$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62134457-a2ad-319d-956d-7d1516e6dcc0.roa File: 62134457-a2ad-319d-956d-7d1516e6dcc0.roa (raw, json) Hash identifier: L8zK7jTZyKRl5c9XGFVFtBYi2xlKqneosOI6YH22+Do= Subject key identifier: 26:DE:F8:5E:62:68:DB:0E:FA:C6:D4:3D:6E:90:47:37:A8:FD:5F:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B5F374D0796AB7F9A63DC1D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62134457-a2ad-319d-956d-7d1516e6dcc0.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.20.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:4d:07:96:ab:7f:9a:63:dc:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=3e856143-4916-4bcf-9683-e56b381352d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:d9:8b:59:a7:4e:d3:d7:23:44:43:9e:fa: 69:4e:79:0f:da:1e:33:86:11:bb:77:60:51:7d:08: 6a:8a:bb:d3:0d:2f:d9:d8:cb:86:40:5e:23:dc:6f: f3:ec:6a:77:d7:71:c0:27:a9:d1:65:7f:bf:d7:c1: cd:02:cb:5b:b6:e5:91:6a:df:09:70:44:99:9f:a2: 41:ab:aa:19:26:67:0b:c1:a6:50:23:58:e4:f1:f8: 4a:d4:95:f5:92:6d:6b:e4:64:dc:ea:7d:2b:5e:dd: 6d:e7:b2:f6:b4:f1:1f:97:30:ee:00:cd:a9:ad:96: 52:2f:1a:d3:eb:4b:72:19:ff:67:0a:a5:e7:3c:79: 25:ae:5f:61:38:20:27:fa:11:45:f4:73:1d:4f:02: f9:0a:25:9a:2e:58:f0:e1:fd:c3:98:1f:bc:bf:e7: 27:b6:95:16:a7:3c:ce:ea:37:a2:e7:64:4a:1a:df: 49:29:46:88:64:db:1c:47:18:30:ed:ab:14:8f:b9: 5d:95:0e:b7:6d:0a:5b:ec:3a:c5:e8:ae:8f:e6:37: a4:33:34:6b:ca:92:02:ab:28:37:27:06:6b:13:5c: bb:21:a3:b1:c3:ef:ac:b9:20:4b:d4:57:07:de:7a: 00:3b:1b:ff:6b:a8:ac:9c:6b:b9:88:62:1d:0d:ea: 16:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DE:F8:5E:62:68:DB:0E:FA:C6:D4:3D:6E:90:47:37:A8:FD:5F:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62134457-a2ad-319d-956d-7d1516e6dcc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:af:b7:28:c4:a0:fc:e4:ba:f7:a5:1e:75:eb:37:4d:ef:96: 02:d3:30:b0:7a:d6:36:8a:8e:5a:7f:9a:e0:86:e6:1c:7e:78: 7a:70:66:c5:8d:e1:85:b9:0d:53:22:21:11:8c:59:54:e9:1d: 5c:d7:d5:05:b9:bd:6c:39:5f:ee:05:72:61:26:ef:4d:4a:49: 02:1c:29:99:2e:0c:46:48:a6:c9:3f:be:f6:11:99:a4:67:b2: d8:0b:fc:72:c7:37:ea:15:ba:7d:0e:66:23:72:3c:f6:f0:11: f8:b5:5d:6e:cd:cf:b8:0b:24:3d:c5:53:4a:ba:26:af:74:ec: fb:cd:d3:ea:d9:87:9b:95:1f:ff:90:f5:fa:83:33:5c:85:a7: 0f:5c:6c:f1:6d:c5:83:6a:19:24:05:dc:b7:29:ea:26:45:cf: 0c:ed:fc:d3:e6:d5:ea:85:92:83:16:13:34:26:2c:49:c7:49: 77:21:2a:44:56:0a:9b:60:f7:5c:74:aa:a5:c7:21:2e:37:f7: 6c:d9:cc:65:e2:01:09:cc:c6:ba:a7:1b:56:71:51:fe:db:1d: 95:6d:51:fa:92:f2:2e:25:8b:87:ea:cb:31:05:20:ab:88:0b: 40:f3:ef:7b:6f:20:8a:be:18:0d:27:7d:d8:39:3a:f9:b6:35: c5:45:6f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN00Hlqt/mmPcHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk M2U4NTYxNDMtNDkxNi00YmNmLTk2ODMtZTU2YjM4MTM1MmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSHZi1mnTtPXI0RDnvppTnkP2h4zhhG7d2BR fQhqirvTDS/Z2MuGQF4j3G/z7Gp313HAJ6nRZX+/18HNAstbtuWRat8JcESZn6JB q6oZJmcLwaZQI1jk8fhK1JX1km1r5GTc6n0rXt1t57L2tPEflzDuAM2prZZSLxrT 60tyGf9nCqXnPHklrl9hOCAn+hFF9HMdTwL5CiWaLljw4f3DmB+8v+cntpUWpzzO 6jei52RKGt9JKUaIZNscRxgw7asUj7ldlQ63bQpb7DrF6K6P5jekMzRrypICqyg3 JwZrE1y7IaOxw++suSBL1FcH3noAOxv/a6isnGu5iGIdDeoWUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbe+F5iaNsO+sbUPW6QRzeo/V9RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjIxMzQ0NTctYTJhZC0z MTlkLTk1NmQtN2QxNTE2ZTZkY2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKvtyjEoPzkuvelHnXrN03vlgLTMLB61jaKjlp/muCG5hx+eHpwZsWN 4YW5DVMiIRGMWVTpHVzX1QW5vWw5X+4FcmEm701KSQIcKZkuDEZIpsk/vvYRmaRn stgL/HLHN+oVun0OZiNyPPbwEfi1XW7Nz7gLJD3FU0q6Jq907PvN0+rZh5uVH/+Q 9fqDM1yFpw9cbPFtxYNqGSQF3Lcp6iZFzwzt/NPm1eqFkoMWEzQmLEnHSXchKkRW Cptg91x0qqXHIS4392zZzGXiAQnMxrqnG1ZxUf7bHZVtUfqS8i4li4fqyzEFIKuI C0Dz73tvIIq+GA0nfdg5Ovm2NcVFb/A= -----END CERTIFICATE-----Generated at Fri Oct 10 22:13:31 2025 by rpki-client