$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11845981-6711-34a7-83e0-002e698ca19d.roa File: 11845981-6711-34a7-83e0-002e698ca19d.roa (raw, json) Hash identifier: OnfRkTE6Y2848eN0cXzyYFBakEZgGUPNIZHcxBc8EWQ= Subject key identifier: EA:7E:E6:F0:6D:86:CE:27:28:6F:E7:B0:75:01:0B:3C:D3:7A:DB:80 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404A36D9CBB6B31FB3EA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11845981-6711-34a7-83e0-002e698ca19d.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.23.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4a:36:d9:cb:b6:b3:1f:b3:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=8f3eea3b-f78b-4c47-b88a-ae900472dd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:17:5c:20:01:b5:c3:09:39:68:11:be:d0:8e: 7f:04:58:69:cc:12:6c:c5:e3:83:59:4d:25:5c:a9: f4:32:37:17:aa:29:bd:0e:48:7d:63:22:e1:05:7f: 3c:69:58:9b:af:f2:f5:8b:ca:83:13:9b:4a:0e:af: 72:f3:72:45:43:2d:bb:37:20:59:f3:b0:15:fa:04: a3:8d:86:2e:8c:4b:26:c1:e4:4e:24:35:04:9b:7c: 8e:f7:b1:49:9d:93:58:61:92:f6:da:f9:78:7c:c1: d9:fc:b3:9f:cc:1f:4d:cf:be:fb:19:eb:8f:3d:d3: 48:1b:c5:f3:cf:e7:61:b4:14:18:54:09:50:cd:16: 56:e8:75:8b:d7:ce:e3:fa:ad:a5:3c:62:36:26:0d: 64:19:22:0f:79:09:fe:8c:b6:dc:14:6b:40:d6:48: 8d:4c:a6:e9:9d:af:b8:8b:8f:bb:39:de:97:21:08: e4:3a:b3:fc:e6:3a:67:0b:0c:0f:51:74:f4:97:bd: 0c:a7:80:0b:2c:78:36:28:48:0c:7a:c8:7d:51:65: 7b:f7:02:9c:e5:aa:c3:5e:21:11:f9:6c:a0:d8:ee: 30:93:90:8e:04:30:8e:9b:3f:3d:53:4c:20:d9:f8: 69:df:a9:ba:d7:0b:6d:73:d0:1e:bd:68:a0:9e:7e: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7E:E6:F0:6D:86:CE:27:28:6F:E7:B0:75:01:0B:3C:D3:7A:DB:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11845981-6711-34a7-83e0-002e698ca19d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b3:23:2e:12:ff:ef:33:40:81:d6:fa:3c:84:b0:10:64:8c: 40:35:9a:2c:b4:c6:5c:b3:48:98:a9:31:18:51:b3:0f:c4:0c: 2d:f5:64:85:e9:ad:57:e7:dc:a3:c6:c9:12:39:98:27:f3:5a: 42:98:9f:f1:2c:68:46:84:34:f1:74:88:b5:8b:ce:0a:55:8c: f0:2d:75:d9:7d:f8:7a:cc:f9:c4:da:13:29:b2:61:54:4f:11: 06:a9:00:96:b4:e9:37:cc:3f:7d:87:bc:81:a5:76:39:87:f9: bc:32:20:71:2b:e3:c6:e8:87:06:20:4c:62:4e:53:eb:a5:a9: e7:70:b3:7a:ba:a0:74:8b:da:73:96:d7:1c:24:14:34:37:15: 50:99:e8:d3:67:a3:c4:24:41:d0:3e:52:56:84:87:0d:d2:68: 15:72:aa:b9:15:6c:72:f5:fe:3d:b8:0d:4f:f7:a1:b3:17:fc: 56:89:94:73:c0:d3:e4:78:0b:19:0c:ab:54:f0:62:b9:3d:ac: 8e:46:04:6b:db:57:b0:1e:66:3c:10:d0:d9:59:e0:19:e0:4a: 7b:34:c3:90:81:c5:24:de:07:b4:0c:6f:f4:37:98:04:0d:09: 7a:0d:3f:88:30:06:60:f6:2f:2b:ae:e9:12:86:b6:be:d4:b1: 3d:ef:64:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEo22cu2sx+z6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OGYzZWVhM2ItZjc4Yi00YzQ3LWI4OGEtYWU5MDA0NzJkZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxdcIAG1wwk5aBG+0I5/BFhpzBJsxeODWU0l XKn0MjcXqim9Dkh9YyLhBX88aVibr/L1i8qDE5tKDq9y83JFQy27NyBZ87AV+gSj jYYujEsmweROJDUEm3yO97FJnZNYYZL22vl4fMHZ/LOfzB9Nz777GeuPPdNIG8Xz z+dhtBQYVAlQzRZW6HWL187j+q2lPGI2Jg1kGSIPeQn+jLbcFGtA1kiNTKbpna+4 i4+7Od6XIQjkOrP85jpnCwwPUXT0l70Mp4ALLHg2KEgMesh9UWV79wKc5arDXiER +Wyg2O4wk5COBDCOmz89U0wg2fhp36m61wttc9AevWignn5O2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp+5vBths4nKG/nsHUBCzzTetuAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTE4NDU5ODEtNjcxMS0z NGE3LTgzZTAtMDAyZTY5OGNhMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhdQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAizIy4S/+8zQIHW+jyEsBBkjEA1miy0xlyzSJipMRhRsw/EDC31ZIXp rVfn3KPGyRI5mCfzWkKYn/EsaEaENPF0iLWLzgpVjPAtddl9+HrM+cTaEymyYVRP EQapAJa06TfMP32HvIGldjmH+bwyIHEr48bohwYgTGJOU+ulqedws3q6oHSL2nOW 1xwkFDQ3FVCZ6NNno8QkQdA+UlaEhw3SaBVyqrkVbHL1/j24DU/3obMX/FaJlHPA 0+R4CxkMq1TwYrk9rI5GBGvbV7AeZjwQ0NlZ4BngSns0w5CBxSTeB7QMb/Q3mAQN CXoNP4gwBmD2Lyuu6RKGtr7UsT3vZLk= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:33 2025 by rpki-client