$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a2f858b-513e-375a-88c7-94e0fe278bba.roa File: 4a2f858b-513e-375a-88c7-94e0fe278bba.roa (raw, json) Hash identifier: K8M2CX50gAIEpH71KkBdJjSgyl8FGYVCrCC+9Q8Ulh0= Subject key identifier: 35:EC:46:91:D9:82:1D:3D:50:A3:DD:B9:3C:8F:14:80:24:36:17:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC7462005C138A9CEA46740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a2f858b-513e-375a-88c7-94e0fe278bba.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 98.17.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:46:20:05:c1:38:a9:ce:a4:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=0217edde-0697-4826-b87e-084ae30043ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7c:bd:f2:82:a2:81:cf:ba:d6:7d:3a:f8:72: ed:a3:11:15:11:1e:a3:c5:5a:9b:29:b0:a3:31:2e: 1d:52:75:d4:d8:44:08:b6:16:c6:c5:96:c2:da:d8: 9e:d5:9a:c7:b7:5f:8d:78:2a:00:07:87:44:fb:61: 2e:a8:14:1b:7e:d6:20:35:2e:73:9f:7d:51:ce:29: 83:fe:70:e8:e6:32:01:17:ca:3f:91:30:dd:6c:8d: 4c:e7:e7:17:9a:8b:2c:33:f1:31:90:1e:a2:30:1b: 66:44:9b:e9:c9:6a:87:ee:da:6c:e7:2f:b7:0f:6e: 11:68:d3:a1:dd:89:4e:f3:73:ff:e5:95:22:9a:0e: 7f:35:8e:3e:5b:ef:ab:23:a1:8d:2c:a8:31:1a:05: 98:0a:51:2f:6f:fa:60:b5:73:d5:cb:df:26:d4:a5: 89:f3:f7:79:04:19:e3:92:50:3e:aa:d6:6f:ad:3c: c7:35:12:2f:a4:dd:d1:f5:ee:ac:ab:3a:75:57:45: 70:5f:30:13:fe:29:2a:c0:76:f4:7b:1e:e8:20:4d: 70:58:60:06:e9:60:06:fd:29:9a:ea:d6:7e:73:8a: 81:1d:e1:44:b1:e9:61:51:20:39:a1:73:67:b7:c3: b2:51:b8:47:47:29:03:71:e4:48:10:96:6e:cd:47: 9d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EC:46:91:D9:82:1D:3D:50:A3:DD:B9:3C:8F:14:80:24:36:17:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a2f858b-513e-375a-88c7-94e0fe278bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:0f:2f:4c:81:6e:1f:98:51:85:38:53:d9:23:68:49:ff:7c: 47:bd:45:ea:25:d1:db:fa:07:6b:e0:44:68:a9:b9:d3:d7:3a: 96:1d:11:ed:d1:dd:da:05:85:5f:38:bd:78:29:42:90:fc:cc: 39:2a:db:74:77:41:d9:7e:ed:db:14:fd:4e:80:74:e1:64:97: 99:70:40:7c:9a:58:1c:94:f7:ad:89:68:77:20:98:e1:5c:e3: 4a:a9:8b:45:d3:42:a6:a1:ca:60:7c:f0:88:c7:25:90:48:bc: 6c:7e:93:b2:28:fc:5c:aa:6c:d4:aa:64:ff:8e:43:8c:51:06: f5:65:a2:cc:b8:b8:d2:e3:e1:e2:b5:a0:5e:c5:05:de:2b:b9: 29:50:1b:7f:b3:75:c9:c2:6d:f4:8b:53:42:4b:67:f6:8c:19: c5:f8:ee:50:6f:3c:1d:4b:40:40:64:00:fb:c4:c8:14:36:66: f0:4d:e1:26:5e:53:7b:2f:b6:7a:a0:74:e1:32:e2:60:0d:43: 3b:c2:04:cb:fe:dc:55:2c:5b:0d:6d:70:1d:49:0f:3f:e1:76: f1:92:0b:f3:50:63:b8:6c:a4:03:89:a2:0d:c5:8c:cf:36:a2: 5b:76:23:71:11:db:fe:aa:83:c4:5f:10:8a:64:d0:6e:0a:5f: 19:ae:76:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0YgBcE4qc6kZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MDIxN2VkZGUtMDY5Ny00ODI2LWI4N2UtMDg0YWUzMDA0M2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Xy98oKigc+61n06+HLtoxEVER6jxVqbKbCj MS4dUnXU2EQIthbGxZbC2tie1ZrHt1+NeCoAB4dE+2EuqBQbftYgNS5zn31RzimD /nDo5jIBF8o/kTDdbI1M5+cXmossM/ExkB6iMBtmRJvpyWqH7tps5y+3D24RaNOh 3YlO83P/5ZUimg5/NY4+W++rI6GNLKgxGgWYClEvb/pgtXPVy98m1KWJ8/d5BBnj klA+qtZvrTzHNRIvpN3R9e6sqzp1V0VwXzAT/ikqwHb0ex7oIE1wWGAG6WAG/Sma 6tZ+c4qBHeFEselhUSA5oXNnt8OyUbhHRykDceRIEJZuzUed6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXsRpHZgh09UKPduTyPFIAkNhf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGEyZjg1OGItNTEzZS0z NzVhLTg4YzctOTRlMGZlMjc4YmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsPL0yBbh+YUYU4U9kjaEn/fEe9Reol0dv6B2vgRGipudPXOpYdEe3R 3doFhV84vXgpQpD8zDkq23R3Qdl+7dsU/U6AdOFkl5lwQHyaWByU962JaHcgmOFc 40qpi0XTQqahymB88IjHJZBIvGx+k7Io/FyqbNSqZP+OQ4xRBvVlosy4uNLj4eK1 oF7FBd4ruSlQG3+zdcnCbfSLU0JLZ/aMGcX47lBvPB1LQEBkAPvEyBQ2ZvBN4SZe U3svtnqgdOEy4mANQzvCBMv+3FUsWw1tcB1JDz/hdvGSC/NQY7hspAOJog3FjM82 olt2I3ER2/6qg8RfEIpk0G4KXxmudr4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:32 2025 by rpki-client