$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec436aa5-f2e8-3818-85b7-c3ce57c49160.roa File: ec436aa5-f2e8-3818-85b7-c3ce57c49160.roa (raw, json) Hash identifier: ugP36GEJx5WjWN89X9KoQ+mGsAe11G3f4cZsMlWEFt8= Subject key identifier: 39:D5:73:5B:F6:28:D4:96:F6:75:86:22:86:A9:FF:E6:8F:D4:66:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC4D9BC550B5F91BB0000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec436aa5-f2e8-3818-85b7-c3ce57c49160.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 98.18.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c4:d9:bc:55:0b:5f:91:bb:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=4dd9994e-ac99-4934-9549-5a965efa16d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:b3:d7:eb:fd:8a:d1:94:4a:d8:2e:58:0d: 66:c4:51:ba:18:13:05:1a:06:ab:8e:bb:32:2f:62: 12:be:ae:3c:4c:ea:68:67:8f:07:62:96:c5:cc:65: 09:2c:ef:a2:6a:83:6a:73:10:85:21:19:bf:b4:bd: 6c:a3:73:97:7c:6e:bd:5b:4c:54:c5:d2:62:bf:d6: a1:27:cc:60:d7:b8:2e:2b:f9:21:2b:7f:60:d6:9e: f1:7f:ae:09:86:01:a6:fa:29:b5:e3:83:70:cb:a5: ce:76:4b:15:bc:01:b8:77:f1:ee:c3:48:93:a0:19: d4:c3:19:be:ea:a4:eb:9f:34:80:5a:24:6f:ea:8f: e2:50:d4:cf:77:d8:94:08:ad:55:52:71:0e:15:30: 5b:f1:d4:e3:1f:a8:d7:34:18:d5:a2:d2:d3:99:52: 15:49:24:9c:0f:ac:fb:ab:17:a7:00:d3:c0:7f:ea: 1d:ba:b1:b3:9c:16:e2:66:ce:6e:aa:f7:63:77:76: 2a:60:75:e6:6c:d7:29:3a:1e:dc:2a:3b:bc:da:90: 34:60:b6:e2:ed:67:1b:d0:9a:ff:7e:1d:f7:e0:fa: 29:3e:94:c9:ee:df:34:ea:56:ca:d0:78:df:4c:a2: 76:30:8e:7a:28:9d:45:bd:17:c6:08:8b:6d:e6:35: dd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D5:73:5B:F6:28:D4:96:F6:75:86:22:86:A9:FF:E6:8F:D4:66:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec436aa5-f2e8-3818-85b7-c3ce57c49160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:03:21:98:25:67:e9:c7:6c:c2:4b:bb:d3:5a:e9:75:9e:2f: 23:3c:51:51:3f:03:ea:92:12:d7:1d:8b:b9:d6:d8:53:53:a4: 97:d4:7c:0c:4d:b7:06:22:1f:8a:7c:20:40:96:47:57:8c:a1: 87:fe:e7:36:d1:91:03:53:36:7c:58:8f:5f:48:03:e1:9f:cd: e6:08:aa:1d:9d:4e:cd:13:4d:cf:65:3b:4a:40:73:83:a5:ed: aa:91:69:dd:7b:69:54:9a:c2:e9:37:45:65:5e:60:e0:23:f1: 38:ca:10:3b:fd:64:b4:40:44:13:6e:39:9c:b6:f0:20:1b:88: fe:44:b9:e0:8f:7a:97:62:5c:a4:69:ac:a3:a6:88:6d:c1:22: a6:05:9d:ab:84:7d:7e:82:00:07:fb:9f:b2:a5:59:a5:d0:e2: 42:1f:50:67:35:18:6a:a3:c8:36:26:29:d1:fa:60:ab:14:55: 5e:d5:43:71:2e:d5:b3:a6:57:ea:87:93:db:7e:cf:60:28:44: 42:31:da:bb:ac:4c:05:76:1e:c2:71:10:c0:39:27:9a:48:11: 72:82:33:d6:e8:6d:27:e3:20:56:3b:95:fa:21:e4:7d:d7:e7: b6:75:25:bc:e4:31:71:44:50:c8:5d:27:0f:f6:dd:01:a3:68: f8:93:8b:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMTZvFULX5G7AAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NGRkOTk5NGUtYWM5OS00OTM0LTk1NDktNWE5NjVlZmExNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIuz1+v9itGUStguWA1mxFG6GBMFGgarjrsy L2ISvq48TOpoZ48HYpbFzGUJLO+iaoNqcxCFIRm/tL1so3OXfG69W0xUxdJiv9ah J8xg17guK/khK39g1p7xf64JhgGm+im144Nwy6XOdksVvAG4d/Huw0iToBnUwxm+ 6qTrnzSAWiRv6o/iUNTPd9iUCK1VUnEOFTBb8dTjH6jXNBjVotLTmVIVSSScD6z7 qxenANPAf+odurGznBbiZs5uqvdjd3YqYHXmbNcpOh7cKju82pA0YLbi7Wcb0Jr/ fh334PopPpTJ7t806lbK0HjfTKJ2MI56KJ1FvRfGCItt5jXdCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnVc1v2KNSW9nWGIoap/+aP1GbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWM0MzZhYTUtZjJlOC0z ODE4LTg1YjctYzNjZTU3YzQ5MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4DIZglZ+nHbMJLu9Na6XWeLyM8UVE/A+qSEtcdi7nW2FNTpJfUfAxN twYiH4p8IECWR1eMoYf+5zbRkQNTNnxYj19IA+GfzeYIqh2dTs0TTc9lO0pAc4Ol 7aqRad17aVSawuk3RWVeYOAj8TjKEDv9ZLRARBNuOZy28CAbiP5EueCPepdiXKRp rKOmiG3BIqYFnauEfX6CAAf7n7KlWaXQ4kIfUGc1GGqjyDYmKdH6YKsUVV7VQ3Eu 1bOmV+qHk9t+z2AoREIx2rusTAV2HsJxEMA5J5pIEXKCM9bobSfjIFY7lfoh5H3X 57Z1JbzkMXFEUMhdJw/23QGjaPiTi0g= -----END CERTIFICATE-----Generated at Mon Oct 20 06:54:28 2025 by rpki-client