$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e18841e5-41b4-3370-8a12-f79997924692.roa File: e18841e5-41b4-3370-8a12-f79997924692.roa (raw, json) Hash identifier: /GmDIegrspj0wO+sczHD/XGA6VIEaiZYH+8QFHKpQMY= Subject key identifier: C2:EC:50:A2:52:B9:E8:03:54:ED:0D:BA:86:1D:CE:6F:73:4B:FF:26 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B970CFBB5007D58ADFF716880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e18841e5-41b4-3370-8a12-f79997924692.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.19.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:fb:b5:00:7d:58:ad:ff:71:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=a747855c-db09-4141-90eb-f94f18f25018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e3:5a:d5:16:df:8d:60:d7:ff:5b:85:1f:a9: b5:49:3a:c4:a7:19:14:9e:43:91:e3:69:06:35:b3: f1:b6:bd:d3:11:b2:78:3d:de:bc:d2:2f:c0:ba:29: 8d:d9:8c:65:d7:d7:fb:08:48:e3:38:4a:ab:df:1d: c8:d4:5d:ef:f0:80:80:c3:0d:99:74:75:d1:e5:7d: 8e:09:14:e2:8b:f6:e3:b5:dc:77:ff:ea:9f:b3:e9: b1:f3:94:24:e8:5d:6f:04:51:1b:63:a4:f4:65:dd: b4:dd:24:7e:da:ea:92:dc:c1:86:86:85:23:8d:3a: 37:be:4b:c3:01:86:c5:4e:9d:71:d8:eb:2c:d9:b3: 2f:9a:46:fc:8a:f8:19:60:5d:dc:6c:e8:b8:16:b0: 7f:3a:8a:57:eb:6c:a4:56:d5:7b:a7:f8:4c:b9:23: 1f:6e:7a:02:f3:37:65:be:25:d7:24:db:e2:47:93: 18:d8:79:97:f3:ba:7e:6d:4d:b2:e4:25:7e:b7:12: 91:77:6a:79:97:db:da:05:66:1a:24:95:2a:89:01: f6:da:3e:d3:28:6e:b2:bc:b0:a4:97:48:13:bf:e7: fd:14:2a:f6:6e:c7:da:df:82:ed:79:9e:1b:14:38: 68:6f:46:d3:97:df:6c:17:fb:cb:43:b2:dc:c7:f3: c0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EC:50:A2:52:B9:E8:03:54:ED:0D:BA:86:1D:CE:6F:73:4B:FF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e18841e5-41b4-3370-8a12-f79997924692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ab:f2:fa:24:8d:69:62:7e:cb:11:bb:11:a5:50:1d:6e:fc: fd:f2:b3:dd:94:c4:cb:1e:c1:8b:b6:50:92:d1:5d:7e:c6:e0: 06:74:e6:fa:bc:df:97:7a:65:73:3e:fe:15:22:01:5e:b8:c5: c6:a7:af:cb:78:7a:71:d2:f1:0e:d4:48:59:49:0e:38:85:14: c0:f0:1c:5d:82:3a:70:d3:19:96:94:8f:79:46:fe:6a:f9:c1: 7d:b1:71:83:1d:2a:b5:39:e6:2a:de:6d:24:1f:d7:cf:a3:a8: 77:89:ab:80:79:a3:11:a3:bb:38:cd:c2:1a:3f:82:e4:c4:e7: 1e:52:d1:c3:ba:ba:43:b4:bb:72:1d:09:5f:22:76:7e:29:7f: db:f9:95:28:37:a6:94:e3:fb:44:15:71:fd:3a:29:b6:a8:99: a6:f2:dc:d8:6e:27:ef:bc:16:1c:72:a9:8b:33:7e:6e:9b:1b: 37:30:f6:69:3e:cc:b6:ae:f7:1f:a1:fc:af:4f:24:84:1a:e4: 4a:16:e0:69:c6:92:0b:de:3c:41:3c:28:b6:7e:b1:5d:92:37: b6:b0:b9:bd:cb:9c:b1:55:0a:3a:71:c0:b5:46:e5:9b:b0:24: cf:d2:09:8d:1a:5e:29:a3:ee:7f:02:3a:44:87:69:e0:1b:d6: 8a:5a:09:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPu1AH1Yrf9xaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YTc0Nzg1NWMtZGIwOS00MTQxLTkwZWItZjk0ZjE4ZjI1MDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uNa1RbfjWDX/1uFH6m1STrEpxkUnkOR42kG NbPxtr3TEbJ4Pd680i/AuimN2Yxl19f7CEjjOEqr3x3I1F3v8ICAww2ZdHXR5X2O CRTii/bjtdx3/+qfs+mx85Qk6F1vBFEbY6T0Zd203SR+2uqS3MGGhoUjjTo3vkvD AYbFTp1x2Oss2bMvmkb8ivgZYF3cbOi4FrB/OopX62ykVtV7p/hMuSMfbnoC8zdl viXXJNviR5MY2HmX87p+bU2y5CV+txKRd2p5l9vaBWYaJJUqiQH22j7TKG6yvLCk l0gTv+f9FCr2bsfa34LteZ4bFDhob0bTl99sF/vLQ7Lcx/PAkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLsUKJSuegDVO0NuoYdzm9zS/8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTE4ODQxZTUtNDFiNC0z MzcwLThhMTItZjc5OTk3OTI0NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADar8vokjWlifssRuxGlUB1u/P3ys92UxMsewYu2UJLRXX7G4AZ05vq8 35d6ZXM+/hUiAV64xcanr8t4enHS8Q7USFlJDjiFFMDwHF2COnDTGZaUj3lG/mr5 wX2xcYMdKrU55irebSQf18+jqHeJq4B5oxGjuzjNwho/guTE5x5S0cO6ukO0u3Id CV8idn4pf9v5lSg3ppTj+0QVcf06Kbaomaby3NhuJ++8FhxyqYszfm6bGzcw9mk+ zLau9x+h/K9PJIQa5EoW4GnGkgvePEE8KLZ+sV2SN7awub3LnLFVCjpxwLVG5Zuw JM/SCY0aXimj7n8COkSHaeAb1opaCYE= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:19 2025 by rpki-client