$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44079553-10d5-3258-bfe6-683d36cf6241.roa File: 44079553-10d5-3258-bfe6-683d36cf6241.roa (raw, json) Hash identifier: h8DI4gARwjmgORpyHH49zNcLwx1SYC3Tf8sLvfaGoiU= Subject key identifier: C5:8F:5A:C4:2D:04:25:0B:8F:04:FA:AA:9B:03:22:58:F9:FF:71:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C469FFA5DEBD7B32BF540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44079553-10d5-3258-bfe6-683d36cf6241.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.20.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:46:9f:fa:5d:eb:d7:b3:2b:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=862e232b-76b4-41ca-b9f0-5e64dac756a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:58:58:57:97:9e:f6:b9:f5:4d:7f:91:ac: fa:16:68:66:16:c8:b2:91:84:1e:05:d2:f1:af:1d: eb:b6:1b:3d:a0:50:80:8e:ff:17:b6:50:80:f7:d7: 8d:1f:90:0c:84:46:fe:f4:24:49:d9:9e:d1:be:a8: 2b:87:c7:37:24:b3:9f:58:2d:7f:f1:22:aa:e2:a8: c2:2c:2c:60:a5:9d:2b:35:89:5b:e2:14:0c:97:23: 8e:d3:65:51:4e:68:d2:1f:a1:4c:cf:37:8c:af:37: 1b:8e:00:dc:ce:58:fc:5c:41:03:42:ee:0a:ac:07: 47:46:44:ec:e5:d9:56:c6:25:72:e1:a1:6f:35:5c: b0:c4:15:3d:e3:1b:0d:c1:42:8c:52:ec:44:5f:34: 71:c4:43:ce:a4:2a:09:59:68:08:9c:db:01:8b:6f: d3:88:a5:f7:98:75:01:65:55:f0:8f:0d:a9:8b:2b: 6b:2b:59:94:d8:16:21:0b:a3:50:18:ad:77:a9:13: ce:42:71:93:2d:14:01:dc:81:1f:df:d4:5a:a4:45: 59:1d:59:bb:61:ee:cc:b2:af:2d:5c:8a:20:82:47: e5:91:27:5e:85:bf:90:e0:d4:12:8d:8e:d6:74:76: fa:48:95:0b:ce:9f:27:5b:c8:16:00:18:98:ca:5e: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8F:5A:C4:2D:04:25:0B:8F:04:FA:AA:9B:03:22:58:F9:FF:71:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44079553-10d5-3258-bfe6-683d36cf6241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9c:94:fc:d0:21:80:c8:70:ee:e1:e4:8a:49:22:33:83:e7: eb:54:7f:a5:9c:86:1c:05:37:b9:5f:cd:cb:62:d2:60:8d:b0: 59:8e:c4:b1:9c:c0:0d:02:cd:4b:f7:9f:e3:a0:a9:e2:d7:db: ce:5e:5e:bd:27:d8:27:a4:e6:46:e2:3c:fd:62:e3:fa:91:16: 6b:45:b0:d2:cf:0c:e9:e0:5a:a9:90:f4:51:1d:78:a5:80:49: 68:3e:dc:4a:c6:b9:28:d7:aa:05:87:23:fc:f0:86:f6:ee:4f: 11:84:86:b7:62:ce:11:1d:3c:70:1b:bd:e2:36:fe:87:75:9d: 02:b3:a2:38:de:00:66:7f:a3:a0:f3:93:7e:01:85:d2:68:e6: 53:fa:45:26:56:d7:ff:68:f8:c0:fa:72:38:78:0b:c3:e9:4b: 2f:05:14:7f:f0:19:bf:27:d8:c7:81:54:70:f1:c1:1f:85:39: 32:38:c1:e1:a7:67:cf:74:fd:ac:44:44:f7:7f:be:6c:2b:87: 04:ac:2d:3d:07:26:1c:00:57:bc:aa:cc:f6:36:3a:50:0d:a9: 05:cd:fd:a2:7d:61:04:a6:05:c2:4e:f3:ee:72:bd:3a:8f:1e: 9d:1d:60:8f:ff:2e:bf:5e:2f:ed:f2:16:fc:d8:87:8e:ae:09: fd:72:cc:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEaf+l3r17Mr9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ODYyZTIzMmItNzZiNC00MWNhLWI5ZjAtNWU2NGRhYzc1NmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdlYWFeXnva59U1/kaz6FmhmFsiykYQeBdLx rx3rths9oFCAjv8XtlCA99eNH5AMhEb+9CRJ2Z7Rvqgrh8c3JLOfWC1/8SKq4qjC LCxgpZ0rNYlb4hQMlyOO02VRTmjSH6FMzzeMrzcbjgDczlj8XEEDQu4KrAdHRkTs 5dlWxiVy4aFvNVywxBU94xsNwUKMUuxEXzRxxEPOpCoJWWgInNsBi2/TiKX3mHUB ZVXwjw2piytrK1mU2BYhC6NQGK13qRPOQnGTLRQB3IEf39RapEVZHVm7Ye7Msq8t XIoggkflkSdehb+Q4NQSjY7WdHb6SJULzp8nW8gWABiYyl63jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWPWsQtBCULjwT6qpsDIlj5/3G1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDQwNzk1NTMtMTBkNS0z MjU4LWJmZTYtNjgzZDM2Y2Y2MjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOclPzQIYDIcO7h5IpJIjOD5+tUf6WchhwFN7lfzcti0mCNsFmOxLGc wA0CzUv3n+OgqeLX285eXr0n2Cek5kbiPP1i4/qRFmtFsNLPDOngWqmQ9FEdeKWA SWg+3ErGuSjXqgWHI/zwhvbuTxGEhrdizhEdPHAbveI2/od1nQKzojjeAGZ/o6Dz k34BhdJo5lP6RSZW1/9o+MD6cjh4C8PpSy8FFH/wGb8n2MeBVHDxwR+FOTI4weGn Z890/axERPd/vmwrhwSsLT0HJhwAV7yqzPY2OlANqQXN/aJ9YQSmBcJO8+5yvTqP Hp0dYI//Lr9eL+3yFvzYh46uCf1yzHg= -----END CERTIFICATE-----Generated at Fri Oct 10 22:10:37 2025 by rpki-client