$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d118df3f-794e-3228-96d4-47a65b0baef0.roa File: d118df3f-794e-3228-96d4-47a65b0baef0.roa (raw, json) Hash identifier: Di1IsiEW9KFauTvxJwNbMhaNOoVXHWAyR9AUAV2UdoM= Subject key identifier: C4:3C:85:9A:BE:49:5A:E5:D9:BB:57:F9:39:CB:F0:89:D4:CC:E1:6F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD3F50941A446381ED2C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d118df3f-794e-3228-96d4-47a65b0baef0.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 98.16.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3f:50:94:1a:44:63:81:ed:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=bce307a6-aa6e-4d56-8e2e-e51dcfa09f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:56:52:c9:0b:4a:b0:ff:e1:76:35:6c:1b:5e: e1:aa:94:3f:ab:8e:24:e4:05:39:d0:d3:ac:34:5f: 98:b7:96:f5:a0:98:34:63:0a:5d:b7:36:eb:69:25: 7c:b5:9e:18:52:5e:6d:68:97:67:14:0b:af:26:9e: aa:0f:7b:f8:f5:a9:cd:85:b4:d9:2f:54:35:97:7b: c2:72:c2:33:0b:03:ca:93:80:6f:7d:6c:af:c3:aa: 40:e8:db:5f:03:ad:ca:4a:93:7e:46:2e:88:72:ab: af:54:e2:e7:ca:26:0c:2a:ae:0f:68:91:4c:68:b8: da:92:34:c1:1b:46:fb:cd:5b:6f:ac:b3:e8:e4:ec: f3:f1:0f:08:c0:85:31:52:27:43:b4:08:43:62:4f: a3:c0:35:47:c5:c1:ee:c6:2d:60:e1:7f:26:aa:15: 70:64:49:99:17:a9:67:64:48:76:24:7d:aa:01:6c: 96:35:9d:e0:2a:2f:6a:60:03:5f:52:38:a9:77:25: 74:7c:1c:cf:6d:5c:96:b6:99:9b:9b:0c:be:48:a7: e7:55:ae:8b:fc:24:45:48:fd:ac:2c:77:e6:bc:12: 70:1d:c1:0d:f7:be:80:25:09:68:b4:3c:a2:03:a2: b3:06:29:70:d0:18:26:bd:67:75:a1:b5:7d:dd:d1: f1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3C:85:9A:BE:49:5A:E5:D9:BB:57:F9:39:CB:F0:89:D4:CC:E1:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d118df3f-794e-3228-96d4-47a65b0baef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:1a:5f:6a:d7:6e:41:c8:ef:61:cf:bc:31:8d:dc:7f:de:1b: 59:1a:88:bc:a8:a5:cb:cb:c2:85:28:ba:6f:49:38:32:3e:aa: dc:89:d0:04:6a:09:0b:c7:59:e7:71:6c:19:0c:6c:82:11:4e: 1c:7f:61:75:e3:6c:05:75:9a:bc:28:81:59:f0:76:24:98:72: fb:b9:b3:85:6d:e7:b5:51:fe:65:7d:47:8b:37:46:62:21:2d: c4:93:e9:55:97:9d:d5:2c:74:35:b6:2e:f1:b9:de:2d:cb:b9: 35:38:8c:f0:3a:c4:b4:f1:43:e9:db:9e:ce:94:ff:9b:f8:98: 96:25:79:d0:eb:5a:f0:53:dc:2b:3d:2e:de:52:b3:5d:98:c1: 9f:df:ae:fc:1a:f6:8a:97:6b:ab:f8:b1:b4:d6:3c:b4:cf:71: 8d:24:ac:1c:3a:44:53:8a:96:7b:64:63:a4:d6:ed:67:88:e0: a7:74:37:9d:00:ba:48:e7:d0:84:56:ed:2d:18:19:78:27:7a: 50:8a:a3:4e:74:ea:7a:6f:d8:0c:0f:7b:5f:4c:01:5f:4d:cb: f1:e7:07:af:b9:df:fc:a5:a6:3c:00:8c:36:56:ad:00:7d:59: 81:04:5c:fb:9f:b7:47:fb:6d:0a:a9:12:c6:16:c1:ad:8b:d6: b3:af:2b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3T9QlBpEY4HtLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YmNlMzA3YTYtYWE2ZS00ZDU2LThlMmUtZTUxZGNmYTA5ZjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVZSyQtKsP/hdjVsG17hqpQ/q44k5AU50NOs NF+Yt5b1oJg0YwpdtzbraSV8tZ4YUl5taJdnFAuvJp6qD3v49anNhbTZL1Q1l3vC csIzCwPKk4BvfWyvw6pA6NtfA63KSpN+Ri6IcquvVOLnyiYMKq4PaJFMaLjakjTB G0b7zVtvrLPo5Ozz8Q8IwIUxUidDtAhDYk+jwDVHxcHuxi1g4X8mqhVwZEmZF6ln ZEh2JH2qAWyWNZ3gKi9qYANfUjipdyV0fBzPbVyWtpmbmwy+SKfnVa6L/CRFSP2s LHfmvBJwHcEN976AJQlotDyiA6KzBilw0BgmvWd1obV93dHxCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ8hZq+SVrl2btX+TnL8InUzOFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDExOGRmM2YtNzk0ZS0z MjI4LTk2ZDQtNDdhNjViMGJhZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIaX2rXbkHI72HPvDGN3H/eG1kaiLyopcvLwoUoum9JODI+qtyJ0ARq CQvHWedxbBkMbIIRThx/YXXjbAV1mrwogVnwdiSYcvu5s4Vt57VR/mV9R4s3RmIh LcST6VWXndUsdDW2LvG53i3LuTU4jPA6xLTxQ+nbns6U/5v4mJYledDrWvBT3Cs9 Lt5Ss12YwZ/frvwa9oqXa6v4sbTWPLTPcY0krBw6RFOKlntkY6TW7WeI4Kd0N50A ukjn0IRW7S0YGXgnelCKo0506npv2AwPe19MAV9Ny/HnB6+53/ylpjwAjDZWrQB9 WYEEXPuft0f7bQqpEsYWwa2L1rOvK4w= -----END CERTIFICATE-----Generated at Mon Oct 20 14:59:17 2025 by rpki-client