$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ca3be16-9fad-39a7-959a-4acb47709553.roa File: 5ca3be16-9fad-39a7-959a-4acb47709553.roa (raw, json) Hash identifier: KFRpmorRXoRRbtZZYagw7z1YkgLoo02T/SRIY7HiHog= Subject key identifier: 77:F3:3C:12:B8:C7:88:73:3C:AE:EF:9F:8F:99:70:1B:5F:B3:91:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AFC1C1EC92509DC590235A340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ca3be16-9fad-39a7-959a-4acb47709553.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.22.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:1e:c9:25:09:dc:59:02:35:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=f3c1c6ff-5ae8-4ab7-97ce-f5118413097d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b7:16:eb:e4:fa:04:c5:a8:83:0d:93:7a:5a: d4:8a:50:b1:a2:76:9d:5d:34:be:37:15:f8:4b:c2: 4a:e3:b3:10:75:5d:7e:fc:36:87:58:00:e0:00:a0: 83:70:3c:13:df:99:58:de:65:d1:06:b0:2d:22:2c: 37:9e:8e:ba:4a:06:40:23:d4:fc:50:4e:f0:61:05: e4:9c:d3:0f:06:25:48:47:cc:f7:36:db:bd:2f:e9: af:52:fe:fd:fa:d3:e4:d8:79:fb:53:2a:ff:ae:3d: 8c:e4:7b:d1:cb:a0:97:28:cf:3e:39:63:cf:06:93: 69:f3:dc:48:a4:2b:c6:c2:47:43:c4:bf:60:57:86: 96:ba:20:d8:68:24:ab:d6:49:f0:7e:d4:d6:1b:4e: 4d:a1:3b:51:e2:bb:02:86:70:10:31:5c:94:f2:86: 51:75:db:83:f9:56:10:61:37:04:59:07:80:a9:ee: 0e:58:79:37:2a:48:f8:5e:ad:5a:05:36:9d:25:33: 6d:94:44:95:c1:3e:9f:54:dc:ef:ce:14:8c:67:34: 8d:04:e1:5a:e2:f0:b0:4f:dd:79:26:1c:6b:40:3d: 0e:ca:8b:51:10:3f:3e:c9:a9:4a:e3:15:aa:da:7e: c6:b0:86:c1:45:88:97:d9:7d:ac:d0:b6:8a:aa:83: f5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F3:3C:12:B8:C7:88:73:3C:AE:EF:9F:8F:99:70:1B:5F:B3:91:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ca3be16-9fad-39a7-959a-4acb47709553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:52:46:38:24:20:c8:07:42:01:c3:9f:3c:bd:d9:86:ae:00: 46:3a:60:08:3e:09:0a:f7:5a:ba:ef:de:34:2e:f5:29:3f:71: f6:4c:3b:74:2b:2c:0f:17:1c:7a:bf:aa:06:6a:f4:1d:5f:13: 4f:a5:52:bd:20:a3:e9:87:7e:83:be:12:5e:69:a3:57:c1:c2: df:35:8c:a0:40:99:86:d0:27:ab:59:4a:20:71:c9:5e:7d:d8: 7c:5e:b7:ad:ec:07:b2:23:17:bd:cf:e3:e3:19:d5:a5:9b:d1: 1f:26:42:65:e5:28:1d:9f:21:21:4b:09:0e:44:98:56:26:aa: 6f:28:bd:e7:af:76:82:e9:ef:79:29:9c:9f:7c:3a:cc:19:c1: 69:c3:1a:30:82:c4:40:3c:9b:27:a6:7c:9d:4c:72:17:db:95: 73:a7:9e:fb:0e:39:fc:e9:0a:ac:4d:fd:83:57:3e:96:9c:ee: ac:ae:2c:bc:2f:19:25:a9:f5:94:d3:e6:77:e2:68:9a:05:6f: 6a:b3:b3:e2:a6:f0:1a:df:1a:60:db:bd:4c:03:75:eb:45:60: 55:69:2c:64:15:0b:8d:3d:7e:9f:f9:71:a1:19:11:ee:83:83: 41:95:9c:81:ca:73:36:99:f5:e9:6c:c1:b6:fb:3b:1c:82:c5: f1:b6:1d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HB7JJQncWQI1o0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjNjMWM2ZmYtNWFlOC00YWI3LTk3Y2UtZjUxMTg0MTMwOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rcW6+T6BMWogw2TelrUilCxonadXTS+NxX4 S8JK47MQdV1+/DaHWADgAKCDcDwT35lY3mXRBrAtIiw3no66SgZAI9T8UE7wYQXk nNMPBiVIR8z3Ntu9L+mvUv79+tPk2Hn7Uyr/rj2M5HvRy6CXKM8+OWPPBpNp89xI pCvGwkdDxL9gV4aWuiDYaCSr1knwftTWG05NoTtR4rsChnAQMVyU8oZRdduD+VYQ YTcEWQeAqe4OWHk3Kkj4Xq1aBTadJTNtlESVwT6fVNzvzhSMZzSNBOFa4vCwT915 JhxrQD0OyotRED8+yalK4xWq2n7GsIbBRYiX2X2s0LaKqoP1TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfzPBK4x4hzPK7vn4+ZcBtfs5E5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWNhM2JlMTYtOWZhZC0z OWE3LTk1OWEtNGFjYjQ3NzA5NTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpSRjgkIMgHQgHDnzy92YauAEY6YAg+CQr3Wrrv3jQu9Sk/cfZMO3Qr LA8XHHq/qgZq9B1fE0+lUr0go+mHfoO+El5po1fBwt81jKBAmYbQJ6tZSiBxyV59 2Hxet63sB7IjF73P4+MZ1aWb0R8mQmXlKB2fISFLCQ5EmFYmqm8oveevdoLp73kp nJ98OswZwWnDGjCCxEA8myemfJ1MchfblXOnnvsOOfzpCqxN/YNXPpac7qyuLLwv GSWp9ZTT5nfiaJoFb2qzs+Km8BrfGmDbvUwDdetFYFVpLGQVC409fp/5caEZEe6D g0GVnIHKczaZ9elswbb7OxyCxfG2Hec= -----END CERTIFICATE-----Generated at Wed Nov 5 05:03:25 2025 by rpki-client