$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71d06723-1f5a-3b3e-8d9b-8387f9464972.roa File: 71d06723-1f5a-3b3e-8d9b-8387f9464972.roa (raw, json) Hash identifier: SSv2ubF11U6a3CKkqz2RRDwZZnqfb+n9d0FjvqpiiH0= Subject key identifier: 47:F8:47:F7:79:02:B8:13:21:56:B8:4A:2A:EE:02:80:12:27:5C:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B94421F6B01E3E167570B13E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71d06723-1f5a-3b3e-8d9b-8387f9464972.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.21.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:1f:6b:01:e3:e1:67:57:0b:13:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=8269ac32-e2bb-47fa-b58e-016f51d40f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:7c:fd:82:db:7e:dc:27:75:d7:fa:c9:a8: 45:a5:1b:d5:7a:ec:95:c7:81:39:96:55:b9:76:89: 59:5d:63:5d:4d:4c:66:4e:4e:43:a5:ff:94:3e:39: 59:c3:c6:52:0b:ab:83:9d:37:86:7e:58:88:1a:10: d7:73:7a:31:15:95:71:8b:fe:60:95:21:88:bb:7e: 8a:5a:6c:61:47:ad:38:0e:48:47:1b:0b:fe:15:b1: 92:81:57:b4:1e:4e:13:81:e5:39:7c:83:49:02:59: d4:e1:d4:3a:f0:17:5a:25:c8:7b:81:8d:97:5a:a6: 9e:41:b9:6a:46:c5:8c:85:a7:47:30:41:5b:ed:64: 78:3e:9a:7c:6c:ce:ce:ae:26:53:0c:9a:f2:45:4f: 70:f3:c9:a2:6b:37:09:09:de:54:70:ec:7a:a7:22: 9b:e1:cf:90:2e:cb:5e:c1:28:c4:44:e1:4c:bf:11: 5f:f5:4d:01:5e:80:84:8e:de:4b:b2:84:c4:59:fb: 85:18:92:7b:ae:ea:00:95:bf:29:a1:35:83:13:44: 79:5e:8d:b8:8a:d1:b8:89:b2:ba:fa:02:80:fe:d7: 49:30:75:f8:06:eb:9a:87:2a:8e:33:5d:f1:22:8d: dd:55:9d:fe:ed:e3:26:d2:2b:bf:d5:8e:f6:e4:1e: 3c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F8:47:F7:79:02:B8:13:21:56:B8:4A:2A:EE:02:80:12:27:5C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71d06723-1f5a-3b3e-8d9b-8387f9464972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:cf:6f:2d:92:bb:17:62:0b:47:ff:11:60:bd:44:51:92:04: db:b1:ca:81:61:22:9b:f9:75:a2:62:09:82:db:76:7b:9c:31: ec:85:6a:59:89:47:b8:67:3f:d7:e6:0f:cd:c2:62:e6:90:41: a4:ce:bf:87:90:6b:a6:cd:6c:40:4e:a3:79:90:50:9a:ad:39: 4b:51:d1:dc:11:ed:1c:25:ae:54:d0:79:0b:ec:5f:bc:f8:cb: dc:22:a5:3a:50:54:8d:25:d4:2c:83:33:2f:09:4d:d8:b4:d4: a9:cb:ce:a5:f0:b9:7d:cc:b9:4d:b4:55:99:0e:7a:b9:2f:e0: 16:d3:fa:34:cd:32:b1:6d:b9:c7:c7:b9:68:f5:d7:30:b7:47: 3a:9a:fd:9e:fc:8a:6e:5a:ac:bb:af:3e:86:43:dd:c0:75:00: fc:e8:bd:8d:b4:3d:38:02:77:7e:1e:f2:08:b9:5f:c1:ae:63: 22:1c:bb:9d:5b:64:d7:6b:0d:cc:f7:f3:61:84:c2:a7:40:ec: 42:5b:64:38:0a:77:4e:73:24:73:e9:ee:e0:de:bd:b4:bd:e5: ea:8c:02:c0:89:83:75:71:74:ed:95:ef:75:36:70:39:f4:c4: 2a:37:c4:a1:f9:d1:d1:30:3a:b1:ec:58:27:e0:98:1e:03:f7: 79:e1:fc:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQh9rAePhZ1cLE+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk ODI2OWFjMzItZTJiYi00N2ZhLWI1OGUtMDE2ZjUxZDQwZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXV8/YLbftwnddf6yahFpRvVeuyVx4E5llW5 dolZXWNdTUxmTk5Dpf+UPjlZw8ZSC6uDnTeGfliIGhDXc3oxFZVxi/5glSGIu36K WmxhR604DkhHGwv+FbGSgVe0Hk4TgeU5fINJAlnU4dQ68BdaJch7gY2XWqaeQblq RsWMhadHMEFb7WR4Ppp8bM7OriZTDJryRU9w88miazcJCd5UcOx6pyKb4c+QLste wSjEROFMvxFf9U0BXoCEjt5LsoTEWfuFGJJ7ruoAlb8poTWDE0R5Xo24itG4ibK6 +gKA/tdJMHX4BuuahyqOM13xIo3dVZ3+7eMm0iu/1Y725B48yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf4R/d5ArgTIVa4SiruAoASJ1xmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzFkMDY3MjMtMWY1YS0z YjNlLThkOWItODM4N2Y5NDY0OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3Pby2SuxdiC0f/EWC9RFGSBNuxyoFhIpv5daJiCYLbdnucMeyFalmJ R7hnP9fmD83CYuaQQaTOv4eQa6bNbEBOo3mQUJqtOUtR0dwR7RwlrlTQeQvsX7z4 y9wipTpQVI0l1CyDMy8JTdi01KnLzqXwuX3MuU20VZkOerkv4BbT+jTNMrFtucfH uWj11zC3Rzqa/Z78im5arLuvPoZD3cB1APzovY20PTgCd34e8gi5X8GuYyIcu51b ZNdrDcz382GEwqdA7EJbZDgKd05zJHPp7uDevbS95eqMAsCJg3VxdO2V73U2cDn0 xCo3xKH50dEwOrHsWCfgmB4D93nh/OU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:22:00 2025 by rpki-client