$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f4b3c29-f04f-376c-b398-03b99174ddb1.roa File: 8f4b3c29-f04f-376c-b398-03b99174ddb1.roa (raw, json) Hash identifier: JFmdf4t1EHtG1cto8Na7AUXNLgrbl7lsVwtUVZ/sk9Q= Subject key identifier: 86:12:AA:A5:7B:B6:60:CD:C2:06:0A:B3:F3:32:D4:F5:07:E8:AD:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B16A15DC08C554BD27FCBBC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f4b3c29-f04f-376c-b398-03b99174ddb1.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 98.22.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5d:c0:8c:55:4b:d2:7f:cb:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=acc74e88-ff67-4585-b58b-9f451b82188b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:6a:3c:f6:3a:5f:a7:64:39:0a:fb:ab:b0: 16:d3:dc:5b:b7:3f:11:c9:fc:7e:b0:5e:33:c5:d5: 1f:bd:41:18:14:27:14:c9:cd:7e:32:fa:7b:ca:3d: e8:15:b0:d7:87:24:b0:b5:d6:7e:74:a4:6a:59:4b: dd:89:51:f2:1b:40:84:c4:5c:98:57:8a:77:41:c7: 0c:80:a7:ee:f8:96:7d:4b:c9:0a:02:06:ed:8c:42: 48:48:cc:ba:c8:e5:c5:b7:ae:e7:f5:3f:3c:bf:d8: 7d:45:ae:3e:bf:4f:b6:d0:91:a7:60:57:8c:f1:7f: 20:61:75:27:e4:77:3e:92:98:d3:9d:a6:c7:df:73: f5:b0:69:eb:c2:44:85:9d:93:31:91:50:71:36:b3: a8:d5:e7:3d:67:4a:4a:c6:40:e2:16:6c:c4:27:e8: 52:1e:f1:0b:25:c8:21:85:a3:51:70:c3:d4:df:6e: 43:c6:58:0d:38:3f:2e:c7:7a:fd:0b:c2:48:fc:5f: e2:40:86:78:06:9c:20:d2:92:40:e7:e1:96:1c:92: 18:a5:3b:76:fa:a7:40:6b:b6:e4:34:12:4d:f0:8e: ca:75:a6:ec:b0:68:41:0b:aa:90:bf:9c:7e:5b:84: 07:fa:8a:95:12:72:50:94:b9:63:a5:9a:8e:93:c0: 99:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:12:AA:A5:7B:B6:60:CD:C2:06:0A:B3:F3:32:D4:F5:07:E8:AD:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8f4b3c29-f04f-376c-b398-03b99174ddb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2d:08:f1:fe:05:5f:b6:58:a0:ef:99:83:f7:6d:87:28:3c: a1:20:c0:f2:d0:6f:98:4d:99:22:94:99:2b:6e:25:ea:b9:72: 75:96:b8:3d:46:02:02:5a:25:b9:17:bf:62:b6:d5:cd:92:6a: 03:92:1c:9d:42:50:a1:06:16:7b:33:c4:b5:3d:a5:cb:19:1b: a6:98:6f:e8:35:2c:a3:f2:2d:3a:05:db:a2:75:f8:ee:3c:2f: ee:11:24:20:dd:48:6a:f8:b8:85:1b:47:ea:03:9a:1f:5c:af: c6:9b:8a:71:f1:6c:c7:24:ea:fe:b9:e7:20:37:c2:d8:fa:f3: 03:34:ab:d6:d9:17:64:3e:6f:e1:71:a3:08:6f:1a:cb:b3:b6: cf:d5:74:d5:e7:20:11:c9:00:9a:14:4a:4a:13:4a:34:9a:72: 82:c2:fb:c7:1f:ab:e7:f5:d4:fe:b9:68:af:37:53:8f:fb:5b: 8b:94:13:12:7a:c5:14:29:93:5d:32:9e:fb:71:93:10:e2:1b: af:0a:56:ec:7c:13:7b:b0:6c:74:b0:f3:1d:14:e6:18:2d:b0: e2:1a:ad:39:cf:ad:44:5f:54:95:4a:1d:ed:a9:43:47:76:27: cb:3f:5e:36:55:44:b2:66:43:c0:10:3a:fd:01:a9:9b:c8:b1: 8d:e5:28:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoV3AjFVL0n/LvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk YWNjNzRlODgtZmY2Ny00NTg1LWI1OGItOWY0NTFiODIxODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVdqPPY6X6dkOQr7q7AW09xbtz8Ryfx+sF4z xdUfvUEYFCcUyc1+Mvp7yj3oFbDXhySwtdZ+dKRqWUvdiVHyG0CExFyYV4p3QccM gKfu+JZ9S8kKAgbtjEJISMy6yOXFt67n9T88v9h9Ra4+v0+20JGnYFeM8X8gYXUn 5Hc+kpjTnabH33P1sGnrwkSFnZMxkVBxNrOo1ec9Z0pKxkDiFmzEJ+hSHvELJcgh haNRcMPU325DxlgNOD8ux3r9C8JI/F/iQIZ4Bpwg0pJA5+GWHJIYpTt2+qdAa7bk NBJN8I7KdabssGhBC6qQv5x+W4QH+oqVEnJQlLljpZqOk8CZvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYSqqV7tmDNwgYKs/My1PUH6K2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGY0YjNjMjktZjA0Zi0z NzZjLWIzOTgtMDNiOTkxNzRkZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYha4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHstCPH+BV+2WKDvmYP3bYcoPKEgwPLQb5hNmSKUmStuJeq5cnWWuD1G AgJaJbkXv2K21c2SagOSHJ1CUKEGFnszxLU9pcsZG6aYb+g1LKPyLToF26J1+O48 L+4RJCDdSGr4uIUbR+oDmh9cr8abinHxbMck6v655yA3wtj68wM0q9bZF2Q+b+Fx owhvGsuzts/VdNXnIBHJAJoUSkoTSjSacoLC+8cfq+f11P65aK83U4/7W4uUExJ6 xRQpk10ynvtxkxDiG68KVux8E3uwbHSw8x0U5hgtsOIarTnPrURfVJVKHe2pQ0d2 J8s/XjZVRLJmQ8AQOv0BqZvIsY3lKHk= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:32 2025 by rpki-client