$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3282967e-c15e-34f2-ab45-24eff281f69e.roa File: 3282967e-c15e-34f2-ab45-24eff281f69e.roa (raw, json) Hash identifier: 0X5mAHFcSaYBHfv93Zy83UxJSbDbQ6iDsg1VSxqvDdM= Subject key identifier: 51:21:05:CD:88:B0:EF:3B:F4:43:66:F7:53:97:56:A7:C1:DE:E9:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404C17AB87842305BC2860 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3282967e-c15e-34f2-ab45-24eff281f69e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.18.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4c:17:ab:87:84:23:05:bc:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=20d84ce3-0fc7-4c26-89dd-98c22ae812ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c9:3e:60:5e:82:13:1a:7c:ff:ba:b5:13:79: 84:ec:fa:5b:a3:79:e2:85:e5:c4:fb:e4:2d:39:69: 2e:6e:57:ec:a8:2c:f4:7f:36:6e:e6:20:8b:c8:98: dd:9d:2a:2d:80:b2:a3:d9:40:8f:1c:e8:6e:93:f5: 10:aa:82:9e:e8:d5:65:be:f0:b8:bb:c7:c6:69:1b: 7f:e2:56:b5:f1:65:e6:49:16:d3:a0:1d:57:8f:68: b6:d0:3a:de:27:5d:ff:2b:2d:a8:8f:e3:92:ff:e6: 77:78:9a:8f:16:f6:be:ae:b3:ae:fa:c8:a4:57:a8: c2:1d:aa:1a:7a:be:41:f4:95:3d:dd:36:67:7b:f7: 73:f6:c0:9a:57:7e:8e:7c:83:05:16:f3:a7:3c:94: e4:67:02:06:9c:56:10:5f:0b:89:0d:a7:6b:7d:69: 42:08:25:13:b3:b5:07:7f:5a:5b:45:a5:bd:45:00: 9d:be:98:24:8e:cb:50:cc:78:f4:af:55:84:32:07: 5b:de:d9:58:ab:72:c6:c5:b8:c9:73:c0:72:25:19: 4f:b8:85:e1:2a:51:35:24:2d:60:63:c0:7d:3a:5c: a7:9c:f2:98:17:31:f2:3c:66:56:cf:00:fc:5b:a6: 50:11:36:08:02:56:36:e9:6c:de:0e:07:5c:50:ba: 23:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:21:05:CD:88:B0:EF:3B:F4:43:66:F7:53:97:56:A7:C1:DE:E9:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3282967e-c15e-34f2-ab45-24eff281f69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8d:8c:ed:e3:75:d2:20:fb:c7:e8:e3:b8:b1:00:cd:f7:9e: db:4c:3f:9d:d0:fa:45:1e:36:d6:82:b7:2e:87:bc:bb:7d:d6: 92:ad:8a:85:5a:ae:e2:4e:0a:d6:ce:19:7e:a3:9d:49:ff:00: f5:3d:10:f1:ba:95:7c:e4:cc:1d:32:a0:fb:ed:8e:65:93:30: d9:ae:ca:45:9c:21:e2:f7:eb:2f:5a:10:ae:8b:33:c3:e4:65: 03:77:f0:1b:98:be:e0:d3:d1:ca:cf:ee:22:43:de:7c:c2:82: a5:a8:0c:5d:1f:d4:9b:3e:68:ad:fc:53:03:d6:3a:9e:24:fb: 22:6a:29:9c:10:9f:ff:f4:c6:3e:e0:d3:14:49:86:80:68:ce: a3:0c:50:6b:dc:78:bb:80:93:08:74:fb:1d:b1:d7:78:25:1e: b3:27:da:17:a8:f9:f5:a7:5c:6e:84:aa:d2:5a:8a:91:e5:52: aa:50:8a:93:02:83:0d:3e:97:4f:b3:92:c0:74:1d:82:4d:9e: 4e:c7:22:4d:25:9d:ef:b8:95:a5:9d:0b:c8:49:51:80:1a:f7: 3d:c4:24:f0:7a:9b:58:8b:0a:56:62:06:3a:8b:e5:64:b1:9e: 01:81:33:0d:a2:f5:80:97:66:18:1f:71:9c:22:b0:91:16:bf: 25:52:ed:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEwXq4eEIwW8KGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MjBkODRjZTMtMGZjNy00YzI2LTg5ZGQtOThjMjJhZTgxMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMk+YF6CExp8/7q1E3mE7Ppbo3niheXE++Qt OWkublfsqCz0fzZu5iCLyJjdnSotgLKj2UCPHOhuk/UQqoKe6NVlvvC4u8fGaRt/ 4la18WXmSRbToB1Xj2i20DreJ13/Ky2oj+OS/+Z3eJqPFva+rrOu+sikV6jCHaoa er5B9JU93TZne/dz9sCaV36OfIMFFvOnPJTkZwIGnFYQXwuJDadrfWlCCCUTs7UH f1pbRaW9RQCdvpgkjstQzHj0r1WEMgdb3tlYq3LGxbjJc8ByJRlPuIXhKlE1JC1g Y8B9OlynnPKYFzHyPGZWzwD8W6ZQETYIAlY26WzeDgdcULojpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEhBc2IsO879ENm91OXVqfB3uniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzI4Mjk2N2UtYzE1ZS0z NGYyLWFiNDUtMjRlZmYyODFmNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+NjO3jddIg+8fo47ixAM33nttMP53Q+kUeNtaCty6HvLt91pKtioVa ruJOCtbOGX6jnUn/APU9EPG6lXzkzB0yoPvtjmWTMNmuykWcIeL36y9aEK6LM8Pk ZQN38BuYvuDT0crP7iJD3nzCgqWoDF0f1Js+aK38UwPWOp4k+yJqKZwQn//0xj7g 0xRJhoBozqMMUGvceLuAkwh0+x2x13glHrMn2heo+fWnXG6EqtJaipHlUqpQipMC gw0+l0+zksB0HYJNnk7HIk0lne+4laWdC8hJUYAa9z3EJPB6m1iLClZiBjqL5WSx ngGBMw2i9YCXZhgfcZwisJEWvyVS7TY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:30 2025 by rpki-client