$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/748b9a4d-38fc-3c59-aa9f-5ef994392cb6.roa File: 748b9a4d-38fc-3c59-aa9f-5ef994392cb6.roa (raw, json) Hash identifier: JTwK3wHftnOlJwVoLgORlyfZOhlV8Hy4V5SN7YF14pQ= Subject key identifier: A9:E1:B5:54:8C:56:99:B3:7C:CA:9F:24:AB:A5:A2:F5:02:D7:CF:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE405654C489A9E271D57D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/748b9a4d-38fc-3c59-aa9f-5ef994392cb6.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.22.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:56:54:c4:89:a9:e2:71:d5:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=ee539722-1d70-4b77-8ddb-af3d3413e19d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:03:9f:e0:82:00:02:d6:01:c3:fd:56:ce: 10:b8:02:1e:ff:3f:c4:db:a7:d5:5b:cf:96:8d:44: f7:7b:e3:52:35:04:0a:fe:0f:79:15:a6:59:de:91: 2d:e8:10:e0:90:c6:d0:9f:6c:61:bb:3d:fe:be:53: 53:4e:9f:42:f9:c5:84:92:24:19:d7:21:42:7b:8e: 13:01:46:a4:7b:1f:60:5a:94:76:f7:da:42:76:da: e5:b4:aa:4b:83:1a:b6:95:e9:85:4d:e3:47:73:f9: e9:37:79:a3:79:02:f5:f2:78:95:22:75:a7:1b:46: 1a:b3:00:74:6f:73:6d:0e:0b:6b:5a:f4:63:e7:f5: 3a:6e:93:6b:9d:c4:36:08:6f:93:cf:6d:10:37:1a: e8:34:78:eb:b5:d5:50:f7:ec:2c:3c:d9:c0:d9:9c: 64:89:e9:44:b7:66:f5:51:23:61:8e:18:79:76:a7: 70:04:ed:a1:e9:61:aa:52:80:2a:e3:54:34:d1:28: e2:f4:87:a7:c1:85:ef:45:2a:fd:57:d3:58:27:e5: c7:6e:b2:9d:ab:f2:d3:d7:62:89:51:81:f6:0b:44: e0:3e:44:c8:15:e3:46:f4:4b:19:26:b2:69:b9:5b: df:90:79:0a:cb:09:08:f3:6a:d0:58:13:35:b2:92: d8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E1:B5:54:8C:56:99:B3:7C:CA:9F:24:AB:A5:A2:F5:02:D7:CF:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/748b9a4d-38fc-3c59-aa9f-5ef994392cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:91:d1:21:91:53:a7:0e:89:a5:98:4c:0a:35:2e:b7:a6:ab: 23:f6:8d:d1:19:83:c3:69:e4:bb:b6:b8:24:b2:7f:24:9d:0c: 28:35:e5:ef:6c:eb:9b:b3:23:85:55:7d:4e:ed:4a:42:21:27: 65:66:9f:45:1f:bf:a4:42:57:23:97:cb:3f:75:ff:72:56:0d: 3b:82:58:14:df:1f:b4:66:32:8a:f2:23:c6:68:ab:9b:52:96: 0b:b3:6f:0b:48:ec:5d:9f:75:48:05:33:66:3c:c6:d4:47:93: 60:95:72:21:e5:eb:69:a0:80:55:d2:a9:af:b7:a6:42:cf:46: c7:9a:dd:59:48:40:c9:27:f3:05:44:cf:38:5c:45:05:9d:69: 6a:46:d9:d6:66:60:8a:2c:83:7b:59:18:5e:9d:00:96:fe:9f: d7:03:e6:8d:57:a6:63:96:bd:93:7c:83:ba:e7:92:3e:65:46: 3f:e7:55:9a:62:32:eb:0b:eb:26:06:80:ac:0d:d4:7e:a0:85: 4b:6e:fa:23:4b:3a:bc:c2:a2:da:e7:51:98:58:1d:24:2e:50: ff:e5:54:8d:23:8e:d6:30:43:a1:78:0a:37:39:de:93:b0:cd: 74:f1:19:3b:78:3a:90:81:11:a0:0f:94:8f:b2:db:c0:fe:ab: 94:22:6a:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFZUxImp4nHVfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZWU1Mzk3MjItMWQ3MC00Yjc3LThkZGItYWYzZDM0MTNlMTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QMDn+CCAALWAcP9Vs4QuAIe/z/E26fVW8+W jUT3e+NSNQQK/g95FaZZ3pEt6BDgkMbQn2xhuz3+vlNTTp9C+cWEkiQZ1yFCe44T AUakex9gWpR299pCdtrltKpLgxq2lemFTeNHc/npN3mjeQL18niVInWnG0YaswB0 b3NtDgtrWvRj5/U6bpNrncQ2CG+Tz20QNxroNHjrtdVQ9+wsPNnA2ZxkielEt2b1 USNhjhh5dqdwBO2h6WGqUoAq41Q00Sji9IenwYXvRSr9V9NYJ+XHbrKdq/LT12KJ UYH2C0TgPkTIFeNG9EsZJrJpuVvfkHkKywkI82rQWBM1spLYZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnhtVSMVpmzfMqfJKulovUC18/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzQ4YjlhNGQtMzhmYy0z YzU5LWFhOWYtNWVmOTk0MzkyY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaR0SGRU6cOiaWYTAo1LremqyP2jdEZg8Np5Lu2uCSyfySdDCg15e9s 65uzI4VVfU7tSkIhJ2Vmn0Ufv6RCVyOXyz91/3JWDTuCWBTfH7RmMoryI8Zoq5tS lguzbwtI7F2fdUgFM2Y8xtRHk2CVciHl62mggFXSqa+3pkLPRsea3VlIQMkn8wVE zzhcRQWdaWpG2dZmYIosg3tZGF6dAJb+n9cD5o1XpmOWvZN8g7rnkj5lRj/nVZpi MusL6yYGgKwN1H6ghUtu+iNLOrzCotrnUZhYHSQuUP/lVI0jjtYwQ6F4Cjc53pOw zXTxGTt4OpCBEaAPlI+y28D+q5QiakE= -----END CERTIFICATE-----Generated at Tue Nov 4 16:58:52 2025 by rpki-client