$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84b938b0-2b3c-38d0-bd30-8e6277fd5a27.roa File: 84b938b0-2b3c-38d0-bd30-8e6277fd5a27.roa (raw, json) Hash identifier: 41vOU583WQO+BlnpOOmt8OS0Sa1elKDdl+yTkyLSAZU= Subject key identifier: 87:4B:C0:62:FD:B9:9B:91:5D:69:2A:2A:92:0E:4E:A5:E4:88:4F:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C463B27AC466A89EBC800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84b938b0-2b3c-38d0-bd30-8e6277fd5a27.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.17.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:46:3b:27:ac:46:6a:89:eb:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=1d3ec007-8972-45a7-a973-d8c6d2cc9e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c6:9b:f1:1e:85:e3:3b:01:85:37:ff:3a:fb: ae:70:64:4d:61:5f:37:96:72:ab:cd:79:61:8a:f7: 81:ac:c5:d2:4c:03:2b:6f:95:a0:d0:c2:04:ef:c9: 42:d4:99:01:c5:cd:13:f6:ab:21:1c:5c:14:93:6f: d9:d1:80:11:e5:bf:1c:40:52:a8:d2:0a:b7:1a:80: a2:b8:3b:00:ef:64:6f:53:bb:3f:fa:de:9d:bf:7f: 4d:75:d1:d6:e8:70:53:e9:e2:7f:f8:cf:df:5a:0d: 60:c7:e4:d8:c2:ed:ad:99:c5:6c:08:3d:3b:fb:06: 40:d9:87:f7:df:ad:ed:05:1e:1e:62:55:ca:87:d2: 46:7c:c0:57:06:6c:61:19:f7:fb:68:e3:2c:70:16: 43:5a:eb:db:3c:a9:6d:e8:f5:15:06:ff:c3:55:96: af:fa:50:9c:0b:90:b2:aa:4c:04:36:0a:76:30:19: ed:7c:ef:b8:f0:58:9c:76:ba:4d:6b:bf:22:2f:b4: 54:d2:6e:88:03:0c:70:cd:52:40:43:22:dc:3e:42: cd:03:0d:43:a6:01:b0:e9:a8:a8:f1:fc:4b:9c:42: 5d:23:f2:03:38:ab:bc:02:94:50:4b:ac:a4:7b:65: 74:00:f8:d4:ab:a3:70:85:75:fe:cc:02:d0:ec:8c: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:C0:62:FD:B9:9B:91:5D:69:2A:2A:92:0E:4E:A5:E4:88:4F:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84b938b0-2b3c-38d0-bd30-8e6277fd5a27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b3:e8:90:7c:54:c2:fc:5d:38:34:f5:2d:a7:d7:50:b8:32: 29:03:37:58:0c:31:59:89:04:83:f8:66:da:1b:3b:5a:9e:8d: 70:0b:8d:56:03:b0:1b:ff:4e:99:0f:75:66:b8:46:30:ba:05: c3:24:81:47:ae:06:49:6c:2e:27:5f:60:8a:fe:96:bc:a9:64: 34:61:9f:2e:24:2e:c8:c5:4c:5b:e4:6a:dc:95:e9:dc:d1:09: 19:b9:f3:9e:e0:76:db:02:e3:48:45:52:f2:eb:bc:d0:5f:c1: e3:7e:13:76:a4:f4:0e:a0:6e:d2:1b:01:d0:ff:f0:e3:65:08: 45:85:91:ee:5a:d8:ee:e8:c3:bb:7c:a9:d2:34:85:6c:b3:9a: a6:b9:0d:11:4c:a4:d7:cc:0d:5b:26:06:6e:49:d2:a1:b7:7d: d7:25:e8:aa:68:4d:52:7a:0d:3a:97:46:b3:df:e1:5b:30:64: fa:51:3e:6a:d8:98:e0:49:26:a8:59:af:f1:63:0a:82:47:46: b8:c5:bc:6c:9a:72:ab:6c:27:a3:9d:93:a6:cc:ed:94:e6:a4: e7:17:0c:8b:ad:62:26:6e:e9:23:1a:7d:af:49:39:fb:a0:92: da:be:4f:fd:3c:29:43:58:90:42:c1:57:22:d5:02:38:88:b9: 9c:f8:e8:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEY7J6xGaonryAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MWQzZWMwMDctODk3Mi00NWE3LWE5NzMtZDhjNmQyY2M5ZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMab8R6F4zsBhTf/OvuucGRNYV83lnKrzXlh iveBrMXSTAMrb5Wg0MIE78lC1JkBxc0T9qshHFwUk2/Z0YAR5b8cQFKo0gq3GoCi uDsA72RvU7s/+t6dv39NddHW6HBT6eJ/+M/fWg1gx+TYwu2tmcVsCD07+wZA2Yf3 363tBR4eYlXKh9JGfMBXBmxhGff7aOMscBZDWuvbPKlt6PUVBv/DVZav+lCcC5Cy qkwENgp2MBntfO+48FicdrpNa78iL7RU0m6IAwxwzVJAQyLcPkLNAw1DpgGw6aio 8fxLnEJdI/IDOKu8ApRQS6yke2V0APjUq6NwhXX+zALQ7IxnxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdLwGL9uZuRXWkqKpIOTqXkiE+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODRiOTM4YjAtMmIzYy0z OGQwLWJkMzAtOGU2Mjc3ZmQ1YTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISz6JB8VML8XTg09S2n11C4MikDN1gMMVmJBIP4ZtobO1qejXALjVYD sBv/TpkPdWa4RjC6BcMkgUeuBklsLidfYIr+lrypZDRhny4kLsjFTFvkatyV6dzR CRm5857gdtsC40hFUvLrvNBfweN+E3ak9A6gbtIbAdD/8ONlCEWFke5a2O7ow7t8 qdI0hWyzmqa5DRFMpNfMDVsmBm5J0qG3fdcl6KpoTVJ6DTqXRrPf4VswZPpRPmrY mOBJJqhZr/FjCoJHRrjFvGyacqtsJ6Odk6bM7ZTmpOcXDIutYiZu6SMafa9JOfug ktq+T/08KUNYkELBVyLVAjiIuZz46B8= -----END CERTIFICATE-----Generated at Fri Oct 10 22:21:52 2025 by rpki-client