$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1036a36e-2953-370a-be15-7e275eb5ecfb.roa File: 1036a36e-2953-370a-be15-7e275eb5ecfb.roa (raw, json) Hash identifier: PdgS3pxgOCpCUZZdc9prwtJAlIGWiGy5EGsgjddlQiM= Subject key identifier: 4E:A0:49:22:B2:0D:89:54:C4:D4:31:0B:5C:CD:93:59:4B:46:31:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C47D2D3F89DC2380F4580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1036a36e-2953-370a-be15-7e275eb5ecfb.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.22.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:47:d2:d3:f8:9d:c2:38:0f:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=9af8d381-e093-48eb-9ddd-c22b2b5b4e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:32:3b:13:9d:ab:91:bf:92:98:91:b3:9d: 1f:a3:6a:bf:85:ad:ca:fd:41:57:17:2b:0c:3f:94: b1:e1:ca:3b:09:66:30:2c:b3:c0:57:3c:c8:2c:8e: d3:9c:6f:a1:60:13:86:f8:2a:e0:43:3e:76:84:12: 81:d4:33:6d:78:14:2f:88:07:ec:52:74:06:2d:cd: 8b:cd:b8:01:20:a3:28:41:5c:5e:ad:df:b2:40:47: 62:a5:fe:b4:3f:79:00:b9:e0:35:1e:8f:29:34:76: 81:85:8e:e0:93:47:25:39:18:33:d9:fc:82:26:26: 4e:21:50:19:16:2e:02:9b:32:de:e6:0d:a6:67:8c: 1f:ac:d8:72:31:56:6e:36:35:f1:a7:ba:22:96:5a: 1d:5d:6e:55:26:e2:42:7a:fb:cb:04:48:29:3f:34: a6:cb:bf:53:f2:d1:0f:d8:37:49:d0:62:f9:0e:63: 1a:1a:5a:b7:61:91:ff:37:d1:e9:9a:81:e6:58:29: 91:10:31:10:52:30:40:37:2d:d7:9e:9d:71:56:d8: e3:4e:49:cc:e6:67:c4:a4:a6:b9:d9:98:5c:56:db: 5c:1f:08:47:74:35:9c:09:c0:32:09:f8:9d:3e:7a: 52:b3:34:53:f4:c4:05:02:9d:19:01:2d:d1:23:cd: 1a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A0:49:22:B2:0D:89:54:C4:D4:31:0B:5C:CD:93:59:4B:46:31:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1036a36e-2953-370a-be15-7e275eb5ecfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:33:b8:0e:ba:76:9d:43:a4:ec:32:02:55:10:8d:aa:8b:d1: 81:5d:6a:68:ab:68:19:0f:51:d9:85:1d:f4:d8:0d:47:bb:f5: d3:cb:b2:9f:f8:2c:80:6d:2f:c5:b0:1d:4d:c4:ae:54:e2:c0: 7a:66:d7:eb:81:c8:2b:f4:97:4e:30:53:ae:98:c1:fd:5f:0f: 75:0d:d2:47:7f:fa:09:4b:af:86:c1:d0:11:6f:58:b4:37:06: 2e:a1:9d:57:9d:87:08:be:a2:b2:52:3d:a3:fd:02:e6:b2:07: ef:3d:3a:32:62:97:3b:23:3d:9b:f3:64:97:4e:2e:f7:cd:24: e1:d4:cf:a9:ed:31:06:fa:4f:5b:3f:59:71:e6:8e:c7:d8:60: 9c:6c:fc:7d:cd:88:47:32:53:90:8d:9f:f7:81:21:9e:e9:da: 95:7e:eb:0b:77:84:ad:83:89:1b:3a:55:16:12:c6:81:c7:f4: 41:f1:6e:ea:87:d4:18:53:21:4d:45:6b:36:01:b1:d3:39:2c: c0:e1:af:d6:78:4e:ff:28:24:99:0d:a9:91:c5:f5:3e:d4:27: 26:23:ab:4c:ab:5f:4e:aa:bc:0e:7a:60:c2:40:3e:c1:48:b9: 5a:b2:13:14:ca:f8:e9:ed:42:aa:9a:16:5e:98:c6:1e:4e:79: a0:73:9e:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEfS0/idwjgPRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk OWFmOGQzODEtZTA5My00OGViLTlkZGQtYzIyYjJiNWI0ZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt30yOxOdq5G/kpiRs50fo2q/ha3K/UFXFysM P5Sx4co7CWYwLLPAVzzILI7TnG+hYBOG+CrgQz52hBKB1DNteBQviAfsUnQGLc2L zbgBIKMoQVxerd+yQEdipf60P3kAueA1Ho8pNHaBhY7gk0clORgz2fyCJiZOIVAZ Fi4CmzLe5g2mZ4wfrNhyMVZuNjXxp7oillodXW5VJuJCevvLBEgpPzSmy79T8tEP 2DdJ0GL5DmMaGlq3YZH/N9HpmoHmWCmREDEQUjBANy3Xnp1xVtjjTknM5mfEpKa5 2ZhcVttcHwhHdDWcCcAyCfidPnpSszRT9MQFAp0ZAS3RI80aqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6gSSKyDYlUxNQxC1zNk1lLRjG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTAzNmEzNmUtMjk1My0z NzBhLWJlMTUtN2UyNzVlYjVlY2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgzuA66dp1DpOwyAlUQjaqL0YFdamiraBkPUdmFHfTYDUe79dPLsp/4 LIBtL8WwHU3ErlTiwHpm1+uByCv0l04wU66Ywf1fD3UN0kd/+glLr4bB0BFvWLQ3 Bi6hnVedhwi+orJSPaP9AuayB+89OjJilzsjPZvzZJdOLvfNJOHUz6ntMQb6T1s/ WXHmjsfYYJxs/H3NiEcyU5CNn/eBIZ7p2pV+6wt3hK2DiRs6VRYSxoHH9EHxbuqH 1BhTIU1FazYBsdM5LMDhr9Z4Tv8oJJkNqZHF9T7UJyYjq0yrX06qvA56YMJAPsFI uVqyExTK+OntQqqaFl6Yxh5OeaBznis= -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:02 2025 by rpki-client