$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2134156-80a5-3a22-8250-44093645e181.roa File: f2134156-80a5-3a22-8250-44093645e181.roa (raw, json) Hash identifier: 6iwE6M2zO1wlvumiV0J1mi8fkldHs+Iz1pXJHQzRvwM= Subject key identifier: 1C:88:C8:E4:9E:F8:60:95:61:02:EF:7D:54:A7:A3:F7:CE:28:86:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE405697F8C53EB2CF6F5580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2134156-80a5-3a22-8250-44093645e181.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.16.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:56:97:f8:c5:3e:b2:cf:6f:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=8543a262-4694-4c23-bd76-82fd6a2c4341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:b6:88:f3:73:b8:b9:f3:99:fc:da:39:af: 93:91:92:93:72:92:b6:5f:db:e6:ff:0c:e9:01:67: f4:91:91:f1:3d:7f:e8:5b:b7:cd:96:73:4f:2e:54: b3:08:7a:1b:aa:a1:70:e2:92:49:97:ed:a0:40:27: 33:9a:a7:e1:a1:42:40:79:6f:80:e1:41:3d:d9:23: 86:8c:2d:a4:be:05:f0:ff:f9:1e:c7:4f:5a:47:a1: d5:3f:34:68:2f:7c:cd:53:29:2d:ca:75:17:56:f0: 6c:2a:f0:44:f1:2a:01:d9:31:53:ef:2e:49:3d:ae: 76:f6:a7:65:d2:44:ae:1b:5a:34:9e:af:81:04:67: e9:38:bc:5b:a4:da:e4:bb:e8:23:72:c4:74:78:cb: 1b:02:cb:bf:e7:05:a8:6b:11:2b:ad:80:21:e7:ff: 6b:6d:60:d8:93:cd:25:ad:bc:b3:e2:8f:60:27:69: d6:57:04:71:ed:c1:79:12:c2:2d:0a:76:76:36:84: 56:18:11:60:d6:ef:a0:07:23:1d:33:e0:24:0a:64: ae:fc:c5:cf:b9:2d:42:af:68:96:6e:48:8e:73:9e: fc:7f:f5:20:66:3f:7c:94:28:b2:2a:4f:ef:05:f7: 14:27:8f:17:e7:84:0d:42:0a:5c:52:61:a8:63:6b: 93:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:88:C8:E4:9E:F8:60:95:61:02:EF:7D:54:A7:A3:F7:CE:28:86:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2134156-80a5-3a22-8250-44093645e181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:cc:ae:4c:89:d1:c5:af:77:5f:02:70:69:67:58:fa:6b:9b: 8a:90:ed:42:11:60:c7:5f:d6:1e:63:b4:70:f9:6e:ab:13:6b: 2f:a8:50:94:95:10:bb:ae:73:3b:ee:ff:8c:93:00:d7:f1:ae: f6:fc:31:22:d3:4e:d0:64:f9:02:bf:ae:14:18:26:6a:1d:97: 2f:96:eb:01:15:54:96:12:08:10:e1:59:23:32:bd:48:30:12: b3:9c:93:c8:da:e1:17:47:9e:f7:6a:f0:74:db:9e:a8:c4:a0: 2b:7c:22:f5:7d:be:30:4c:c9:ae:bb:ca:0f:e4:27:51:80:94: 6d:96:53:87:ad:16:24:d2:94:b5:94:3e:68:ad:a4:81:a2:af: 2e:99:76:a0:0d:c6:0d:c8:9f:b3:09:84:28:27:f6:82:db:2b: b6:35:7a:e1:c8:84:1f:88:21:b6:ce:68:ab:b1:03:dc:c2:e1: a0:88:0a:08:14:5a:90:89:b3:df:bb:5f:c1:9c:03:02:a8:0e: 99:7e:52:fa:ef:c7:b7:ad:65:b7:4d:b7:e9:3a:f3:1d:be:fd: d9:73:58:ba:81:1d:39:d6:58:29:fe:3f:46:4e:6d:52:a6:b4: 11:21:6e:18:c2:ee:74:a8:9d:0f:09:2e:98:fe:e9:67:b2:b1: 8a:75:5a:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFaX+MU+ss9vVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ODU0M2EyNjItNDY5NC00YzIzLWJkNzYtODJmZDZhMmM0MzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6+2iPNzuLnzmfzaOa+TkZKTcpK2X9vm/wzp AWf0kZHxPX/oW7fNlnNPLlSzCHobqqFw4pJJl+2gQCczmqfhoUJAeW+A4UE92SOG jC2kvgXw//kex09aR6HVPzRoL3zNUyktynUXVvBsKvBE8SoB2TFT7y5JPa529qdl 0kSuG1o0nq+BBGfpOLxbpNrku+gjcsR0eMsbAsu/5wWoaxErrYAh5/9rbWDYk80l rbyz4o9gJ2nWVwRx7cF5EsItCnZ2NoRWGBFg1u+gByMdM+AkCmSu/MXPuS1Cr2iW bkiOc578f/UgZj98lCiyKk/vBfcUJ48X54QNQgpcUmGoY2uTVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByIyOSe+GCVYQLvfVSno/fOKIYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjIxMzQxNTYtODBhNS0z YTIyLTgyNTAtNDQwOTM2NDVlMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhA2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjMrkyJ0cWvd18CcGlnWPprm4qQ7UIRYMdf1h5jtHD5bqsTay+oUJSV ELuuczvu/4yTANfxrvb8MSLTTtBk+QK/rhQYJmodly+W6wEVVJYSCBDhWSMyvUgw ErOck8ja4RdHnvdq8HTbnqjEoCt8IvV9vjBMya67yg/kJ1GAlG2WU4etFiTSlLWU PmitpIGiry6ZdqANxg3In7MJhCgn9oLbK7Y1euHIhB+IIbbOaKuxA9zC4aCICggU WpCJs9+7X8GcAwKoDpl+Uvrvx7etZbdNt+k68x2+/dlzWLqBHTnWWCn+P0ZObVKm tBEhbhjC7nSonQ8JLpj+6WeysYp1WiQ= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:12 2025 by rpki-client