$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa File: 2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa (raw, json) Hash identifier: VYkNOACXmLr258SWd9SUXtwDdzzmpfUp131pSnHBqY4= Subject key identifier: 85:81:CA:C4:AB:D8:4F:8D:0E:36:15:2F:59:B8:52:1D:FD:A3:3E:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD3F719C7DCF420A4E64D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 98.16.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3f:71:9c:7d:cf:42:0a:4e:64:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=17fb8a9d-6f41-4442-acdb-29b19dfdd875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:f7:a5:ff:4b:fb:54:a6:9f:14:6f:4b:5b: 63:66:f9:fb:1e:ff:02:bb:5e:3d:bf:0d:df:a1:3b: 87:32:f9:21:80:6c:ee:d8:fb:51:f4:e5:58:3b:69: 36:9f:ef:15:7e:c7:a0:9b:ac:af:15:fa:52:74:d8: 66:bd:ff:ca:b5:d6:cc:51:86:dd:2b:c0:7a:d3:40: 16:88:d5:a3:a2:f6:79:c4:49:f4:c3:9e:51:47:df: 71:a4:90:87:c8:67:3f:74:c5:d0:e6:2e:51:a5:52: 26:d3:bf:7f:e7:8c:6d:05:2a:35:ed:b7:14:95:76: 71:9f:f0:8a:fc:9b:0f:59:a5:e9:db:13:a4:68:8b: 5a:23:e6:a9:48:ed:dd:2d:25:50:7e:24:c3:6e:56: 44:b4:ee:f0:b2:e3:d1:72:29:5b:84:a3:6b:2a:61: cb:03:11:18:bd:a2:0b:9d:73:72:d0:7f:35:80:00: 49:61:ba:e7:6f:21:a6:60:61:d7:49:b2:42:ce:0a: fc:49:f8:a2:04:bc:be:ea:a5:dc:09:23:65:76:9a: 86:6d:41:68:bb:c8:76:6f:36:41:ab:b3:51:ad:7d: 48:0d:7c:11:22:34:87:f7:aa:3e:ad:53:dd:83:63: ab:9c:0e:61:b9:70:13:0e:09:d5:65:d3:83:ae:5e: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:81:CA:C4:AB:D8:4F:8D:0E:36:15:2F:59:B8:52:1D:FD:A3:3E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2129538b-c85d-3d1b-833b-0ddbde2a4f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:cd:d6:ea:0a:a7:42:8d:f9:8c:1a:2a:f5:2f:a5:ee:ad:2b: 6a:8c:55:20:96:41:cb:4f:d1:17:d9:53:81:44:51:c6:7d:9e: 58:79:fc:26:16:16:72:0a:35:97:be:80:c6:5c:54:ce:28:87: 11:15:b4:13:e2:ab:3a:29:3b:29:cb:be:c5:0e:d5:74:16:26: 12:b0:e6:41:33:70:d0:cf:bb:93:90:39:07:ec:4b:1a:39:96: ec:e3:0d:fb:0c:43:87:9f:39:6d:58:14:55:24:1b:af:7e:ae: 67:8d:2f:af:64:c4:94:6a:f5:85:76:65:6f:1f:f8:b5:23:94: 27:4f:c2:dd:63:c0:97:9a:84:a3:59:3d:a4:ea:3a:de:ce:c2: 80:6e:df:c0:73:a4:59:cb:8d:ee:30:fd:a7:db:50:b7:cd:1c: c6:e0:f2:82:fe:58:2c:4a:9a:f3:8e:8a:1d:cd:29:89:06:f2: 8e:cc:02:60:39:10:aa:02:30:59:a9:3e:1d:1d:bb:f8:ae:7b: cc:2d:2f:2e:b8:16:40:69:2b:59:e4:b2:84:29:55:f2:0f:e5: 8e:e3:fd:39:2b:53:8f:ea:c2:dd:c6:e3:bf:d8:7f:ae:78:47: 4c:70:84:46:08:90:28:b0:9c:62:39:8d:2a:e0:29:4e:8b:71: 87:bf:b8:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3T9xnH3PQgpOZNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MTdmYjhhOWQtNmY0MS00NDQyLWFjZGItMjliMTlkZmRkODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQL3pf9L+1SmnxRvS1tjZvn7Hv8Cu149vw3f oTuHMvkhgGzu2PtR9OVYO2k2n+8Vfsegm6yvFfpSdNhmvf/KtdbMUYbdK8B600AW iNWjovZ5xEn0w55RR99xpJCHyGc/dMXQ5i5RpVIm079/54xtBSo17bcUlXZxn/CK /JsPWaXp2xOkaItaI+apSO3dLSVQfiTDblZEtO7wsuPRcilbhKNrKmHLAxEYvaIL nXNy0H81gABJYbrnbyGmYGHXSbJCzgr8SfiiBLy+6qXcCSNldpqGbUFou8h2bzZB q7NRrX1IDXwRIjSH96o+rVPdg2OrnA5huXATDgnVZdODrl7UMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWBysSr2E+NDjYVL1m4Uh39oz6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjEyOTUzOGItYzg1ZC0z ZDFiLTgzM2ItMGRkYmRlMmE0ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnN1uoKp0KN+YwaKvUvpe6tK2qMVSCWQctP0RfZU4FEUcZ9nlh5/CYW FnIKNZe+gMZcVM4ohxEVtBPiqzopOynLvsUO1XQWJhKw5kEzcNDPu5OQOQfsSxo5 luzjDfsMQ4efOW1YFFUkG69+rmeNL69kxJRq9YV2ZW8f+LUjlCdPwt1jwJeahKNZ PaTqOt7OwoBu38BzpFnLje4w/afbULfNHMbg8oL+WCxKmvOOih3NKYkG8o7MAmA5 EKoCMFmpPh0du/iue8wtLy64FkBpK1nksoQpVfIP5Y7j/TkrU4/qwt3G47/Yf654 R0xwhEYIkCiwnGI5jSrgKU6LcYe/uPE= -----END CERTIFICATE-----Generated at Tue Nov 4 19:16:03 2025 by rpki-client