$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa File: 3195ad33-c3b1-3618-884d-17725318a065.roa (raw, json) Hash identifier: ZxTPJVNQ6+loY+vPTQNphXR8lHsGVECjkynOneuqOq0= Subject key identifier: C5:E1:B2:52:60:90:6F:B5:BA:AE:F2:0A:08:65:44:5A:FA:13:13:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA71C5AF3B2240C602850 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 98.20.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a7:1c:5a:f3:b2:24:0c:60:28:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=bbf9067d-03a0-48e1-9337-826dc2421cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:10:51:9e:c7:91:81:15:74:05:9a:fc:9a:40: 9e:04:13:98:18:7d:97:27:cd:7b:ae:db:94:55:61: f0:da:5c:0d:3f:33:e7:87:af:58:ab:24:79:f1:b1: 37:77:48:15:97:c4:fa:c3:12:c4:8b:ca:51:d7:7b: 97:b5:11:ed:49:aa:c2:02:da:bd:a1:c8:52:1d:fe: 0c:88:78:e0:cb:79:78:f8:7e:99:68:41:08:a5:23: 25:29:8f:7d:82:5c:ed:93:33:48:75:dc:29:cf:8e: 6d:63:93:93:55:7c:08:70:ca:cd:3e:2a:92:3b:2a: 41:a2:e0:a9:4d:01:d8:32:48:3f:eb:8d:13:03:4e: 57:87:b7:f1:25:ea:7d:0d:dc:4d:ac:fd:af:3a:73: 78:38:fe:c7:d7:0c:ed:35:f3:cf:38:00:4d:b1:23: fa:28:a3:e2:76:f0:6c:c9:a4:e1:ce:cc:8b:59:47: 5c:cc:cc:97:14:60:fb:04:e8:24:91:30:b0:d0:f6: 43:d2:45:58:0f:84:96:e7:96:48:5e:28:9a:5d:1c: 14:1c:9d:d4:1a:58:83:dd:d1:d9:2a:06:6b:f4:ec: 70:72:28:5a:0a:ff:90:70:66:5b:ea:4f:6c:ce:bc: 54:3a:ad:ab:9d:c2:e4:72:bb:5f:15:36:42:5b:f7: 84:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E1:B2:52:60:90:6F:B5:BA:AE:F2:0A:08:65:44:5A:FA:13:13:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:68:14:4c:44:43:70:7f:88:f9:65:69:40:5b:4b:96:26:0c: b7:0f:1b:4f:39:76:af:e3:08:b9:41:d2:4f:4d:fc:e6:95:26: cf:0e:2a:db:6b:29:19:ea:8f:af:d7:98:2a:22:9e:a7:ff:c6: 4e:0b:bf:00:2d:78:78:7c:4e:d3:3b:81:69:45:ba:44:bb:83: 0f:c8:4a:8b:87:28:84:f3:b2:b1:ce:0f:3b:8f:b0:4e:98:5a: 1d:fe:c0:71:17:b4:08:7c:45:b1:f6:df:c3:e4:28:7e:82:17: 1e:90:9d:d3:84:bb:cc:e6:2e:bd:4a:a3:30:62:ab:0c:65:ba: aa:6a:c7:d1:39:3e:36:67:f8:0f:3e:3c:7c:60:12:15:53:aa: 89:e7:61:43:12:44:d4:4d:7c:4a:39:84:05:d1:10:ba:71:38: 41:38:44:0f:29:fc:79:87:4a:2c:3b:f3:92:6d:a6:30:6e:b6: 9d:54:e5:37:e3:a2:a6:8c:8c:be:73:f6:85:ce:6e:1f:50:4a: fa:ef:1b:4e:86:0c:f2:62:bb:a9:a1:e0:27:b1:14:4c:3a:2d: 10:79:23:80:7a:a7:77:eb:04:6f:b7:db:7f:d8:02:b7:41:09: 2d:35:bf:75:50:b5:5a:d1:53:43:af:66:6c:12:c3:ff:d8:fc: bd:7b:9c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKccWvOyJAxgKFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YmJmOTA2N2QtMDNhMC00OGUxLTkzMzctODI2ZGMyNDIxY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBBRnseRgRV0BZr8mkCeBBOYGH2XJ817rtuU VWHw2lwNPzPnh69YqyR58bE3d0gVl8T6wxLEi8pR13uXtRHtSarCAtq9ochSHf4M iHjgy3l4+H6ZaEEIpSMlKY99glztkzNIddwpz45tY5OTVXwIcMrNPiqSOypBouCp TQHYMkg/640TA05Xh7fxJep9DdxNrP2vOnN4OP7H1wztNfPPOABNsSP6KKPidvBs yaThzsyLWUdczMyXFGD7BOgkkTCw0PZD0kVYD4SW55ZIXiiaXRwUHJ3UGliD3dHZ KgZr9OxwcihaCv+QcGZb6k9szrxUOq2rncLkcrtfFTZCW/eEQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXhslJgkG+1uq7yCghlRFr6ExMXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzE5NWFkMzMtYzNiMS0z NjE4LTg4NGQtMTc3MjUzMThhMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1oFExEQ3B/iPllaUBbS5YmDLcPG085dq/jCLlB0k9N/OaVJs8OKttr KRnqj6/XmCoinqf/xk4LvwAteHh8TtM7gWlFukS7gw/ISouHKITzsrHODzuPsE6Y Wh3+wHEXtAh8RbH238PkKH6CFx6QndOEu8zmLr1KozBiqwxluqpqx9E5PjZn+A8+ PHxgEhVTqonnYUMSRNRNfEo5hAXRELpxOEE4RA8p/HmHSiw785JtpjButp1U5Tfj oqaMjL5z9oXObh9QSvrvG06GDPJiu6mh4CexFEw6LRB5I4B6p3frBG+323/YArdB CS01v3VQtVrRU0OvZmwSw//Y/L17nEA= -----END CERTIFICATE-----Generated at Fri Oct 10 22:10:44 2025 by rpki-client