$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa File: 54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa (raw, json) Hash identifier: PR9H9UiTNA2QyDXpqhUiTy8yUMkoxPrJPnYOXEPN/M8= Subject key identifier: 76:C3:31:62:9D:86:BC:80:88:5D:95:DD:80:AA:88:11:94:3E:B7:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE4055DF22A0F43BD02ADD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.21.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:55:df:22:a0:f4:3b:d0:2a:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=3ee348db-f1d9-4b73-a03c-ea246616a563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:4b:c6:d5:15:72:1e:77:a9:57:4e:7a:86: e8:96:cb:c8:bf:61:e0:56:3c:c6:f4:bd:a4:54:6e: a6:0f:4c:36:75:ed:2e:35:5d:dc:93:9d:f2:70:8a: b6:36:2a:34:cc:c9:ff:4e:11:de:39:89:2b:dc:bb: 90:2c:74:09:e2:ee:21:eb:1a:e4:b3:39:f9:a8:d2: 2d:20:ee:86:4d:53:fa:a8:7f:54:fc:04:ad:ec:12: d0:df:42:5f:0d:fe:47:02:35:53:8a:18:a5:5a:cc: c6:95:3f:24:fa:29:f5:1b:73:9d:01:72:6e:ad:ff: 1a:1d:20:c6:b2:ec:5f:53:40:8f:2c:f2:48:2c:2d: d7:bd:2d:ce:e0:8d:c7:f5:d4:cf:95:8e:fb:ad:e4: 7c:76:69:39:30:87:93:29:2c:6d:e5:1f:74:6f:a9: 4a:25:07:26:c5:2b:93:2f:31:c9:71:8e:44:ea:0c: 7f:c8:04:2c:a2:4c:34:04:6e:5b:db:c9:fb:08:dc: db:d2:1b:5d:f6:44:04:ca:8c:a4:3b:e9:5a:7c:c2: e8:20:ae:5b:74:ac:bf:50:be:b4:b4:fb:b7:4d:b0: a0:2b:f1:19:21:9e:9d:59:96:58:10:4e:79:72:16: 55:e1:ef:53:fa:5c:12:e2:04:77:29:50:7b:7d:92: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C3:31:62:9D:86:BC:80:88:5D:95:DD:80:AA:88:11:94:3E:B7:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:d8:17:fe:cd:58:ee:c9:f8:ad:7c:ad:26:56:6f:e6:66:cc: 53:2d:65:fa:d4:71:47:b1:cd:3a:df:8e:53:05:cd:fa:97:39: e1:4c:dc:10:3e:8c:e3:16:b0:25:17:6d:19:59:92:89:e0:af: fe:c5:fa:a4:65:42:d9:73:c0:a5:cc:20:a1:23:fd:6a:a0:4d: d0:8f:d7:38:15:1b:6a:47:a2:f6:d4:61:c4:b1:fe:dd:57:4f: 3d:c1:64:73:51:0a:4a:28:d3:65:d8:8c:46:96:c4:4f:11:8c: fb:2f:08:9f:b1:27:05:05:e1:0c:7f:ff:c4:d7:48:38:57:45: 68:3a:f4:b7:79:60:c2:f7:98:57:e4:3a:83:ce:35:a9:66:07: 29:da:a4:a1:87:0b:7e:a6:56:2b:d3:16:28:fd:21:8c:a3:d4: 69:57:af:07:2d:6b:42:62:4d:6b:f8:41:a8:da:3a:94:17:2b: 2c:9e:b6:08:3d:78:9e:5e:d0:e1:34:89:b5:95:35:4b:5e:d6: a2:05:41:9d:bd:0e:4c:1f:5b:56:eb:9e:1a:24:cb:70:b1:37: 1a:58:3c:59:cb:42:f2:14:47:92:eb:61:44:bc:55:1c:53:97: 66:8e:db:3a:f1:b1:40:72:63:5a:8f:8b:3c:44:c9:8e:e0:5b: 5c:91:20:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFXfIqD0O9Aq3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk M2VlMzQ4ZGItZjFkOS00YjczLWEwM2MtZWEyNDY2MTZhNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYJLxtUVch53qVdOeobolsvIv2HgVjzG9L2k VG6mD0w2de0uNV3ck53ycIq2Nio0zMn/ThHeOYkr3LuQLHQJ4u4h6xrkszn5qNIt IO6GTVP6qH9U/ASt7BLQ30JfDf5HAjVTihilWszGlT8k+in1G3OdAXJurf8aHSDG suxfU0CPLPJILC3XvS3O4I3H9dTPlY77reR8dmk5MIeTKSxt5R90b6lKJQcmxSuT LzHJcY5E6gx/yAQsokw0BG5b28n7CNzb0htd9kQEyoykO+lafMLoIK5bdKy/UL60 tPu3TbCgK/EZIZ6dWZZYEE55chZV4e9T+lwS4gR3KVB7fZLDNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbDMWKdhryAiF2V3YCqiBGUPrc8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTRhODNkNDItMWNjMS0z ZTA3LTkxZjUtZmE2MjBjMTMyMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbYF/7NWO7J+K18rSZWb+ZmzFMtZfrUcUexzTrfjlMFzfqXOeFM3BA+ jOMWsCUXbRlZkongr/7F+qRlQtlzwKXMIKEj/WqgTdCP1zgVG2pHovbUYcSx/t1X Tz3BZHNRCkoo02XYjEaWxE8RjPsvCJ+xJwUF4Qx//8TXSDhXRWg69Ld5YML3mFfk OoPONalmBynapKGHC36mVivTFij9IYyj1GlXrwcta0JiTWv4QajaOpQXKyyetgg9 eJ5e0OE0ibWVNUte1qIFQZ29DkwfW1brnhoky3CxNxpYPFnLQvIUR5LrYUS8VRxT l2aO2zrxsUByY1qPizxEyY7gW1yRICg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:08 2025 by rpki-client