$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa File: a428fefd-e21b-3a06-93e8-83dbc2a71707.roa (raw, json) Hash identifier: c/RwQ2JpUUZz4w0MbzB3lqUeCVX1PxnatAZpyCfcYRw= Subject key identifier: C6:2B:BE:7E:EC:48:4B:99:86:B3:39:EC:B4:93:F5:84:98:20:10:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD668D35C61FBF5A9C030C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.16.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8d:35:c6:1f:bf:5a:9c:03:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=43383dc6-c6a7-4d17-a378-a1762953b71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:dd:74:dc:b1:28:43:20:c2:8a:ac:00:65: ae:f4:4f:7f:be:9a:3b:27:73:d3:a7:58:a4:05:4c: 24:3d:ab:07:eb:31:1d:ab:5f:4d:c8:50:24:04:09: 76:c9:ff:8b:75:25:a7:e4:d6:40:d6:6c:84:4d:b5: 32:ca:a7:18:d5:4e:40:a2:d0:f4:5b:15:92:80:5e: b7:3f:1a:ae:3f:78:bc:fe:d3:d5:77:99:b2:7f:ab: 8f:9d:ff:df:65:c0:36:65:c7:c1:42:cd:c5:12:80: 71:86:83:0e:46:b7:5e:0e:d3:c3:df:b9:60:3c:82: d6:eb:c2:e5:11:d8:c9:50:3e:45:2b:a2:8e:c7:27: 9f:97:07:3c:6b:41:e6:b9:97:ae:45:73:94:84:38: 37:da:cc:97:cd:f7:0c:19:ba:cc:2f:dc:2d:5e:b0: f3:7b:73:7a:69:b3:3f:5d:bc:1e:62:85:d6:b2:4f: 03:f3:d7:0e:8e:81:a7:09:5f:a2:b2:86:6f:76:70: 1d:cb:2e:a8:e3:e4:89:a8:55:ec:84:1c:00:e7:ef: bb:bb:1c:90:15:d6:23:38:82:be:5b:b3:ca:02:b2: 10:44:5e:eb:2b:d5:41:f3:82:95:a5:74:83:8b:56: d7:01:61:59:e3:e9:6b:86:b3:dc:63:6b:18:4b:da: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2B:BE:7E:EC:48:4B:99:86:B3:39:EC:B4:93:F5:84:98:20:10:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:46:b7:45:08:cd:7d:bd:cb:6a:b4:f2:d2:98:93:7d:e2:f4: a3:61:de:f6:8e:87:3a:28:59:0a:76:66:c7:5c:74:10:e6:c9: 5a:8f:f2:19:ec:01:90:73:1d:5a:0a:53:52:bd:d0:8d:1b:6e: e7:9e:76:e9:11:e2:85:fd:2d:5f:98:e9:df:e5:a3:d7:ed:48: 79:75:ed:11:0c:dd:e2:43:d7:4e:33:58:7b:4f:23:ae:58:43: 74:88:8a:f5:b7:bb:d4:a6:3e:58:7a:15:54:37:bf:97:f1:3d: 71:af:22:0c:df:ae:a6:ea:b3:4b:7c:48:16:cd:2b:c4:a6:ba: 8c:59:b0:36:06:22:72:e2:ab:8c:a4:18:22:ee:ba:01:3c:c3: d0:82:02:a8:57:b8:91:37:7f:7e:f9:00:9c:02:a1:7f:a7:64: 8c:35:a5:ce:85:0c:87:3a:f3:5d:66:46:55:76:70:5c:7e:a7: 0c:af:df:0b:c5:67:e3:c3:49:5c:d1:15:aa:dd:dd:58:9a:7e: 18:05:5e:fe:82:10:1e:fa:ca:5b:f2:12:a9:17:ef:62:23:1a: 5c:63:cd:7b:7c:59:e8:db:83:1f:e8:c3:eb:9b:eb:14:1d:85: 2a:53:84:3d:75:39:45:c2:ce:0f:6a:3a:8f:24:78:e9:51:69: 5d:6d:75:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZo01xh+/WpwDDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NDMzODNkYzYtYzZhNy00ZDE3LWEzNzgtYTE3NjI5NTNiNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3bddNyxKEMgwoqsAGWu9E9/vpo7J3PTp1ik BUwkPasH6zEdq19NyFAkBAl2yf+LdSWn5NZA1myETbUyyqcY1U5AotD0WxWSgF63 PxquP3i8/tPVd5myf6uPnf/fZcA2ZcfBQs3FEoBxhoMORrdeDtPD37lgPILW68Ll EdjJUD5FK6KOxyeflwc8a0HmuZeuRXOUhDg32syXzfcMGbrML9wtXrDze3N6abM/ XbweYoXWsk8D89cOjoGnCV+isoZvdnAdyy6o4+SJqFXshBwA5++7uxyQFdYjOIK+ W7PKArIQRF7rK9VB84KVpXSDi1bXAWFZ4+lrhrPcY2sYS9qWTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYrvn7sSEuZhrM57LST9YSYIBCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQyOGZlZmQtZTIxYi0z YTA2LTkzZTgtODNkYmMyYTcxNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhA3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdGt0UIzX29y2q08tKYk33i9KNh3vaOhzooWQp2ZsdcdBDmyVqP8hns AZBzHVoKU1K90I0bbueedukR4oX9LV+Y6d/lo9ftSHl17REM3eJD104zWHtPI65Y Q3SIivW3u9SmPlh6FVQ3v5fxPXGvIgzfrqbqs0t8SBbNK8SmuoxZsDYGInLiq4yk GCLuugE8w9CCAqhXuJE3f375AJwCoX+nZIw1pc6FDIc6811mRlV2cFx+pwyv3wvF Z+PDSVzRFard3ViafhgFXv6CEB76ylvyEqkX72IjGlxjzXt8Wejbgx/ow+ub6xQd hSpThD11OUXCzg9qOo8keOlRaV1tdas= -----END CERTIFICATE-----Generated at Fri Oct 10 20:01:53 2025 by rpki-client