$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5abdeb18-3075-31c7-82e4-ed7cdf0a4f41.roa File: 5abdeb18-3075-31c7-82e4-ed7cdf0a4f41.roa (raw, json) Hash identifier: 0jrZygaINCiIJL4Mrb2MqNGAAwJORJGo464LUzZJ7WI= Subject key identifier: EB:51:AB:61:AE:60:F1:F4:42:D9:AD:D0:82:26:5D:E0:60:BC:43:4E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B970CFBA3195ABAFA84007F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5abdeb18-3075-31c7-82e4-ed7cdf0a4f41.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.17.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:fb:a3:19:5a:ba:fa:84:00:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=96f2c075-a420-4536-8b16-cd64d3015bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:21:1b:09:27:7f:d9:db:de:d6:fb:04:f6: d6:99:50:5b:b6:8d:05:00:ab:f4:79:1b:51:3d:ab: 65:a1:9e:45:75:e8:68:c7:c2:84:41:2d:bb:87:01: d5:3d:83:86:be:dc:29:81:cd:3b:09:da:03:2a:39: 63:ee:ce:b4:91:e8:bb:32:f7:d4:42:51:a3:20:65: dc:2f:96:fa:48:17:69:3c:71:33:fa:b9:0a:25:08: 18:02:d4:7a:c6:eb:a7:c3:92:d9:9a:6e:44:c4:d5: e0:bf:53:12:34:41:b0:af:21:e4:04:2a:66:f4:f5: fe:17:20:93:1e:de:86:9f:38:0c:70:80:d1:f9:13: 9a:de:91:53:46:ae:23:b5:ce:56:06:b4:fe:55:16: e7:4d:3f:dc:24:a9:80:6f:69:a1:f3:54:46:07:a7: 8d:e1:43:1d:d6:ef:45:43:7c:43:44:3b:66:64:a4: da:c2:29:6b:d2:66:4c:bf:ed:71:c1:a4:81:cd:66: 85:a1:9f:8b:b4:11:2d:91:25:be:2c:1f:2a:56:f0: bf:46:58:95:a8:cf:8b:d6:57:1d:f4:70:ac:3c:93: c2:65:21:b3:45:41:c4:4f:f9:19:41:e2:bb:30:bb: e7:ad:31:ee:da:16:0b:f4:fb:43:08:f3:48:e3:55: d7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:51:AB:61:AE:60:F1:F4:42:D9:AD:D0:82:26:5D:E0:60:BC:43:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5abdeb18-3075-31c7-82e4-ed7cdf0a4f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:20:05:3e:12:04:d9:e3:3a:94:f2:73:61:c9:32:cc:0e:fb: b3:33:fd:11:67:94:e2:6a:d8:50:1d:48:3b:8e:18:14:f7:fd: 7d:92:f3:69:b4:3f:16:ce:3d:53:33:ad:e2:6b:77:36:76:fb: ee:45:12:25:1f:70:f2:28:29:2e:79:d0:bd:28:e6:51:5d:fc: cf:84:cc:66:34:34:dc:f0:55:f5:52:de:0d:f4:8c:a2:14:98: ea:32:3d:83:c4:2a:26:b7:aa:ca:d0:26:d2:98:d2:bb:76:f1: 0b:13:36:f6:b8:bc:87:c4:37:e6:76:94:a0:f0:83:51:31:a8: df:bb:a4:9b:23:c1:cc:9d:23:2f:52:30:9f:a8:09:69:df:f2: 6b:80:7a:05:3c:ed:5a:0c:f3:fb:42:8e:43:b5:3d:52:b0:ce: d3:2a:b1:c9:41:be:3f:f9:d1:0f:b1:1f:d5:fd:71:41:34:d0: d1:57:4e:d4:57:e4:77:2e:55:a8:a8:a1:4e:8d:b2:b5:54:5f: d3:7d:d8:80:32:40:1a:1c:df:22:1d:d3:81:c2:36:8a:4d:cd: 3a:47:84:40:c7:51:3a:69:bc:e4:b7:13:af:46:2e:a7:89:a3: 2d:8b:9a:ae:2e:6d:87:06:07:be:5f:bf:c5:5b:1a:5a:c9:b0: dd:8d:ef:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPujGVq6+oQAf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk OTZmMmMwNzUtYTQyMC00NTM2LThiMTYtY2Q2NGQzMDE1YmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6chGwknf9nb3tb7BPbWmVBbto0FAKv0eRtR PatloZ5Fdehox8KEQS27hwHVPYOGvtwpgc07CdoDKjlj7s60kei7MvfUQlGjIGXc L5b6SBdpPHEz+rkKJQgYAtR6xuunw5LZmm5ExNXgv1MSNEGwryHkBCpm9PX+FyCT Ht6GnzgMcIDR+ROa3pFTRq4jtc5WBrT+VRbnTT/cJKmAb2mh81RGB6eN4UMd1u9F Q3xDRDtmZKTawilr0mZMv+1xwaSBzWaFoZ+LtBEtkSW+LB8qVvC/RliVqM+L1lcd 9HCsPJPCZSGzRUHET/kZQeK7MLvnrTHu2hYL9PtDCPNI41XXHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtRq2GuYPH0Qtmt0IImXeBgvENOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWFiZGViMTgtMzA3NS0z MWM3LTgyZTQtZWQ3Y2RmMGE0ZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMgBT4SBNnjOpTyc2HJMswO+7Mz/RFnlOJq2FAdSDuOGBT3/X2S82m0 PxbOPVMzreJrdzZ2++5FEiUfcPIoKS550L0o5lFd/M+EzGY0NNzwVfVS3g30jKIU mOoyPYPEKia3qsrQJtKY0rt28QsTNva4vIfEN+Z2lKDwg1ExqN+7pJsjwcydIy9S MJ+oCWnf8muAegU87VoM8/tCjkO1PVKwztMqsclBvj/50Q+xH9X9cUE00NFXTtRX 5HcuVaiooU6NsrVUX9N92IAyQBoc3yId04HCNopNzTpHhEDHUTppvOS3E69GLqeJ oy2Lmq4ubYcGB75fv8VbGlrJsN2N7xg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:00:28 2025 by rpki-client