$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/2d0e13e5-4120-3298-b17e-67e7af5580bd.roa File: 2d0e13e5-4120-3298-b17e-67e7af5580bd.roa (raw, json) Hash identifier: VPprwAFGpeN6CqtszJP9ffZwC+6D59am3o3UQaqGrPs= Subject key identifier: 85:17:B6:A0:E0:BB:31:B0:FC:1F:8C:C5:31:A7:56:CE:7A:C1:70:C3 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584BA39D147546869AC8A1D29F80 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/2d0e13e5-4120-3298-b17e-67e7af5580bd.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 399728 IP address blocks: 172.98.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:14:75:46:86:9a:c8:a1:d2:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=938d8b07-42bd-43ae-ba54-7a6c357e57d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:3d:10:ec:5f:a6:c8:7f:19:78:54:d0:a1: 4c:33:ee:b0:a6:80:fc:6b:c0:f7:e5:05:ef:a7:ab: 8d:b2:96:39:31:93:29:1f:6c:dc:af:18:c9:4d:36: 8a:4f:d2:3f:3b:77:69:14:cb:6d:7c:51:73:9c:d9: 52:6a:7c:1e:4d:64:b7:f1:e2:d1:ce:31:c0:33:2c: 50:19:be:6a:37:31:f9:10:23:71:f9:a5:42:5f:b0: e9:59:a4:03:3b:74:6d:ba:56:22:e5:ca:a0:e6:f0: c0:43:49:d2:91:1a:c9:01:b9:6a:5a:ff:a2:b2:c5: 43:a1:1c:ec:97:9b:5b:5b:3c:26:b5:74:8f:b0:f6: c2:6d:86:85:6a:e8:7d:7e:ac:ab:6a:79:49:94:2a: 93:a3:26:7b:3b:e7:68:28:68:a3:28:1d:7c:1a:b4: 25:f8:93:95:41:b8:ff:75:9d:89:9e:f0:3c:d2:5a: eb:ee:aa:ce:35:5a:f2:30:fd:75:4f:a5:9f:0f:1c: 19:28:63:30:a2:6f:7d:1a:4a:59:ca:66:7a:66:d6: ea:19:5e:75:4f:ca:4f:82:77:a7:ad:e7:5d:f1:fd: 57:ae:b0:9a:5e:2f:e6:5e:e0:71:8b:17:b0:35:ec: 61:2a:12:18:fa:62:11:49:49:c4:ad:03:b1:42:1e: 5e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:17:B6:A0:E0:BB:31:B0:FC:1F:8C:C5:31:A7:56:CE:7A:C1:70:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/2d0e13e5-4120-3298-b17e-67e7af5580bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv4: 172.98.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:4c:de:6d:b9:7b:ff:04:d6:56:e6:db:91:1b:8f:aa:8e:3e: c0:f6:a5:13:ce:8e:e1:95:b8:f1:d3:f2:cb:a4:38:8a:5f:aa: e6:a4:84:06:af:b1:42:3e:db:16:6e:2d:8f:8f:0c:eb:09:38: e0:b2:44:6c:11:a9:bd:bb:97:75:44:fb:42:fc:5a:c6:20:3c: 32:52:05:b5:18:61:03:c3:91:d6:e1:0f:81:66:7d:5a:fc:85: aa:88:e7:71:1a:84:5a:4d:b5:b1:70:21:1e:ef:0a:7e:d3:e3: d1:ad:90:3e:01:58:7f:ad:7c:0b:cd:33:25:e8:0c:63:99:61: d0:af:59:5e:9d:e0:ff:0b:42:3c:12:1e:23:33:cb:37:73:b7: 91:66:d3:b3:74:4a:0c:13:e3:0e:22:6b:89:e0:0d:de:65:a4: 05:d0:d6:ec:0a:f1:80:49:17:06:cc:fc:56:d1:5c:69:47:a9: 4e:2b:49:62:1f:40:77:cf:76:33:44:2a:fa:16:c1:01:5b:d7: fc:cd:91:82:c1:30:64:50:2f:32:ee:16:24:9b:c3:86:17:c1: bc:14:19:b4:b7:82:2b:8a:8b:86:ad:af:40:76:92:13:35:a4: 50:5c:87:bc:e8:b1:d3:8e:1b:17:81:c1:84:18:7d:32:86:e9: 21:14:d8:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRR1RoaayKHSn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTM4ZDhiMDctNDJiZC00M2FlLWJhNTQtN2E2YzM1N2U1N2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujY9EOxfpsh/GXhU0KFMM+6wpoD8a8D35QXv p6uNspY5MZMpH2zcrxjJTTaKT9I/O3dpFMttfFFznNlSanweTWS38eLRzjHAMyxQ Gb5qNzH5ECNx+aVCX7DpWaQDO3RtulYi5cqg5vDAQ0nSkRrJAblqWv+issVDoRzs l5tbWzwmtXSPsPbCbYaFauh9fqyranlJlCqToyZ7O+doKGijKB18GrQl+JOVQbj/ dZ2JnvA80lrr7qrONVryMP11T6WfDxwZKGMwom99GkpZymZ6ZtbqGV51T8pPgnen redd8f1XrrCaXi/mXuBxixewNexhKhIY+mIRSUnErQOxQh5eNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUXtqDguzGw/B+MxTGnVs56wXDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvMmQwZTEzZTUtNDEyMC0z Mjk4LWIxN2UtNjdlN2FmNTU4MGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJM3m25e/8E1lbm25Ebj6qOPsD2pRPOjuGVuPHT8sukOIpfquakhAav sUI+2xZuLY+PDOsJOOCyRGwRqb27l3VE+0L8WsYgPDJSBbUYYQPDkdbhD4FmfVr8 haqI53EahFpNtbFwIR7vCn7T49GtkD4BWH+tfAvNMyXoDGOZYdCvWV6d4P8LQjwS HiMzyzdzt5Fm07N0SgwT4w4ia4ngDd5lpAXQ1uwK8YBJFwbM/FbRXGlHqU4rSWIf QHfPdjNEKvoWwQFb1/zNkYLBMGRQLzLuFiSbw4YXwbwUGbS3giuKi4atr0B2khM1 pFBch7zosdOOGxeBwYQYfTKG6SEU2H0= -----END CERTIFICATE-----Generated at Wed Nov 5 14:30:40 2025 by rpki-client