$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa File: 904128b2-0813-339d-a2fa-b676181812c8.roa (raw, json) Hash identifier: qGyzYzUkgZzNL8KAUsvmWoYPY2F3ayXnWE9KfzIBZmY= Subject key identifier: 86:05:49:5F:B8:59:43:B1:B5:90:4C:74:A3:E7:06:77:E8:62:19:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C47E5C76046FA0DA043C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.22.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:47:e5:c7:60:46:fa:0d:a0:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=79e7da11-d96a-4eff-a8c5-a4d6ae38d527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f3:22:b5:ae:fa:ad:cc:13:d2:84:5f:ec:0e: 32:63:7b:03:bd:9a:0e:68:f3:df:7c:0f:a2:28:82: 26:41:7f:0f:50:ef:33:36:e5:cd:ac:44:5e:1c:df: 8a:04:8b:19:cc:8a:b5:78:4a:0b:10:20:e4:00:fc: 0d:d0:c0:21:a2:41:b0:f6:e7:12:bb:b1:17:30:ea: 02:64:0c:3c:1e:ac:57:2d:9c:dc:f7:95:95:19:f0: 18:14:8d:02:1e:3a:b7:73:56:75:2a:73:1b:ac:bd: 6b:f7:01:7b:fb:1b:c7:86:f7:ac:93:64:71:24:d3: d4:d2:e6:9c:d3:a6:df:ad:c0:99:5a:53:59:56:bb: 83:d9:45:ce:b8:07:af:a1:0b:32:06:1a:1f:8c:1d: 9f:a2:ed:9e:09:48:e7:73:39:2b:2d:ba:9e:f0:af: c0:48:10:c7:e4:50:42:b4:c5:f0:c5:d4:79:77:94: c1:b4:0f:8d:41:52:6e:51:50:20:6e:50:7f:44:df: f6:8e:22:8a:b8:85:38:a7:f5:87:67:ba:b9:ed:18: 48:55:4d:75:c8:92:16:14:3c:92:e9:c7:61:59:d3: 6a:6c:52:82:fd:3b:1d:80:ac:8f:5e:32:22:16:2e: 90:21:01:97:fa:cf:c6:d7:29:2a:a8:9b:48:24:01: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:05:49:5F:B8:59:43:B1:B5:90:4C:74:A3:E7:06:77:E8:62:19:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b2:c8:99:a5:41:5f:1d:b6:45:3d:da:65:b7:e7:96:b7:0b: 71:19:2e:23:62:e8:30:4d:eb:d9:0f:d0:c3:f6:75:ce:0b:ac: e1:fe:ae:df:a3:ee:7c:b9:ba:5c:cd:72:50:95:ae:9c:8c:30: 43:bf:d8:47:5c:23:ce:1f:44:41:72:eb:ea:02:7b:2b:0a:fb: 4a:aa:2b:5b:37:43:f4:ce:95:b1:f4:30:da:12:b0:de:bf:f1: a7:6c:fc:40:2b:84:2a:7d:67:7d:15:e7:f7:58:69:ad:16:b5: e4:2f:2a:55:ab:d7:53:98:5f:14:df:4a:9f:db:01:2d:90:90: 29:95:ba:12:ed:cf:2f:ab:ad:9c:62:5d:8e:1e:69:30:66:2f: 83:55:fe:c3:82:0f:53:0c:95:a2:f8:0c:1d:34:41:05:20:e1: 4f:14:82:b1:ab:ee:67:43:83:85:41:e5:de:77:2c:6c:0d:c5: b9:f1:f0:b5:9c:c6:9a:3f:c7:23:ac:a1:5c:7f:e2:c5:15:bf: 10:94:a9:5b:21:db:03:60:bc:36:9e:1e:65:28:3f:df:54:b0: 3f:13:84:60:e6:b3:25:27:5d:14:7a:d7:bb:50:7b:a9:e8:d2: 5c:35:4e:09:56:8a:4f:c3:f7:27:23:e3:17:72:7c:e3:77:59: a0:bf:b1:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEflx2BG+g2gQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NzllN2RhMTEtZDk2YS00ZWZmLWE4YzUtYTRkNmFlMzhkNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfMita76rcwT0oRf7A4yY3sDvZoOaPPffA+i KIImQX8PUO8zNuXNrEReHN+KBIsZzIq1eEoLECDkAPwN0MAhokGw9ucSu7EXMOoC ZAw8HqxXLZzc95WVGfAYFI0CHjq3c1Z1KnMbrL1r9wF7+xvHhvesk2RxJNPU0uac 06bfrcCZWlNZVruD2UXOuAevoQsyBhofjB2fou2eCUjnczkrLbqe8K/ASBDH5FBC tMXwxdR5d5TBtA+NQVJuUVAgblB/RN/2jiKKuIU4p/WHZ7q57RhIVU11yJIWFDyS 6cdhWdNqbFKC/TsdgKyPXjIiFi6QIQGX+s/G1ykqqJtIJAGXCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYFSV+4WUOxtZBMdKPnBnfoYhniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTA0MTI4YjItMDgxMy0z MzlkLWEyZmEtYjY3NjE4MTgxMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmyyJmlQV8dtkU92mW355a3C3EZLiNi6DBN69kP0MP2dc4LrOH+rt+j 7ny5ulzNclCVrpyMMEO/2EdcI84fREFy6+oCeysK+0qqK1s3Q/TOlbH0MNoSsN6/ 8ads/EArhCp9Z30V5/dYaa0WteQvKlWr11OYXxTfSp/bAS2QkCmVuhLtzy+rrZxi XY4eaTBmL4NV/sOCD1MMlaL4DB00QQUg4U8UgrGr7mdDg4VB5d53LGwNxbnx8LWc xpo/xyOsoVx/4sUVvxCUqVsh2wNgvDaeHmUoP99UsD8ThGDmsyUnXRR617tQe6no 0lw1TglWik/D9ycj4xdyfON3WaC/seE= -----END CERTIFICATE-----Generated at Fri Oct 10 17:50:56 2025 by rpki-client