$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67880de3-678a-3ed2-9b09-075e2377ad48.roa File: 67880de3-678a-3ed2-9b09-075e2377ad48.roa (raw, json) Hash identifier: 6afJ6vwDiYcfHH+x7hObxc90G79P1+npik1VLyTKiMo= Subject key identifier: 54:A2:E9:93:BA:82:CB:43:97:DD:DE:4C:52:8B:20:E1:32:DD:6F:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC50D3240FA4A816048B0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67880de3-678a-3ed2-9b09-075e2377ad48.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 98.20.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c5:0d:32:40:fa:4a:81:60:48:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=d7d6376d-2137-4b45-b33a-a4a7f5151459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:dc:93:47:8f:aa:d3:96:cb:39:38:f0:4f: 09:0f:c8:a5:3c:e0:63:e6:a0:5a:bc:b8:fb:9f:5c: 35:27:34:1b:c9:cd:3a:e0:77:0e:ef:18:fd:6b:e5: 91:df:eb:74:a0:a7:81:3d:f9:fa:0b:e2:38:12:4a: b3:cb:af:b4:3c:6c:3e:ca:46:0c:93:97:ca:8f:84: 36:c3:9d:7a:ba:0b:66:41:58:43:8e:9f:ed:fa:9c: ab:ba:9d:15:e9:e6:7d:c2:1c:78:5c:d0:84:d3:a1: 07:3e:2e:1a:68:f0:2b:58:5a:05:bd:7e:cb:cd:ea: 1b:76:31:de:90:85:c1:22:48:ad:2f:db:d6:aa:2b: 05:03:48:82:b1:af:82:01:91:4c:d5:86:78:01:9a: 47:5e:47:3d:fb:f0:fb:44:6b:93:8d:f5:fa:e3:08: 29:47:aa:a5:50:d6:52:94:13:b5:b5:cb:f6:6d:64: 8e:98:ea:dd:22:f3:ae:4a:e5:eb:0c:42:64:0f:b2: cd:13:7d:fe:3f:48:9b:8a:37:3b:44:34:50:ec:65: 34:77:72:6e:dc:be:19:f7:4a:ba:0d:28:e1:70:7b: 9e:17:d5:c4:39:87:97:f5:8e:af:5e:ee:76:75:f1: 67:41:13:11:79:3a:ae:f3:7b:4a:6f:de:39:1f:44: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A2:E9:93:BA:82:CB:43:97:DD:DE:4C:52:8B:20:E1:32:DD:6F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67880de3-678a-3ed2-9b09-075e2377ad48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:42:9b:21:09:8d:d8:0b:0b:8a:f2:99:ba:50:6d:52:ec:97: 2b:2f:2e:ad:ef:c2:55:99:75:31:3f:2d:c4:d9:3b:ac:dc:94: 84:7e:d5:74:20:50:30:a2:37:80:58:61:04:f4:13:6c:f9:40: 81:7f:90:87:86:45:56:b4:99:53:38:a6:68:d1:52:b9:3e:ab: 5d:77:b7:e1:2f:ff:d2:05:57:a3:d0:b1:c8:e3:75:d1:07:1a: de:b7:fb:e5:d6:84:04:af:a8:d8:bf:9e:6a:0a:1d:e1:f9:fc: 81:ed:2b:e9:2e:09:54:5b:dd:f2:02:15:8a:ef:a5:7b:a3:79: 9c:25:b5:12:56:00:88:eb:37:bb:21:72:9b:63:1a:76:48:17: 13:bd:65:57:50:b6:f6:fd:74:a8:3d:25:73:97:0c:e5:f0:8b: 7f:bf:6e:53:de:b7:1b:5e:e4:ec:7e:a7:7b:7e:34:2d:94:38: 3b:1b:30:e2:68:71:f5:73:38:5d:41:43:16:ea:aa:c9:1e:8c: e4:36:e6:5d:7b:3e:cb:63:60:e4:0e:74:b4:af:ca:29:49:dc: 9f:c8:5e:81:98:8e:4b:83:c0:23:68:ac:fd:b7:e4:a1:8d:75: fc:27:c8:a7:7a:6b:2b:3d:9d:f9:26:e5:7f:6b:52:32:06:1f: b0:b7:a4:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMUNMkD6SoFgSLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZDdkNjM3NmQtMjEzNy00YjQ1LWIzM2EtYTRhN2Y1MTUxNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZzck0ePqtOWyzk48E8JD8ilPOBj5qBavLj7 n1w1JzQbyc064HcO7xj9a+WR3+t0oKeBPfn6C+I4Ekqzy6+0PGw+ykYMk5fKj4Q2 w516ugtmQVhDjp/t+pyrup0V6eZ9whx4XNCE06EHPi4aaPArWFoFvX7LzeobdjHe kIXBIkitL9vWqisFA0iCsa+CAZFM1YZ4AZpHXkc9+/D7RGuTjfX64wgpR6qlUNZS lBO1tcv2bWSOmOrdIvOuSuXrDEJkD7LNE33+P0ibijc7RDRQ7GU0d3Ju3L4Z90q6 DSjhcHueF9XEOYeX9Y6vXu52dfFnQRMReTqu83tKb945H0TZzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSi6ZO6gstDl93eTFKLIOEy3W9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjc4ODBkZTMtNjc4YS0z ZWQyLTliMDktMDc1ZTIzNzdhZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpCmyEJjdgLC4rymbpQbVLslysvLq3vwlWZdTE/LcTZO6zclIR+1XQg UDCiN4BYYQT0E2z5QIF/kIeGRVa0mVM4pmjRUrk+q113t+Ev/9IFV6PQscjjddEH Gt63++XWhASvqNi/nmoKHeH5/IHtK+kuCVRb3fICFYrvpXujeZwltRJWAIjrN7sh cptjGnZIFxO9ZVdQtvb9dKg9JXOXDOXwi3+/blPetxte5Ox+p3t+NC2UODsbMOJo cfVzOF1BQxbqqskejOQ25l17PstjYOQOdLSvyilJ3J/IXoGYjkuDwCNorP235KGN dfwnyKd6ays9nfkm5X9rUjIGH7C3pGo= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:17 2025 by rpki-client