$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1623e645-594a-39b8-b004-fe03189f412a.roa File: 1623e645-594a-39b8-b004-fe03189f412a.roa (raw, json) Hash identifier: /izKnKlGxcB1hcEYe09GAwSxnWyvHo1jBlLUjTRKxPg= Subject key identifier: 7C:AC:21:1B:BE:35:BB:2A:DF:56:80:C3:A6:DD:6A:D2:70:47:27:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D0805AEAA160EAA70F540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1623e645-594a-39b8-b004-fe03189f412a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 98.21.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:08:05:ae:aa:16:0e:aa:70:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=45293f67-682c-4f0e-aa6d-501a75212112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9f:1f:22:92:03:bb:12:07:99:44:bf:95:eb: 63:77:b5:a1:85:5e:6c:48:5a:8a:07:8a:86:91:05: 0d:00:7d:f6:59:86:f8:03:ae:6d:a0:2e:bc:0e:14: 94:b6:d7:50:88:1c:16:20:e9:1b:ff:12:69:b3:c6: 69:f7:73:46:3e:7e:78:12:80:fe:00:30:de:5f:4e: ed:96:06:96:72:5d:64:de:ea:18:bb:43:02:55:fb: df:46:d7:b5:ea:d8:8e:cc:e5:ea:03:22:3d:82:72: 98:82:fe:1c:a6:bb:23:58:00:29:f9:b7:2d:c2:f2: dd:52:10:8c:d9:1c:9e:48:84:9d:58:fa:7e:0b:9f: 61:d0:ae:87:49:01:4d:39:20:9c:59:f2:86:33:9b: 4e:45:e3:2e:d6:1e:5e:12:7d:54:41:82:89:34:4d: b7:81:2b:8c:61:9f:30:40:2c:91:32:b7:c1:10:d4: b6:93:70:ab:4a:df:b7:d6:e1:3f:c4:1e:77:81:7d: c2:4b:45:fe:a3:d1:5a:45:1d:91:62:b7:2f:3f:0c: 05:13:80:67:cf:f8:56:7f:d6:a1:fd:e0:56:8c:de: 93:81:84:5d:4c:af:a6:7e:61:b4:c3:4b:65:c0:86: c2:f4:29:e8:59:1c:45:bd:46:c8:90:b2:e3:8d:65: 01:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AC:21:1B:BE:35:BB:2A:DF:56:80:C3:A6:DD:6A:D2:70:47:27:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1623e645-594a-39b8-b004-fe03189f412a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:66:09:c6:49:5c:cb:63:ff:06:eb:b0:c7:c6:6f:45:10:09: 7c:dc:2f:e4:00:ee:9c:3d:f9:f1:67:d5:f1:9c:14:d8:e7:7e: 21:3d:f5:2a:dd:b0:bf:06:51:89:f3:09:f7:0e:3d:81:ed:8f: 37:55:81:19:d2:85:8e:7a:21:ac:ce:57:cc:f5:81:bf:48:c9: 9a:9c:54:6f:1e:97:03:df:d9:b4:a5:91:b4:97:db:af:5f:da: 33:93:20:7c:0f:b0:7e:3e:fe:f4:b1:d8:35:39:24:3e:e6:22: 72:45:60:c3:63:73:db:a0:3b:af:cc:32:95:6a:de:36:06:f1: fd:14:9a:d9:4f:27:ac:e4:c6:ae:a2:bf:01:54:e8:d1:ea:e5: d7:be:8c:93:24:ba:20:3c:fd:1d:cb:4e:8a:d3:50:bc:fa:f6: 1a:7a:36:b3:1d:1d:0a:ed:85:62:09:c6:34:71:dc:d2:1a:6a: ae:bb:f9:70:aa:05:ce:0b:d8:a5:80:4e:cc:29:a8:92:7b:cc: 8c:a3:95:bb:ed:09:b4:ef:53:56:35:44:1a:44:61:e5:07:04: 1e:bc:78:77:ee:08:19:72:6b:81:3b:83:ce:74:50:25:64:09: 33:0c:10:59:30:04:38:18:8f:7c:26:69:c0:a8:7f:5b:ca:9f: ce:d6:25:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQgFrqoWDqpw9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NDUyOTNmNjctNjgyYy00ZjBlLWFhNmQtNTAxYTc1MjEyMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk58fIpIDuxIHmUS/letjd7WhhV5sSFqKB4qG kQUNAH32WYb4A65toC68DhSUttdQiBwWIOkb/xJps8Zp93NGPn54EoD+ADDeX07t lgaWcl1k3uoYu0MCVfvfRte16tiOzOXqAyI9gnKYgv4cprsjWAAp+bctwvLdUhCM 2RyeSISdWPp+C59h0K6HSQFNOSCcWfKGM5tOReMu1h5eEn1UQYKJNE23gSuMYZ8w QCyRMrfBENS2k3CrSt+31uE/xB53gX3CS0X+o9FaRR2RYrcvPwwFE4Bnz/hWf9ah /eBWjN6TgYRdTK+mfmG0w0tlwIbC9CnoWRxFvUbIkLLjjWUBcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHysIRu+Nbsq31aAw6bdatJwRyf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTYyM2U2NDUtNTk0YS0z OWI4LWIwMDQtZmUwMzE4OWY0MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJmCcZJXMtj/wbrsMfGb0UQCXzcL+QA7pw9+fFn1fGcFNjnfiE99Srd sL8GUYnzCfcOPYHtjzdVgRnShY56IazOV8z1gb9IyZqcVG8elwPf2bSlkbSX269f 2jOTIHwPsH4+/vSx2DU5JD7mInJFYMNjc9ugO6/MMpVq3jYG8f0UmtlPJ6zkxq6i vwFU6NHq5de+jJMkuiA8/R3LTorTULz69hp6NrMdHQrthWIJxjRx3NIaaq67+XCq Bc4L2KWATswpqJJ7zIyjlbvtCbTvU1Y1RBpEYeUHBB68eHfuCBlya4E7g850UCVk CTMMEFkwBDgYj3wmacCof1vKn87WJaQ= -----END CERTIFICATE-----Generated at Fri Oct 10 20:01:10 2025 by rpki-client