$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df7d30b1-9a63-3f41-9f92-833f1d702097.roa File: df7d30b1-9a63-3f41-9f92-833f1d702097.roa (raw, json) Hash identifier: w5vfQduJ85NkPNZ1is07lnaMmwK2l7O4cj+9PwFBjqc= Subject key identifier: 16:02:05:69:D8:8A:A3:45:DA:E2:C7:3E:1A:93:8D:2D:73:29:24:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B944226E04F892CB1AD8F5800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df7d30b1-9a63-3f41-9f92-833f1d702097.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.17.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:26:e0:4f:89:2c:b1:ad:8f:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=3ac4379d-63a2-4115-ac76-c44914c694bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ba:c6:15:7a:5d:82:aa:0d:c9:ed:2c:c7:c4: 7f:5d:52:34:57:f3:f4:f5:2d:b6:10:ea:c2:ce:d8: 25:2b:46:d8:19:34:7d:37:22:ac:ed:a3:be:0e:f1: eb:ab:85:8a:14:63:3e:91:6f:e6:3d:51:95:e4:9b: 43:60:d7:82:0a:d0:81:b7:07:c2:7b:b8:11:a3:25: 3c:6a:8b:99:71:03:f3:f9:f1:ef:fb:44:55:73:8d: 7f:d3:c8:fa:dd:c4:db:6c:0b:32:d0:be:d5:4d:53: 9b:be:cc:fe:9d:d2:95:ee:1a:27:d3:a0:af:51:ee: 6e:1e:62:a0:7f:df:c2:0e:5b:f4:84:d3:80:06:fb: cc:ca:cd:fe:22:6b:bb:f1:53:f6:ce:9c:f2:2b:41: 95:4c:6d:b9:d7:f6:d7:5b:a1:6f:2d:41:c9:e6:eb: fa:c7:48:64:90:d1:57:25:f8:21:be:0c:1d:de:67: 2f:66:22:a7:33:4b:ad:b0:b7:4c:cd:f8:00:01:2f: 86:e1:de:a9:63:78:6f:e1:34:05:7e:d0:27:cd:d9: 7e:3b:b8:d0:a8:6d:7a:52:03:ce:d0:30:31:66:48: 70:76:15:1e:52:71:65:78:46:22:9e:e4:1c:b6:c3: 72:34:73:f0:a5:20:7d:e4:5f:f1:6f:05:40:e3:5d: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:02:05:69:D8:8A:A3:45:DA:E2:C7:3E:1A:93:8D:2D:73:29:24:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df7d30b1-9a63-3f41-9f92-833f1d702097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ae:69:f4:1b:2e:af:21:dd:e2:a4:10:75:87:44:74:2b:ff: fc:68:b8:bc:23:5e:3b:76:d3:f3:8d:97:fc:db:fa:39:af:e5: eb:57:04:60:7d:7e:2b:65:33:0b:43:e4:4f:48:d5:64:8d:a0: a5:60:71:aa:d1:b5:74:30:f7:cf:df:3c:66:27:94:e7:78:ce: 45:65:b6:b5:85:86:ae:f8:66:3b:fa:d4:94:2d:2a:5c:6d:32: 3f:c0:20:4d:e4:f0:4c:0c:73:ac:4e:35:b9:74:64:dc:24:f7: cf:cf:7b:35:ce:ec:88:1b:68:6d:34:9d:da:04:fb:ab:d1:35: c3:41:2c:ed:fe:d0:0f:8b:34:f0:b6:18:61:9f:3e:1c:1b:39: 61:4f:c6:af:18:02:06:77:11:83:18:9e:1f:8e:38:d0:2e:7f: 15:b4:3a:e0:73:72:31:bc:d3:26:93:8d:40:65:03:83:10:6d: 00:82:90:1c:ee:c6:68:c9:f5:e6:14:91:31:40:1b:b1:06:ab: ae:13:48:47:d2:57:2a:8d:50:37:7f:ce:f3:0a:1c:6f:05:e9: 0d:11:c6:dd:74:79:0d:96:f4:b2:ab:73:00:30:54:4c:8b:37: de:d9:8c:81:44:e1:e0:8b:f6:77:b5:6e:0a:90:6a:f2:0f:2e: 91:42:16:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQibgT4kssa2PWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk M2FjNDM3OWQtNjNhMi00MTE1LWFjNzYtYzQ0OTE0YzY5NGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LrGFXpdgqoNye0sx8R/XVI0V/P09S22EOrC ztglK0bYGTR9NyKs7aO+DvHrq4WKFGM+kW/mPVGV5JtDYNeCCtCBtwfCe7gRoyU8 aouZcQPz+fHv+0RVc41/08j63cTbbAsy0L7VTVObvsz+ndKV7hon06CvUe5uHmKg f9/CDlv0hNOABvvMys3+Imu78VP2zpzyK0GVTG251/bXW6FvLUHJ5uv6x0hkkNFX Jfghvgwd3mcvZiKnM0utsLdMzfgAAS+G4d6pY3hv4TQFftAnzdl+O7jQqG16UgPO 0DAxZkhwdhUeUnFleEYinuQctsNyNHPwpSB95F/xbwVA413J3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYCBWnYiqNF2uLHPhqTjS1zKSSMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGY3ZDMwYjEtOWE2My0z ZjQxLTlmOTItODMzZjFkNzAyMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyuafQbLq8h3eKkEHWHRHQr//xouLwjXjt20/ONl/zb+jmv5etXBGB9 fitlMwtD5E9I1WSNoKVgcarRtXQw98/fPGYnlOd4zkVltrWFhq74Zjv61JQtKlxt Mj/AIE3k8EwMc6xONbl0ZNwk98/PezXO7IgbaG00ndoE+6vRNcNBLO3+0A+LNPC2 GGGfPhwbOWFPxq8YAgZ3EYMYnh+OONAufxW0OuBzcjG80yaTjUBlA4MQbQCCkBzu xmjJ9eYUkTFAG7EGq64TSEfSVyqNUDd/zvMKHG8F6Q0Rxt10eQ2W9LKrcwAwVEyL N97ZjIFE4eCL9ne1bgqQavIPLpFCFjA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:13 2025 by rpki-client