$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44acb445-26d6-3fdf-8220-9a3adef4f394.roa File: 44acb445-26d6-3fdf-8220-9a3adef4f394.roa (raw, json) Hash identifier: RQKYIdjCjTW+KL2yH680GxyaZUMxRbh62SM1A/UhdMk= Subject key identifier: FD:B1:AB:CA:E6:78:27:45:A8:E5:A4:A8:4E:0F:E9:F5:E9:C6:C9:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA1206A848ABA5F116680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44acb445-26d6-3fdf-8220-9a3adef4f394.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 98.20.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a1:20:6a:84:8a:ba:5f:11:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=e36c0c57-b4c9-4a61-aa94-c4593d662293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:48:2b:f1:3a:93:9f:e1:ec:8c:1c:b6:cc:7e: 69:3c:40:c7:68:17:94:d8:f4:82:70:4f:87:9c:2f: 5d:6d:a4:7e:0a:45:a4:14:f9:f3:c8:df:81:32:5c: f6:f2:a4:04:42:f3:52:58:d9:81:05:4f:69:f5:73: d8:72:1b:5d:a9:03:9d:9e:64:30:d1:40:35:2c:c5: 0c:3e:f2:0f:79:e3:0c:d7:d9:be:32:d8:7f:d0:a6: be:b1:da:cc:1d:81:36:25:98:d1:7c:d1:bc:3d:d7: 0b:5b:f8:5c:3e:12:11:77:fc:65:bc:e3:42:05:31: 94:f9:aa:c8:db:fa:0c:b8:47:18:b7:e1:f9:c6:22: 57:66:c9:75:c5:86:f7:cd:42:81:97:6a:db:32:90: 59:41:4a:13:74:c2:1f:b9:c9:0f:a2:51:0d:52:e0: 7e:1e:5d:95:ad:e3:07:6d:ef:ed:95:d6:b3:1c:d1: 5c:5f:90:cd:7d:dc:ec:15:61:ec:e4:9a:5c:9a:34: ed:e2:09:92:5c:c3:2d:dc:2f:25:84:cf:7f:f4:8a: a6:bc:87:19:02:fd:ed:ca:28:ce:da:6d:bd:a8:c9: 3e:7d:7f:bd:16:7b:e0:a6:3f:ca:e6:f6:04:6c:d9: 9a:47:86:43:36:df:00:1d:b7:5f:0e:dd:21:3e:b1: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B1:AB:CA:E6:78:27:45:A8:E5:A4:A8:4E:0F:E9:F5:E9:C6:C9:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44acb445-26d6-3fdf-8220-9a3adef4f394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ef:d1:f7:81:72:93:76:b7:4e:42:3a:3b:fb:d0:22:99:62: 91:e4:51:42:d4:95:96:44:ca:3b:13:21:da:f2:b5:00:7b:eb: c6:78:5d:25:ac:a6:6f:c1:f9:a5:5d:bd:33:13:1a:dc:ec:91: 2d:94:07:31:a6:b6:fb:e2:d9:41:61:58:77:01:79:94:91:2b: a7:7c:9c:7c:ab:02:6f:cd:e5:0d:2b:3a:3b:92:ca:8b:1f:cb: 7b:57:3c:63:50:bc:37:92:41:2f:2b:5a:fb:c9:6c:0f:89:7a: 04:c6:ec:e1:ea:3c:52:45:6b:95:c8:9f:70:74:22:c0:c8:8b: 21:55:e7:f2:58:a8:e2:eb:28:3c:d9:9e:51:76:d6:34:38:9a: 5b:e6:d0:a0:19:ca:8a:82:07:38:3b:e3:9a:19:75:d8:46:98: 5c:ff:25:2f:e2:08:a3:6a:93:ba:72:2a:11:39:41:8e:d9:0e: 1c:a3:6b:c1:79:11:8b:4b:35:fd:ec:bb:69:fd:cf:a3:5d:56: 5f:c4:03:3d:a4:24:86:97:25:f6:22:e6:2a:9d:67:bd:cb:b3: ef:63:96:f3:43:d2:3e:ba:89:de:54:a8:69:d0:fc:f9:50:35: 74:0c:36:b5:59:83:72:57:c9:04:0e:c9:1e:bc:2a:e9:8d:16: 01:aa:57:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKEgaoSKul8RZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTM2YzBjNTctYjRjOS00YTYxLWFhOTQtYzQ1OTNkNjYyMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ugr8TqTn+HsjBy2zH5pPEDHaBeU2PSCcE+H nC9dbaR+CkWkFPnzyN+BMlz28qQEQvNSWNmBBU9p9XPYchtdqQOdnmQw0UA1LMUM PvIPeeMM19m+Mth/0Ka+sdrMHYE2JZjRfNG8PdcLW/hcPhIRd/xlvONCBTGU+arI 2/oMuEcYt+H5xiJXZsl1xYb3zUKBl2rbMpBZQUoTdMIfuckPolENUuB+Hl2VreMH be/tldazHNFcX5DNfdzsFWHs5JpcmjTt4gmSXMMt3C8lhM9/9IqmvIcZAv3tyijO 2m29qMk+fX+9Fnvgpj/K5vYEbNmaR4ZDNt8AHbdfDt0hPrFTgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2xq8rmeCdFqOWkqE4P6fXpxslKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDRhY2I0NDUtMjZkNi0z ZmRmLTgyMjAtOWEzYWRlZjRmMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/v0feBcpN2t05COjv70CKZYpHkUULUlZZEyjsTIdrytQB768Z4XSWs pm/B+aVdvTMTGtzskS2UBzGmtvvi2UFhWHcBeZSRK6d8nHyrAm/N5Q0rOjuSyosf y3tXPGNQvDeSQS8rWvvJbA+JegTG7OHqPFJFa5XIn3B0IsDIiyFV5/JYqOLrKDzZ nlF21jQ4mlvm0KAZyoqCBzg745oZddhGmFz/JS/iCKNqk7pyKhE5QY7ZDhyja8F5 EYtLNf3su2n9z6NdVl/EAz2kJIaXJfYi5iqdZ73Ls+9jlvND0j66id5UqGnQ/PlQ NXQMNrVZg3JXyQQOyR68KumNFgGqV40= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:07 2025 by rpki-client