$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa File: a428fefd-e21b-3a06-93e8-83dbc2a71707.roa (raw, json) Hash identifier: NHJOrgh1c2sOdgIbYPXyeONtwgLZH+5P11ICVZnQK5Q= Subject key identifier: 01:E9:10:54:03:AB:E1:68:53:A7:E7:EB:85:B4:C1:BB:3C:BE:F4:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404D1FB458399B6851F400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.16.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4d:1f:b4:58:39:9b:68:51:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=ef97b826-83a5-4315-8889-7152d72a9651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:38:c3:06:40:35:3f:93:eb:6c:3c:9b:da: cc:17:3a:c0:f2:32:9e:93:ec:9d:c2:72:53:58:d8: 56:19:09:2b:e8:d7:24:27:61:5b:07:6a:ba:c2:89: 04:66:9f:56:43:80:b1:2c:70:f4:b1:c9:64:4e:c3: 6d:ed:c4:6b:ec:f0:6a:42:64:cb:f5:9c:85:0d:cc: 01:d6:14:0d:69:93:4f:d0:d2:77:90:cf:a6:5e:b2: e4:7a:97:0f:27:61:2f:93:94:94:43:8e:84:a8:3d: 17:a0:33:7a:4d:ea:01:a9:e5:31:a2:af:90:78:9a: ad:93:8d:df:b1:49:30:89:d8:b8:a7:cd:b2:14:e8: 8b:ca:99:90:b4:c9:26:bb:90:a2:d5:e4:7b:f8:02: 1d:73:f9:06:7c:50:9b:d9:52:13:ee:ab:4c:ac:e9: 72:10:84:07:26:8e:53:17:97:74:4d:76:42:b6:c6: 39:95:6f:e7:23:20:f6:75:80:64:85:fe:28:18:5e: 15:ea:49:9c:f7:a2:f2:fd:ff:78:27:92:cb:e2:b3: 26:aa:b2:63:3a:22:8f:74:8a:39:67:73:a7:cb:e0: 86:1b:37:02:19:66:d6:12:a0:aa:75:8e:fc:ce:c2: c1:f0:9b:c6:29:12:9c:4c:93:00:09:c3:b6:fc:ea: 10:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E9:10:54:03:AB:E1:68:53:A7:E7:EB:85:B4:C1:BB:3C:BE:F4:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b1:d9:bb:33:0b:a3:99:50:ef:66:9a:ba:3d:e3:22:e4:80: 13:af:32:f3:7e:a7:05:a1:ec:c5:35:55:49:d6:5a:33:7a:76: 98:11:3f:01:9e:81:83:0e:db:f6:82:c8:84:78:7e:db:fa:3b: e7:1a:7a:ea:a9:70:78:2a:d5:bb:42:50:fe:dd:2d:0a:a0:47: f1:6b:9c:41:34:b8:e5:92:71:a8:81:83:52:89:67:f5:81:f3: 00:57:0a:62:36:47:35:b3:1d:b6:64:5e:98:cd:05:3b:08:df: 3f:79:72:17:36:d1:de:16:97:67:db:56:5e:76:39:35:75:65: 80:03:2a:5f:56:62:43:5f:1e:80:04:8b:73:bb:86:22:3e:d1: df:49:8c:d6:b9:fb:b4:11:24:4a:ce:05:40:d9:a0:2a:08:70: 93:e1:44:36:45:39:8b:51:11:05:dc:fb:e7:8a:98:4d:24:11: 2e:a6:d4:53:f9:a3:89:85:3b:d5:dc:fc:df:5e:41:5c:5a:52: a1:e0:67:17:47:27:56:80:c8:c1:a6:ae:7e:45:97:73:e5:23: 6c:c6:0e:5c:8a:e2:5b:16:4d:ff:50:5b:d2:09:6a:20:0a:c7: cd:9c:ed:0c:ff:d6:d7:e0:bb:1b:3a:f2:e0:6f:f1:04:b8:9f: 01:b3:3c:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QE0ftFg5m2hR9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZWY5N2I4MjYtODNhNS00MzE1LTg4ODktNzE1MmQ3MmE5NjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCU4wwZANT+T62w8m9rMFzrA8jKek+ydwnJT WNhWGQkr6NckJ2FbB2q6wokEZp9WQ4CxLHD0sclkTsNt7cRr7PBqQmTL9ZyFDcwB 1hQNaZNP0NJ3kM+mXrLkepcPJ2Evk5SUQ46EqD0XoDN6TeoBqeUxoq+QeJqtk43f sUkwidi4p82yFOiLypmQtMkmu5Ci1eR7+AIdc/kGfFCb2VIT7qtMrOlyEIQHJo5T F5d0TXZCtsY5lW/nIyD2dYBkhf4oGF4V6kmc96Ly/f94J5LL4rMmqrJjOiKPdIo5 Z3Ony+CGGzcCGWbWEqCqdY78zsLB8JvGKRKcTJMACcO2/OoQxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHpEFQDq+FoU6fn64W0wbs8vvRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQyOGZlZmQtZTIxYi0z YTA2LTkzZTgtODNkYmMyYTcxNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhA3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSx2bszC6OZUO9mmro94yLkgBOvMvN+pwWh7MU1VUnWWjN6dpgRPwGe gYMO2/aCyIR4ftv6O+caeuqpcHgq1btCUP7dLQqgR/FrnEE0uOWScaiBg1KJZ/WB 8wBXCmI2RzWzHbZkXpjNBTsI3z95chc20d4Wl2fbVl52OTV1ZYADKl9WYkNfHoAE i3O7hiI+0d9JjNa5+7QRJErOBUDZoCoIcJPhRDZFOYtREQXc++eKmE0kES6m1FP5 o4mFO9Xc/N9eQVxaUqHgZxdHJ1aAyMGmrn5Fl3PlI2zGDlyK4lsWTf9QW9IJaiAK x82c7Qz/1tfguxs68uBv8QS4nwGzPHg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:06 2025 by rpki-client