0:1d:f6:a7:77:f0: d1:5a:eb:1d:8f:5b:86:1b:c7:30:0f:92:6b:5e:d1:d8:96:34: 45:5d:e7:0d:41:2e:59:3f:b4:87:c7:0f:e2:e9:d9:df:ee:40: 89:77:9f:6a:b3:c9:d7:b2:4f:9b:3c:fb:9a:c2:47:f3:71:8f: e1:a2:4f:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0xTEFUkXGl9lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk ZDM5MTFhNDItMzRlMS00MDc5LWE0YzItYzQ5M2RhMWY0MWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dhY1lRDJNRAOAe4xYJLDfckjRjV4JqvA+0y nGcjqkupBw1jHQNfkR0gIABdgfrsjXqknPX4ZOmGqR71a3PkW039FB2Ahl0rVt5E 5KLL95UaNtjaOenlTFFl61i9Yabv9b8l71pqGh6DbacN1BFlF17vXX3ugwQosRJm 3J/q/DjPGX8zT7dE5BgjBX8XUf5tiacBVP5K4t+2NicIA++uyxE3ox0vhumQJr0u ZzTtoQOAphXJiCDOHmsh3xvO6svMOPqB1hKGxeiSXeAOF3RrZ5kUFZPFjlOe3XhT 3hUZSeQ+gVzs82THhL5wztcp/2MrNHWyTrUrRCcNIa8CaXd2TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPku+dBNXo6muTfURFnha6HUUZaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjhjNzU5NTMtYzllZC0z ZGNiLTkwMmMtYjkzZjM0ZDRhMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjkVUb/HzdRooaxCSXBXx0jCfpgB0g5W9npN6BEViJ5tN7s6m6BTFZW Dc6d1HGhMJ5JbaywX91YwLDhPwEYMcdL0pRk0Lv8XO6jdVYvlNnNF5VmcjkicB6l SkKpDQW2k6GiGSGpLuCO8TZP4SY/Rk5m0nVFTX1WtV94nirYsA5vy0vDXg6C+R9H BmNIrD7fNvPi6CrIkkuZmAlDAXOcQsMWrvkZKKwkwsThogm9zvOOKGQAEHcyi9KL klQWz2FT5KAd9qd38NFa6x2PW4YbxzAPkmte0diWNEVd5w1BLlk/tIfHD+Lp2d/u QIl3n2qzydeyT5s8+5rCR/Nxj+GiT08= -----END CERTIFICATE-----Generated at Fri Oct 10 19:57:35 2025 by rpki-client