$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d6ae40e-495d-3a03-9fde-48b345b15de1.roa File: 8d6ae40e-495d-3a03-9fde-48b345b15de1.roa (raw, json) Hash identifier: jMYXc9LHBxUI7ROFHDKUQNpHijwTPubGKFgZ5yK45sA= Subject key identifier: 69:CF:EE:29:9F:74:65:C1:A7:89:F4:68:3F:30:0B:E6:50:18:AB:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B94421F7B50454415083D6200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d6ae40e-495d-3a03-9fde-48b345b15de1.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.21.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:1f:7b:50:45:44:15:08:3d:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=8538bbe5-65a4-4bb4-b2f8-17f9882ee8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:60:cf:7b:30:eb:08:f3:90:8d:22:6a:55: a2:bd:23:5a:9b:07:36:94:5c:7b:54:ad:a1:68:ee: 40:2d:39:30:4f:d1:99:4b:fe:80:c8:64:28:2f:da: 8f:51:df:43:fa:99:43:2f:c1:f3:57:5e:0a:87:18: 1f:52:d5:9e:90:db:d7:9d:a8:69:a4:5a:94:ee:11: 29:07:26:f8:17:79:91:dc:c0:be:68:6c:04:de:ef: a6:68:88:6e:af:31:ca:fb:c5:89:c5:c2:b0:d8:8a: f9:20:5a:ba:c7:1d:b2:20:96:d6:63:ac:6c:c8:a8: b4:0c:6d:1d:85:81:37:df:90:25:e6:49:4e:9d:1e: 14:8b:19:02:60:68:93:16:34:c2:fc:33:b0:51:04: a5:17:7e:01:e8:b6:33:5c:1e:cf:ea:b7:40:63:9c: 1c:b7:50:1d:37:36:83:53:3e:06:0b:7f:75:c9:8d: 3e:df:b9:d2:c6:3e:8d:19:bd:80:e3:2f:c1:e9:f9: b5:d2:15:54:28:9d:a3:81:00:77:8d:5d:8b:cf:21: d6:3b:2d:e2:00:86:8a:3a:57:13:99:03:d7:a3:6a: 51:c9:11:d6:f6:0f:d5:99:8f:ed:52:db:80:4a:22: 57:6b:fe:b5:3c:83:61:2f:3b:2a:e3:99:38:51:bf: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CF:EE:29:9F:74:65:C1:A7:89:F4:68:3F:30:0B:E6:50:18:AB:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d6ae40e-495d-3a03-9fde-48b345b15de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:0a:7d:a6:6a:d3:3c:19:56:fa:f4:3a:f4:4b:41:f4:aa:d4: 18:42:28:cb:bc:bd:8f:97:c8:0b:b2:a0:57:6e:30:91:99:f1: 4f:cf:bb:cf:58:94:48:e3:84:02:99:8f:89:6b:1f:e0:0f:78: c4:26:66:b5:55:39:67:59:f3:b3:1a:ad:11:65:90:2d:d9:38: c0:a9:e3:e9:a8:ed:0f:d8:58:c4:df:8d:7c:4e:36:2f:b8:7b: 3c:87:99:e9:a9:b9:4f:20:96:e6:7d:20:67:34:66:5a:15:a2: 57:27:be:25:bd:8b:34:80:bd:9f:4b:61:95:29:30:dd:d0:b7: 34:cd:6f:b5:25:16:ad:dc:a7:33:47:f7:75:f1:95:0f:0d:41: 04:3c:f1:86:38:4e:a2:3b:82:50:32:3d:71:96:80:7e:ba:6a: 7d:e3:01:9a:51:03:5b:16:f9:a3:30:3a:26:31:8a:42:37:1b: 32:23:f9:bc:5b:79:96:b9:48:d3:59:65:62:c2:d1:39:5d:61: 08:e7:ee:c4:43:90:93:fa:a1:7f:3f:94:2a:03:56:23:17:b7: c3:b1:27:43:dc:1b:b1:ef:d8:f4:50:94:6e:54:0e:75:1f:b9: e7:75:6d:41:25:fa:f2:2e:c1:2b:9f:d4:3d:21:24:70:0a:f1: 4a:69:a4:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQh97UEVEFQg9YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk ODUzOGJiZTUtNjVhNC00YmI0LWIyZjgtMTdmOTg4MmVlOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/Bgz3sw6wjzkI0ialWivSNamwc2lFx7VK2h aO5ALTkwT9GZS/6AyGQoL9qPUd9D+plDL8HzV14KhxgfUtWekNvXnahppFqU7hEp Byb4F3mR3MC+aGwE3u+maIhurzHK+8WJxcKw2Ir5IFq6xx2yIJbWY6xsyKi0DG0d hYE335Al5klOnR4UixkCYGiTFjTC/DOwUQSlF34B6LYzXB7P6rdAY5wct1AdNzaD Uz4GC391yY0+37nSxj6NGb2A4y/B6fm10hVUKJ2jgQB3jV2LzyHWOy3iAIaKOlcT mQPXo2pRyRHW9g/VmY/tUtuASiJXa/61PINhLzsq45k4Ub/KdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnP7imfdGXBp4n0aD8wC+ZQGKuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGQ2YWU0MGUtNDk1ZC0z YTAzLTlmZGUtNDhiMzQ1YjE1ZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhViMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUKfaZq0zwZVvr0OvRLQfSq1BhCKMu8vY+XyAuyoFduMJGZ8U/Pu89Y lEjjhAKZj4lrH+APeMQmZrVVOWdZ87MarRFlkC3ZOMCp4+mo7Q/YWMTfjXxONi+4 ezyHmempuU8gluZ9IGc0ZloVolcnviW9izSAvZ9LYZUpMN3QtzTNb7UlFq3cpzNH 93XxlQ8NQQQ88YY4TqI7glAyPXGWgH66an3jAZpRA1sW+aMwOiYxikI3GzIj+bxb eZa5SNNZZWLC0TldYQjn7sRDkJP6oX8/lCoDViMXt8OxJ0PcG7Hv2PRQlG5UDnUf ued1bUEl+vIuwSuf1D0hJHAK8UpppNg= -----END CERTIFICATE-----Generated at Mon Oct 20 09:21:46 2025 by rpki-client