$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73b8373c-116d-33a3-8c62-1600458d170d.roa File: 73b8373c-116d-33a3-8c62-1600458d170d.roa (raw, json) Hash identifier: 3kuENJCgBKxqpKu8eAMmGGkZptRcl+PbHHaZOoO9EtQ= Subject key identifier: 49:05:68:10:31:41:00:6A:72:B0:6C:24:21:57:6A:7A:78:DE:A9:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BAA979EE12450955E48A5E700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73b8373c-116d-33a3-8c62-1600458d170d.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.18.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:9e:e1:24:50:95:5e:48:a5:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=605a500f-68e0-4d0d-bb66-8b8bff5b5f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:63:b7:b3:88:6e:61:33:65:eb:1a:71:92: 50:e2:61:b1:30:11:7b:ac:f5:51:25:e8:71:a9:8e: d3:66:70:83:e7:da:46:ba:92:be:a3:54:c1:37:e2: d4:a3:67:ee:52:82:fd:01:db:ee:6e:39:a9:26:3f: 29:92:fc:46:fc:bd:a2:39:fb:36:32:32:c5:97:0c: 2c:c2:8f:be:af:06:94:67:06:c7:ba:0b:59:3e:85: 5e:3b:9f:ec:14:44:91:23:c6:62:b4:f8:a9:ae:6b: 2e:12:a7:44:f4:9d:37:08:51:82:e3:74:19:95:8c: 0a:87:7c:52:2f:ab:22:32:07:2b:78:66:03:a1:37: 93:71:e6:90:6c:a0:6e:48:f7:0f:74:90:1e:9c:d0: 0f:c3:a7:8a:6e:0c:4f:4d:43:4e:92:b3:8c:79:b8: 7d:8b:d8:cc:4a:3b:27:f2:dd:3f:a4:aa:cb:28:10: 34:7f:d3:75:2b:25:79:70:08:81:7b:2b:36:2b:65: 3e:04:21:9e:c2:c9:9e:ed:82:a6:5e:ac:f2:71:b8: b2:79:48:33:8e:7a:60:ff:12:b2:4d:e6:11:31:c6: 13:b1:44:2b:a2:09:b2:73:b8:06:df:e9:1f:49:40: 54:e0:53:73:80:28:7f:0a:34:68:cd:27:89:ed:8b: 10:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:05:68:10:31:41:00:6A:72:B0:6C:24:21:57:6A:7A:78:DE:A9:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73b8373c-116d-33a3-8c62-1600458d170d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:5f:d2:4c:7a:39:b4:65:b2:ca:36:1f:c3:65:93:34:ba:3f: e3:30:c8:01:77:e9:2b:b8:f3:db:03:e5:c5:d6:ab:da:c6:42: fc:89:fe:00:24:e3:4e:79:47:13:c5:57:3c:88:e0:f6:2e:2f: d7:9f:91:13:4f:90:81:20:b7:d3:30:cd:8d:59:79:9b:ca:a7: 31:0b:0a:1e:a6:b0:a4:e9:a0:a9:46:6e:b9:8b:5b:1e:1e:c9: e1:ce:26:df:51:94:e9:1c:9f:dc:45:17:6a:82:2d:07:4c:ce: b1:0f:08:f4:9e:e2:53:91:f5:3d:c4:30:c9:a8:dc:69:b9:d7: 31:32:b4:08:66:1e:0e:ae:ce:44:f3:93:3f:6c:32:42:29:d5: ee:d6:c1:3d:3a:87:36:79:26:6b:30:21:d8:c6:fe:93:cb:20: fc:4d:e9:64:c7:63:a8:6f:51:c2:96:8b:01:1b:8e:b4:3d:7d: 52:0c:e4:75:6f:02:e3:55:08:71:92:84:7e:de:dc:ea:b7:ed: 93:54:ec:b9:54:6c:20:f4:ef:98:51:86:66:49:c0:90:4a:aa: 8d:70:14:2f:14:72:9d:0d:7f:d1:c3:36:a3:04:b6:f6:0b:7f: 4b:10:69:43:56:df:b7:94:67:41:ea:ab:96:34:e8:ea:26:c5: 07:1c:53:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql57hJFCVXkil5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NjA1YTUwMGYtNjhlMC00ZDBkLWJiNjYtOGI4YmZmNWI1Zjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCpjt7OIbmEzZesacZJQ4mGxMBF7rPVRJehx qY7TZnCD59pGupK+o1TBN+LUo2fuUoL9AdvubjmpJj8pkvxG/L2iOfs2MjLFlwws wo++rwaUZwbHugtZPoVeO5/sFESRI8ZitPiprmsuEqdE9J03CFGC43QZlYwKh3xS L6siMgcreGYDoTeTceaQbKBuSPcPdJAenNAPw6eKbgxPTUNOkrOMebh9i9jMSjsn 8t0/pKrLKBA0f9N1KyV5cAiBeys2K2U+BCGewsme7YKmXqzycbiyeUgzjnpg/xKy TeYRMcYTsUQrogmyc7gG3+kfSUBU4FNzgCh/CjRozSeJ7YsQ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkFaBAxQQBqcrBsJCFXanp43qk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzNiODM3M2MtMTE2ZC0z M2EzLThjNjItMTYwMDQ1OGQxNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhKCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtf0kx6ObRlsso2H8NlkzS6P+MwyAF36Su489sD5cXWq9rGQvyJ/gAk 4055RxPFVzyI4PYuL9efkRNPkIEgt9MwzY1ZeZvKpzELCh6msKTpoKlGbrmLWx4e yeHOJt9RlOkcn9xFF2qCLQdMzrEPCPSe4lOR9T3EMMmo3Gm51zEytAhmHg6uzkTz kz9sMkIp1e7WwT06hzZ5JmswIdjG/pPLIPxN6WTHY6hvUcKWiwEbjrQ9fVIM5HVv AuNVCHGShH7e3Oq37ZNU7LlUbCD075hRhmZJwJBKqo1wFC8Ucp0Nf9HDNqMEtvYL f0sQaUNW37eUZ0Hqq5Y06OomxQccUyE= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:15 2025 by rpki-client