$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4814a9e0-3358-3815-8a3b-85e799e84ee3.roa File: 4814a9e0-3358-3815-8a3b-85e799e84ee3.roa (raw, json) Hash identifier: caEmqS7p4O5+w4AtW8YfNybnkqsBSL3r2bAkJHbQNyQ= Subject key identifier: 15:08:0F:46:A4:04:E2:57:75:D2:65:26:8C:5D:33:57:52:A4:83:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C4627A182E0D6E534FE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4814a9e0-3358-3815-8a3b-85e799e84ee3.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.16.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:46:27:a1:82:e0:d6:e5:34:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=69598103-14d4-4e03-9422-b896df07c48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:61:78:f5:dd:83:58:51:60:3a:7a:92:30: 21:ff:11:76:7d:2d:b4:c6:68:38:78:94:2d:06:9a: e7:0f:5f:34:a1:51:04:a1:18:4f:28:7d:dd:fc:2f: c8:8f:dd:b4:61:dd:d0:40:b0:c3:48:a5:8d:a7:06: d1:93:27:08:14:78:1d:34:bb:12:40:01:9e:37:ea: b7:aa:0a:4e:b0:56:07:af:ad:16:a7:c6:ee:bd:10: 86:c9:0a:9a:94:eb:61:54:77:c7:18:c9:d0:8a:5e: 96:d3:1c:71:e7:1c:09:71:d2:f1:45:da:bb:27:a5: 1b:c4:4b:e7:60:b3:1c:33:4e:7b:87:5c:04:cd:30: ca:07:00:4d:e4:61:e4:a6:01:9c:3d:ed:17:d0:71: e2:88:8b:50:8d:ed:a8:c8:23:9c:e8:58:53:23:21: ab:45:3e:88:31:3f:7c:a3:84:22:33:ad:78:0b:60: f2:b4:86:d8:c3:d6:6d:bf:74:da:9a:92:7a:95:52: c2:5c:68:97:99:97:fc:7a:e7:b8:a7:fa:34:8e:87: 1f:0e:68:ee:38:09:67:c8:be:cf:5e:af:c4:c6:0d: 87:34:f1:90:f3:6e:87:30:81:16:9b:3f:d8:61:ae: 52:f1:56:51:a8:7e:11:4c:f9:85:37:bf:81:76:e9: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:08:0F:46:A4:04:E2:57:75:D2:65:26:8C:5D:33:57:52:A4:83:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4814a9e0-3358-3815-8a3b-85e799e84ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:26:a2:44:d2:47:54:64:84:1d:59:16:e4:dd:40:b8:12:77: bf:c2:89:39:3c:70:12:4e:16:5d:b5:d3:0b:22:b3:f0:21:f5: 30:c5:cc:e0:a4:ba:b5:6e:0a:9f:84:3d:70:4e:26:34:1f:80: 90:7a:2c:58:45:3e:47:4b:b4:65:93:95:9c:bb:ad:75:17:ab: eb:2e:c5:2d:94:5a:2a:3c:72:b8:ef:a2:c7:9b:f2:a2:38:31: da:e8:c1:a5:5b:05:69:df:78:29:5c:3c:12:7d:c8:b5:92:9a: de:6c:e9:b5:a0:a3:9a:2e:3a:ba:fd:ee:e4:0e:18:04:36:dd: f9:f4:05:dc:de:b2:07:9c:0f:60:76:65:e0:58:8f:00:48:0b: c6:d4:da:f7:af:48:68:64:7d:e1:e3:e7:5e:c7:98:47:4d:89: 56:02:97:de:bd:43:9b:87:f6:9d:69:15:dd:ff:df:98:bf:d8: 0b:2e:c6:46:58:6c:13:0f:4e:a7:0a:a7:83:39:6a:40:22:90: 71:68:53:23:b5:9a:6d:8d:8f:e9:72:24:2f:90:2c:6a:24:c4: c1:86:06:b6:ca:70:8f:1b:14:da:77:73:9f:c2:17:e4:b2:b2: f8:8e:2f:8b:43:e3:c6:2f:3c:ab:11:18:de:1d:24:e5:84:4a: 72:ba:79:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEYnoYLg1uU0/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk Njk1OTgxMDMtMTRkNC00ZTAzLTk0MjItYjg5NmRmMDdjNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP1hePXdg1hRYDp6kjAh/xF2fS20xmg4eJQt BprnD180oVEEoRhPKH3d/C/Ij920Yd3QQLDDSKWNpwbRkycIFHgdNLsSQAGeN+q3 qgpOsFYHr60Wp8buvRCGyQqalOthVHfHGMnQil6W0xxx5xwJcdLxRdq7J6UbxEvn YLMcM057h1wEzTDKBwBN5GHkpgGcPe0X0HHiiItQje2oyCOc6FhTIyGrRT6IMT98 o4QiM614C2DytIbYw9Ztv3TampJ6lVLCXGiXmZf8eue4p/o0jocfDmjuOAlnyL7P Xq/Exg2HNPGQ826HMIEWmz/YYa5S8VZRqH4RTPmFN7+BdukegwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUID0akBOJXddJlJoxdM1dSpINKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDgxNGE5ZTAtMzM1OC0z ODE1LThhM2ItODVlNzk5ZTg0ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0mokTSR1RkhB1ZFuTdQLgSd7/CiTk8cBJOFl210wsis/Ah9TDFzOCk urVuCp+EPXBOJjQfgJB6LFhFPkdLtGWTlZy7rXUXq+suxS2UWio8crjvoseb8qI4 MdrowaVbBWnfeClcPBJ9yLWSmt5s6bWgo5ouOrr97uQOGAQ23fn0BdzesgecD2B2 ZeBYjwBIC8bU2vevSGhkfeHj517HmEdNiVYCl969Q5uH9p1pFd3/35i/2AsuxkZY bBMPTqcKp4M5akAikHFoUyO1mm2Nj+lyJC+QLGokxMGGBrbKcI8bFNp3c5/CF+Sy sviOL4tD48YvPKsRGN4dJOWESnK6eYs= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:29 2025 by rpki-client