$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa File: 8935d049-ac61-3720-adee-5caafdfdacfa.roa (raw, json) Hash identifier: sVml8s6f3Pqdj6WOBdszWVPstIs6AuUAk7tWI5g95jw= Subject key identifier: 68:CA:06:EF:39:3C:41:C0:E8:85:5A:8E:33:55:16:0F:F0:66:E4:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B5F374CF63F82CE0196CFFD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.20.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:4c:f6:3f:82:ce:01:96:cf:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=c21c7f4b-8fc4-4f54-8a0a-cd5aabb4f856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:69:4c:93:7a:9f:38:c0:a3:57:83:47:9d:50: 86:43:29:4f:2f:bc:f5:ae:03:a4:10:b0:43:ed:c7: ac:e1:5a:c5:e9:74:d0:6a:35:fe:44:3b:50:d4:e5: ce:c7:5d:71:96:2d:85:08:4d:fc:19:1d:00:84:f3: 3d:04:9d:69:cf:d8:7b:2b:c7:f7:28:84:e5:37:06: 91:d3:ed:47:2c:6a:c4:23:ad:7c:09:73:79:e5:9c: e7:22:8d:71:99:45:54:4d:f4:a5:92:7f:5c:b7:74: 57:d7:50:cc:16:28:1b:bf:c9:3b:03:15:cd:6d:16: 50:71:28:29:5f:82:35:53:ec:20:cd:fa:40:f5:a8: d6:9b:01:04:6b:83:7d:09:0d:18:69:5d:1a:13:fc: 30:4a:dc:ce:b3:ba:6b:f4:95:22:1a:03:e6:f7:c3: 8a:37:74:b7:73:96:d8:86:28:f2:23:f0:e0:74:1c: 3a:b6:f0:b7:fd:5e:95:5f:05:cb:e9:3d:44:40:c4: f7:08:8f:76:ae:4d:f4:89:7a:a8:25:6c:3e:a8:5d: 0e:50:13:51:48:6a:3e:b4:b3:e1:1d:cf:19:47:02: 11:9d:ad:57:24:85:3e:d7:64:4e:0e:f0:5a:52:23: 3f:70:31:96:3d:7d:0b:1f:00:21:23:11:ad:a4:68: 59:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CA:06:EF:39:3C:41:C0:E8:85:5A:8E:33:55:16:0F:F0:66:E4:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:38:19:71:d7:c8:e2:bf:ae:9a:04:6c:05:65:a8:a3:7a:a9: f0:12:67:98:59:e2:b4:59:9c:f2:e5:cc:a2:e3:98:c3:ec:ec: ca:a7:8b:bd:99:f6:63:ed:87:c6:40:2e:b4:a1:09:ff:e6:a0: 0c:27:ac:97:24:90:61:89:da:31:59:26:c7:d8:5e:92:e7:31: 53:43:45:49:2e:a9:b3:22:3d:b0:f9:1e:bd:87:3a:43:6c:73: 0a:c1:6d:b5:8a:37:7c:b6:af:21:e8:8b:9b:cd:a8:b1:02:1c: 18:ba:f5:8d:4e:dc:e4:9e:19:f5:09:ef:5c:35:1a:1b:cd:af: dc:18:c7:43:b1:f8:2d:2e:8c:f1:88:79:5c:1a:26:38:7f:6d: 64:45:fe:01:67:14:d8:9a:66:c9:64:bb:d5:75:65:9a:70:a3: 0d:e4:7f:10:5c:b6:5e:89:fe:76:39:02:9b:fa:03:1a:22:e9: bd:c3:f2:f7:20:99:2e:f7:8b:6a:4d:1c:d8:c7:4d:a9:1c:70: 30:d1:fc:a6:7c:0d:c0:24:79:07:e0:9f:c0:d9:57:22:d4:15: 86:6e:6a:28:c6:fe:07:db:53:e2:a4:83:7a:2f:60:4e:fe:3d: d5:d2:3f:6f:f8:62:8d:52:cb:8f:48:15:c8:b0:a1:6f:2a:0c: 49:e5:43:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0z2P4LOAZbP/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk YzIxYzdmNGItOGZjNC00ZjU0LThhMGEtY2Q1YWFiYjRmODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWlMk3qfOMCjV4NHnVCGQylPL7z1rgOkELBD 7ces4VrF6XTQajX+RDtQ1OXOx11xli2FCE38GR0AhPM9BJ1pz9h7K8f3KITlNwaR 0+1HLGrEI618CXN55ZznIo1xmUVUTfSlkn9ct3RX11DMFigbv8k7AxXNbRZQcSgp X4I1U+wgzfpA9ajWmwEEa4N9CQ0YaV0aE/wwStzOs7pr9JUiGgPm98OKN3S3c5bY hijyI/DgdBw6tvC3/V6VXwXL6T1EQMT3CI92rk30iXqoJWw+qF0OUBNRSGo+tLPh Hc8ZRwIRna1XJIU+12RODvBaUiM/cDGWPX0LHwAhIxGtpGhZhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjKBu85PEHA6IVajjNVFg/wZuTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODkzNWQwNDktYWM2MS0z NzIwLWFkZWUtNWNhYWZkZmRhY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA4GXHXyOK/rpoEbAVlqKN6qfASZ5hZ4rRZnPLlzKLjmMPs7Mqni72Z 9mPth8ZALrShCf/moAwnrJckkGGJ2jFZJsfYXpLnMVNDRUkuqbMiPbD5Hr2HOkNs cwrBbbWKN3y2ryHoi5vNqLECHBi69Y1O3OSeGfUJ71w1GhvNr9wYx0Ox+C0ujPGI eVwaJjh/bWRF/gFnFNiaZslku9V1ZZpwow3kfxBctl6J/nY5Apv6Axoi6b3D8vcg mS73i2pNHNjHTakccDDR/KZ8DcAkeQfgn8DZVyLUFYZuaijG/gfbU+Kkg3ovYE7+ PdXSP2/4Yo1Sy49IFciwoW8qDEnlQz4= -----END CERTIFICATE-----Generated at Fri Oct 10 20:03:32 2025 by rpki-client