$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12a2a5ef-dd19-3ad4-93a3-1d3340c57be5.roa File: 12a2a5ef-dd19-3ad4-93a3-1d3340c57be5.roa (raw, json) Hash identifier: 7GSzfLT6+PG7OPfGB8RrH5viG5vRI7dXp8EK9K0IjWA= Subject key identifier: EA:76:69:C5:B8:7D:56:BB:17:B2:C6:7D:0C:F8:B3:4D:39:1C:E2:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404CA279F74D6BCFFF7B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12a2a5ef-dd19-3ad4-93a3-1d3340c57be5.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.21.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4c:a2:79:f7:4d:6b:cf:ff:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=7d9edf57-dc16-47bd-a7c6-8a3d220efdd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:70:cb:db:6c:cc:22:06:13:97:31:03:25: 64:26:0d:c6:f8:3b:a6:59:aa:16:6e:1f:de:d1:25: 27:39:39:01:37:02:94:8b:cd:27:62:5b:54:ea:27: 60:66:0b:a4:6f:35:21:b6:90:8d:e7:a1:d4:40:e1: 54:9d:10:19:23:27:86:55:62:4c:15:f0:0e:94:d6: ed:f4:66:db:f5:19:fd:2e:4d:27:be:fe:5c:30:50: f1:8d:3c:90:7e:d8:c2:b5:22:da:5a:46:5f:d5:b6: 36:e3:8a:04:de:e7:d5:0f:7c:b6:8d:b2:f7:b1:93: 63:e8:10:27:5f:eb:d5:4b:f9:61:66:28:45:08:58: 30:40:5e:26:23:2b:d6:33:81:bb:35:40:9c:b6:78: 8f:d1:78:6a:9c:de:ae:c1:ed:12:85:ce:d0:91:89: 4e:fb:58:77:9b:94:0d:51:00:76:b6:0a:28:90:2b: b5:c4:79:bb:79:f1:59:f8:d0:a9:b8:12:c5:26:a0: e8:4d:73:e9:28:bc:cd:8f:56:55:09:45:55:68:35: 48:5e:06:6c:0e:b0:13:f0:e3:38:24:d5:e8:73:db: 89:59:12:1f:09:65:44:4d:92:64:cb:af:95:50:dc: 02:d3:09:74:4c:72:a5:db:09:49:b7:93:1c:9a:d3: b9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:76:69:C5:B8:7D:56:BB:17:B2:C6:7D:0C:F8:B3:4D:39:1C:E2:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12a2a5ef-dd19-3ad4-93a3-1d3340c57be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f5:e2:54:d8:08:a9:25:f3:9d:ab:cc:66:d2:d1:fa:73:ea: 9a:d3:f5:e0:d3:9e:2d:b8:5f:10:c7:07:2c:60:45:d2:d0:9c: b3:7b:d1:bf:7d:2e:90:7f:29:2b:94:33:f9:95:d7:ff:5d:a7: 25:84:0d:11:ae:45:30:de:a1:57:6f:31:06:e6:1e:27:2c:5b: d0:92:c0:3f:fb:5b:e5:45:0b:90:c1:90:0e:2a:a8:35:cb:01: bd:cf:86:1d:20:77:16:33:d2:f7:99:ed:e0:5a:42:87:3c:95: 66:a7:9e:00:49:cb:c9:b4:9f:a9:e3:80:05:d4:df:6f:cb:3b: e5:1f:88:a3:a9:ce:0e:1c:b7:fe:87:a3:fd:9d:a7:6e:e2:2d: a3:9b:8e:29:12:a8:02:57:2c:62:ba:3c:a6:d2:47:05:e8:19: 1a:4a:28:d6:c1:4a:27:9a:7e:8e:80:c2:cd:a6:89:16:e5:42: 45:a4:67:e8:c4:f2:1c:cf:14:cb:16:cd:04:ac:1f:3f:b5:03: e4:e3:85:52:66:22:34:17:d6:a5:1d:52:a1:4b:7c:02:20:bb: ed:ba:c3:0d:de:76:69:37:9a:7b:ff:e4:f6:ef:12:6f:73:c9: ed:4a:d6:c0:db:8d:86:c6:45:43:7e:77:62:31:0b:49:01:cd: 6e:a7:e6:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEyiefdNa8//ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk N2Q5ZWRmNTctZGMxNi00N2JkLWE3YzYtOGEzZDIyMGVmZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WBwy9tszCIGE5cxAyVkJg3G+DumWaoWbh/e 0SUnOTkBNwKUi80nYltU6idgZgukbzUhtpCN56HUQOFUnRAZIyeGVWJMFfAOlNbt 9Gbb9Rn9Lk0nvv5cMFDxjTyQftjCtSLaWkZf1bY244oE3ufVD3y2jbL3sZNj6BAn X+vVS/lhZihFCFgwQF4mIyvWM4G7NUCctniP0XhqnN6uwe0Shc7QkYlO+1h3m5QN UQB2tgookCu1xHm7efFZ+NCpuBLFJqDoTXPpKLzNj1ZVCUVVaDVIXgZsDrAT8OM4 JNXoc9uJWRIfCWVETZJky6+VUNwC0wl0THKl2wlJt5McmtO50QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp2acW4fVa7F7LGfQz4s005HOKTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTJhMmE1ZWYtZGQxOS0z YWQ0LTkzYTMtMWQzMzQwYzU3YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJD14lTYCKkl852rzGbS0fpz6prT9eDTni24XxDHByxgRdLQnLN70b99 LpB/KSuUM/mV1/9dpyWEDRGuRTDeoVdvMQbmHicsW9CSwD/7W+VFC5DBkA4qqDXL Ab3Phh0gdxYz0veZ7eBaQoc8lWanngBJy8m0n6njgAXU32/LO+UfiKOpzg4ct/6H o/2dp27iLaObjikSqAJXLGK6PKbSRwXoGRpKKNbBSieafo6Aws2miRblQkWkZ+jE 8hzPFMsWzQSsHz+1A+TjhVJmIjQX1qUdUqFLfAIgu+26ww3edmk3mnv/5PbvEm9z ye1K1sDbjYbGRUN+d2IxC0kBzW6n5n8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:31:39 2025 by rpki-client