$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac5b6f0-a954-3d72-87fe-8524a064032c.roa File: 1ac5b6f0-a954-3d72-87fe-8524a064032c.roa (raw, json) Hash identifier: 1k0F48Hn86kR5IvkpngO4JNWfbHGOqJJSCpvn+VgMK4= Subject key identifier: FA:65:6D:F4:1A:CF:F1:67:99:F6:64:C8:BC:0D:80:C0:3D:2B:5F:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE4056A9D6982EF0710B3600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac5b6f0-a954-3d72-87fe-8524a064032c.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.16.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:56:a9:d6:98:2e:f0:71:0b:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=f374def9-cd5a-418f-9df2-ce9c43e22649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:90:c4:e3:23:bb:e8:3b:ad:f0:49:60:a2:ad: 9d:51:ff:1a:f2:a2:74:5f:e1:79:a4:80:78:d2:90: 84:d3:49:50:4c:9c:76:97:b2:41:a3:6f:f4:5e:41: 78:1e:38:99:42:8a:5f:11:86:74:3a:fe:63:f8:2e: b0:eb:cf:16:2b:a3:20:08:98:d3:5f:ec:f2:c4:a0: 86:dd:fc:e9:a9:d0:85:40:68:78:bb:32:ff:e8:09: 7d:d2:4a:66:b4:62:67:15:84:20:e4:e3:11:b3:7a: 77:99:b7:f0:3b:bc:70:60:91:35:5e:10:29:a4:11: af:e8:ac:23:a5:45:c6:e4:32:05:03:e7:1c:46:96: 70:e4:a4:a1:86:42:a6:01:a4:9b:b9:f2:cd:37:dd: 98:d0:3c:5e:7f:92:76:c3:3f:55:b2:33:75:e9:2e: ba:08:24:16:ad:2e:83:0a:02:0b:34:f7:fd:56:6b: 6b:98:36:af:5a:32:f1:43:f2:6f:06:fe:0d:04:37: 2d:29:68:1f:1c:cb:8f:36:00:24:4f:1f:23:91:23: 02:4a:a8:e9:a5:e4:df:19:c4:e4:d5:6d:8a:9b:ce: c3:e4:26:32:bd:ee:48:68:b9:1c:d7:c5:64:f3:5b: 94:fd:ce:e9:83:50:bc:03:05:d4:2b:82:f3:37:4c: 95:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:65:6D:F4:1A:CF:F1:67:99:F6:64:C8:BC:0D:80:C0:3D:2B:5F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ac5b6f0-a954-3d72-87fe-8524a064032c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:39:12:2b:aa:b7:2e:e7:6c:24:6d:48:87:a0:53:a8:09:5f: 7e:78:cd:a5:06:23:ce:c9:25:50:49:a9:e0:fa:bd:a5:00:f6: a4:29:27:d7:eb:32:df:90:19:ee:da:42:96:44:01:1a:91:1b: 6f:e6:58:17:44:e4:43:fb:c5:07:d6:45:2a:12:02:16:25:88: 49:95:0f:a3:c1:fd:83:43:47:8d:60:85:71:9e:c1:7b:03:05: 0e:d2:17:17:b0:87:60:14:4d:9c:b8:84:04:1b:28:70:7d:21: fa:dc:e2:4f:6e:84:e3:af:b4:df:30:10:6c:e3:6e:41:ed:0d: 84:e1:6b:31:88:db:73:84:b4:ca:9d:96:13:0a:ab:eb:99:1f: ac:1a:e7:a0:ab:86:79:5a:16:99:02:72:1a:31:3a:a1:14:18: 68:ae:4e:de:b9:f3:d2:39:7f:dc:c5:a3:07:32:ac:04:12:49: 80:8c:01:ac:b8:a7:99:fd:85:98:9e:a1:94:da:72:a5:72:51: 00:00:24:34:59:82:66:af:8f:d6:4e:e8:02:65:b2:88:36:b0: a3:42:2e:d3:07:74:2e:e1:c1:49:05:43:bf:4f:6e:81:14:56: a8:9e:64:10:b6:40:02:e7:91:53:07:1c:60:dc:3b:b3:ba:e5: 20:fb:ab:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFap1pgu8HELNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjM3NGRlZjktY2Q1YS00MThmLTlkZjItY2U5YzQzZTIyNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZDE4yO76Dut8Elgoq2dUf8a8qJ0X+F5pIB4 0pCE00lQTJx2l7JBo2/0XkF4HjiZQopfEYZ0Ov5j+C6w688WK6MgCJjTX+zyxKCG 3fzpqdCFQGh4uzL/6Al90kpmtGJnFYQg5OMRs3p3mbfwO7xwYJE1XhAppBGv6Kwj pUXG5DIFA+ccRpZw5KShhkKmAaSbufLNN92Y0Dxef5J2wz9VsjN16S66CCQWrS6D CgILNPf9VmtrmDavWjLxQ/JvBv4NBDctKWgfHMuPNgAkTx8jkSMCSqjppeTfGcTk 1W2Km87D5CYyve5IaLkc18Vk81uU/c7pg1C8AwXUK4LzN0yVhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPplbfQaz/FnmfZkyLwNgMA9K18yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFjNWI2ZjAtYTk1NC0z ZDcyLTg3ZmUtODUyNGEwNjQwMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhD2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI5Eiuqty7nbCRtSIegU6gJX354zaUGI87JJVBJqeD6vaUA9qQpJ9fr Mt+QGe7aQpZEARqRG2/mWBdE5EP7xQfWRSoSAhYliEmVD6PB/YNDR41ghXGewXsD BQ7SFxewh2AUTZy4hAQbKHB9Ifrc4k9uhOOvtN8wEGzjbkHtDYThazGI23OEtMqd lhMKq+uZH6wa56CrhnlaFpkCchoxOqEUGGiuTt6589I5f9zFowcyrAQSSYCMAay4 p5n9hZieoZTacqVyUQAAJDRZgmavj9ZO6AJlsog2sKNCLtMHdC7hwUkFQ79PboEU VqieZBC2QALnkVMHHGDcO7O65SD7q0o= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:08 2025 by rpki-client