$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a72af3db-4149-3870-b873-369d08de432c.roa File: a72af3db-4149-3870-b873-369d08de432c.roa (raw, json) Hash identifier: vAkUd7uJLGRe+6zACZ6K7CPH8X1YwnZvQTH4baq7XkA= Subject key identifier: FF:78:7B:1F:7B:44:9F:49:51:AA:0C:7B:76:B2:E9:78:91:D0:E1:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE40538AD0736DDF56DFFF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a72af3db-4149-3870-b873-369d08de432c.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.19.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:53:8a:d0:73:6d:df:56:df:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=a570853d-40aa-45e3-971a-0237fd041f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:e0:6f:e2:84:42:74:f5:bc:32:87:e6:24: 9a:f4:a0:0d:2c:df:56:b7:1b:95:ff:a0:a4:91:47: fb:8e:5a:35:2f:e8:c0:7c:f4:e6:62:59:18:f4:37: ce:42:e2:f3:6d:fe:90:c9:54:9a:3b:a9:46:4e:b9: 8b:de:04:f7:ef:6c:83:dd:f5:ab:09:89:7f:7f:96: 86:7a:47:db:68:56:69:4c:a5:c1:88:63:8b:06:15: ab:6d:58:82:46:c3:d6:b2:df:42:7a:0c:8b:a0:ce: 69:bd:e6:76:d9:fe:72:41:1d:df:18:d2:e4:5b:c4: f9:4f:50:46:a0:d4:73:60:10:bc:d4:c2:dd:9c:54: 06:3c:22:4e:f2:72:2d:9d:74:2e:b2:dd:20:0a:2d: 19:68:0a:f3:d2:0f:a9:67:f9:eb:2d:f8:f6:41:04: 72:6a:31:4f:7e:9c:db:68:a9:01:c3:fa:ec:df:04: 02:4b:88:29:2b:e6:37:cf:30:fd:e6:27:cc:20:5c: 31:fd:1a:18:bf:d6:30:30:75:59:3f:00:6c:55:95: b0:31:8b:1f:8a:19:fa:01:55:6b:53:c2:7d:69:a2: 57:2b:49:03:d1:15:69:4a:5d:80:a0:c4:5d:f2:32: 51:8d:7c:59:45:cc:de:e6:aa:d2:4c:03:44:28:02: e6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:78:7B:1F:7B:44:9F:49:51:AA:0C:7B:76:B2:E9:78:91:D0:E1:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a72af3db-4149-3870-b873-369d08de432c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8f:04:0f:0c:b7:64:39:00:83:0a:47:5e:35:54:78:c9:d7: 15:67:96:cc:bc:38:d7:77:d7:d9:66:3f:d4:d5:aa:75:2a:67: 3f:0c:91:8a:d6:7a:0b:8b:b3:59:dd:83:51:1a:aa:1f:c2:72: e6:5a:e9:c0:99:5a:ce:27:d9:52:b1:38:f0:ce:19:fa:12:d2: 04:31:2e:d1:dc:70:ae:06:11:e2:ed:2b:3f:bf:f4:25:03:fd: 1f:60:fb:6b:2f:54:12:c5:62:25:72:48:11:58:4d:d3:81:18: af:f3:15:fa:f2:a9:7c:05:34:f9:e0:71:7a:a7:c4:e9:d5:8e: 4a:bf:dd:34:a1:59:f5:19:bc:eb:85:e6:09:da:a7:be:f4:4a: 64:90:fe:e9:ab:12:da:76:6e:c9:2f:ec:aa:64:4f:28:c4:a6: 35:49:e2:53:b8:6f:e9:ca:3b:8e:0a:c6:cb:94:2d:aa:96:94: cc:c2:ed:a8:b0:4a:a2:49:cc:1f:e7:de:bf:92:b2:c6:f6:e4: 51:a9:8d:5b:e5:61:06:94:2e:e5:9d:6a:bc:cd:28:94:fa:20: f1:a4:9f:0e:82:ab:3b:e9:9a:e8:3b:72:1c:fa:64:99:54:3c: 82:61:e5:f2:32:69:82:03:6d:4f:be:62:be:ee:ca:fb:4b:67: 05:a3:d9:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFOK0HNt31bf/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YTU3MDg1M2QtNDBhYS00NWUzLTk3MWEtMDIzN2ZkMDQxZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjXgb+KEQnT1vDKH5iSa9KANLN9WtxuV/6Ck kUf7jlo1L+jAfPTmYlkY9DfOQuLzbf6QyVSaO6lGTrmL3gT372yD3fWrCYl/f5aG ekfbaFZpTKXBiGOLBhWrbViCRsPWst9CegyLoM5pveZ22f5yQR3fGNLkW8T5T1BG oNRzYBC81MLdnFQGPCJO8nItnXQust0gCi0ZaArz0g+pZ/nrLfj2QQRyajFPfpzb aKkBw/rs3wQCS4gpK+Y3zzD95ifMIFwx/RoYv9YwMHVZPwBsVZWwMYsfihn6AVVr U8J9aaJXK0kD0RVpSl2AoMRd8jJRjXxZRcze5qrSTANEKALmYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP94ex97RJ9JUaoMe3ay6XiR0OHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTcyYWYzZGItNDE0OS0z ODcwLWI4NzMtMzY5ZDA4ZGU0MzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiPBA8Mt2Q5AIMKR141VHjJ1xVnlsy8ONd319lmP9TVqnUqZz8MkYrW eguLs1ndg1Eaqh/CcuZa6cCZWs4n2VKxOPDOGfoS0gQxLtHccK4GEeLtKz+/9CUD /R9g+2svVBLFYiVySBFYTdOBGK/zFfryqXwFNPngcXqnxOnVjkq/3TShWfUZvOuF 5gnap770SmSQ/umrEtp2bskv7KpkTyjEpjVJ4lO4b+nKO44KxsuULaqWlMzC7aiw SqJJzB/n3r+Sssb25FGpjVvlYQaULuWdarzNKJT6IPGknw6Cqzvpmug7chz6ZJlU PIJh5fIyaYIDbU++Yr7uyvtLZwWj2WE= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:59 2025 by rpki-client