$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa File: 9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa (raw, json) Hash identifier: woS/egytWYzU0L2HSr5BsnaMOa+NnDf2hyVZQndQKUY= Subject key identifier: 87:9C:8F:29:D8:9F:9A:3A:E7:8C:50:17:AD:2A:17:CD:94:73:45:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404C0656378492586C8BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.18.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4c:06:56:37:84:92:58:6c:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=f4b7bc31-3798-45ec-bdc7-106d2f86f9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ab:f4:7b:56:e1:a1:36:2d:cd:5c:31:53:4c: bd:b7:fe:a1:8f:73:43:0a:8b:70:a9:ee:89:84:0e: 45:86:4b:ca:f2:17:20:b9:fd:03:63:ba:fd:f5:9b: ea:8a:c5:36:31:26:67:42:86:38:b2:88:fa:28:c6: 4a:03:a9:8b:71:22:ba:d5:f6:ce:0b:6c:1a:bb:dd: 58:83:fe:ef:71:f0:7d:48:3b:3c:be:0f:03:fc:b6: 19:41:e1:17:0a:5b:aa:ab:bd:ea:cc:ed:f8:03:08: a9:38:a9:cb:ec:f7:60:19:34:23:45:eb:46:ad:fd: 3f:a7:93:71:84:52:f7:b5:43:a6:a0:bd:4d:93:00: 8a:c6:05:0b:b7:48:a7:71:63:c6:7e:5e:69:96:e7: 17:cb:63:ee:99:5f:70:e5:9e:7e:9b:c5:02:b0:35: 8e:68:dc:97:79:9c:ff:83:a9:9c:cc:f1:42:db:c6: 22:6f:23:cb:67:10:f4:85:6f:23:92:6d:5d:22:66: 10:82:25:5f:f0:14:55:06:fb:0f:7d:0c:b9:f3:3b: a4:d8:6a:2a:74:3e:27:fe:1c:e9:fa:9d:49:a4:f4: 8c:2f:09:fb:b0:eb:29:bd:e3:5a:64:dc:af:e4:28: dc:43:56:04:18:9a:00:61:20:95:4e:e0:98:cd:06: dc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9C:8F:29:D8:9F:9A:3A:E7:8C:50:17:AD:2A:17:CD:94:73:45:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d7:68:4a:c0:b7:c1:1d:6c:d9:28:60:37:78:df:16:70:65: 9e:71:f0:11:8a:06:bb:4b:40:65:bf:b6:14:3d:fd:c3:67:8e: fa:3c:c4:6b:b6:1b:ec:d7:4b:0a:57:66:e4:82:56:f0:4e:9f: 4c:2d:6d:5c:2a:79:6c:bc:f3:0e:95:79:2d:52:a1:5e:cc:e1: cc:c5:8d:fc:be:c8:35:4b:cb:b6:aa:64:79:f3:af:6e:dc:63: 7c:9b:85:de:fb:4a:6b:7f:e7:78:7c:8a:09:bd:a9:e3:db:4c: 9f:9a:bd:42:b8:b8:0c:a8:2a:ba:a3:29:7d:2e:a1:2f:91:77: 25:97:a0:f6:32:48:e8:8c:8b:45:2c:ff:a9:2a:95:6c:c2:a2: 18:97:73:f1:22:b1:a3:7f:06:4c:c9:76:be:60:66:49:3a:4f: 0f:db:a5:59:53:6b:ce:54:3c:d5:73:b7:b8:55:91:f4:0d:39: 6f:40:e0:21:62:45:da:c1:f3:4e:86:1a:f6:47:80:87:d2:2d: 0e:d2:28:e8:9d:53:f6:dc:7c:c4:db:de:82:ab:fe:93:b3:b1: f5:45:2b:22:91:40:b4:7b:a9:e7:34:6c:04:a0:3e:11:42:90: fa:85:b1:72:a5:aa:76:da:6a:b3:66:67:dd:b3:99:ac:47:9b: 87:aa:f4:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEwGVjeEklhsi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjRiN2JjMzEtMzc5OC00NWVjLWJkYzctMTA2ZDJmODZmOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqv0e1bhoTYtzVwxU0y9t/6hj3NDCotwqe6J hA5FhkvK8hcguf0DY7r99ZvqisU2MSZnQoY4soj6KMZKA6mLcSK61fbOC2wau91Y g/7vcfB9SDs8vg8D/LYZQeEXCluqq73qzO34AwipOKnL7PdgGTQjRetGrf0/p5Nx hFL3tUOmoL1NkwCKxgULt0incWPGfl5plucXy2PumV9w5Z5+m8UCsDWOaNyXeZz/ g6mczPFC28YibyPLZxD0hW8jkm1dImYQgiVf8BRVBvsPfQy58zuk2GoqdD4n/hzp +p1JpPSMLwn7sOspveNaZNyv5CjcQ1YEGJoAYSCVTuCYzQbc/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIecjynYn5o654xQF60qF82Uc0WTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWYxY2Q0YjEtOGM3OS0z MmY3LThkYWMtNjhkOGZjYjczZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvXaErAt8EdbNkoYDd43xZwZZ5x8BGKBrtLQGW/thQ9/cNnjvo8xGu2 G+zXSwpXZuSCVvBOn0wtbVwqeWy88w6VeS1SoV7M4czFjfy+yDVLy7aqZHnzr27c Y3ybhd77Smt/53h8igm9qePbTJ+avUK4uAyoKrqjKX0uoS+RdyWXoPYySOiMi0Us /6kqlWzCohiXc/EisaN/BkzJdr5gZkk6Tw/bpVlTa85UPNVzt7hVkfQNOW9A4CFi RdrB806GGvZHgIfSLQ7SKOidU/bcfMTb3oKr/pOzsfVFKyKRQLR7qec0bASgPhFC kPqFsXKlqnbaarNmZ92zmaxHm4eq9Cw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:22 2025 by rpki-client