$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa File: a900db9d-6c9c-3739-b1a1-9441dc45040e.roa (raw, json) Hash identifier: 7obkYvB+wBsRxJTIAPkGaHCWYZR7z2bqL76FDmXO2PA= Subject key identifier: 45:51:7F:D3:A8:65:C6:21:27:26:49:89:86:AA:69:1A:E4:95:9C:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C58E36BAB4B2C2CB08F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 98.19.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:58:e3:6b:ab:4b:2c:2c:b0:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=3ab9736f-52ac-441b-adc5-dc4469f12440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:10:0b:ad:94:4b:47:49:ba:24:46:72:77: 30:ed:5b:fd:8f:4a:94:a6:18:9a:31:2a:67:7b:f4: b1:2e:e7:0b:45:aa:28:6e:d2:63:47:b3:36:00:4e: 7c:98:cb:34:7c:39:4e:53:ce:0c:02:20:17:89:31: 8d:26:16:4d:20:89:c0:ed:7d:42:7e:6f:7c:9c:28: f2:8b:0e:73:52:ee:fc:23:76:07:79:d4:a0:75:14: 79:71:43:e4:8a:39:a9:c7:86:f2:f3:e6:e3:82:e0: 8f:7d:41:79:7b:f8:b4:72:52:cc:4a:ab:68:60:16: 00:25:8b:f2:0c:b3:a7:07:40:b0:23:ba:ca:59:5a: 2b:d9:4f:3e:9f:f2:1d:b9:70:7f:4b:5f:05:fd:19: ad:81:55:f7:4e:ea:d0:2b:3a:85:54:4d:a3:e4:79: b7:9e:67:3c:62:e0:0b:21:0c:f0:15:a3:20:d8:c3: 29:3b:2f:a5:8e:df:7c:f9:19:38:a1:98:fa:5f:0e: aa:a2:c5:25:62:cc:22:fe:53:d2:f3:7c:7d:36:4a: 00:30:6f:58:2b:06:0b:b8:91:6c:af:d8:cf:4c:3b: 57:de:83:ae:6d:db:bc:9b:16:25:4a:f0:0b:e6:4f: 7e:a2:89:91:40:6e:8d:f7:66:01:af:56:36:2f:b5: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:51:7F:D3:A8:65:C6:21:27:26:49:89:86:AA:69:1A:E4:95:9C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:93:d0:26:07:93:13:92:e6:54:a7:d0:db:02:cc:d2:26:89: 8c:02:a1:43:9c:7c:a7:db:3e:bd:88:ef:c8:eb:fb:bd:92:e8: fa:1b:7a:c9:1d:49:7b:ca:1c:c1:76:6b:c9:f0:a1:b8:f6:2b: 93:e6:0c:48:2a:d8:5e:ec:20:a9:53:6a:83:2b:b7:e5:f8:93: fc:b1:d0:bb:54:59:7b:ef:75:87:d4:94:73:95:1e:3f:c7:ce: 55:a5:02:d1:ed:a8:83:cc:c0:2d:d6:a2:cf:8b:7a:af:2f:98: da:e4:17:c3:45:d0:1f:f3:8b:36:0f:fc:5a:4d:fd:b1:67:d8: 50:78:1f:9f:29:46:fa:32:91:5a:1d:40:e0:1a:ca:fe:ee:10: 47:8c:ea:b3:ec:1f:0c:a6:15:e0:8f:d6:68:fc:9d:88:0f:7a: b2:ef:3b:1e:3c:48:c0:4f:86:0d:89:2e:31:76:eb:9a:1d:4a: a5:a2:62:91:be:0b:d2:d5:07:ed:37:87:37:d0:a2:02:12:ef: 00:64:3a:73:1e:ca:36:0d:0c:7d:a4:4a:d2:05:86:17:83:3d: 89:4d:92:76:c6:0e:c9:63:9c:e1:ca:5a:a7:87:81:43:a1:01: 57:98:ed:05:b5:32:9b:04:de:d4:d6:6c:5c:40:ce:6d:b8:4c: a0:d8:de:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFjja6tLLCywj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk M2FiOTczNmYtNTJhYy00NDFiLWFkYzUtZGM0NDY5ZjEyNDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpcQC62US0dJuiRGcncw7Vv9j0qUphiaMSpn e/SxLucLRaoobtJjR7M2AE58mMs0fDlOU84MAiAXiTGNJhZNIInA7X1Cfm98nCjy iw5zUu78I3YHedSgdRR5cUPkijmpx4by8+bjguCPfUF5e/i0clLMSqtoYBYAJYvy DLOnB0CwI7rKWVor2U8+n/IduXB/S18F/RmtgVX3TurQKzqFVE2j5Hm3nmc8YuAL IQzwFaMg2MMpOy+ljt98+Rk4oZj6Xw6qosUlYswi/lPS83x9NkoAMG9YKwYLuJFs r9jPTDtX3oOubdu8mxYlSvAL5k9+oomRQG6N92YBr1Y2L7UFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVRf9OoZcYhJyZJiYaqaRrklZwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTkwMGRiOWQtNmM5Yy0z NzM5LWIxYTEtOTQ0MWRjNDUwNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJST0CYHkxOS5lSn0NsCzNImiYwCoUOcfKfbPr2I78jr+72S6Pobeskd SXvKHMF2a8nwobj2K5PmDEgq2F7sIKlTaoMrt+X4k/yx0LtUWXvvdYfUlHOVHj/H zlWlAtHtqIPMwC3Wos+Leq8vmNrkF8NF0B/zizYP/FpN/bFn2FB4H58pRvoykVod QOAayv7uEEeM6rPsHwymFeCP1mj8nYgPerLvOx48SMBPhg2JLjF265odSqWiYpG+ C9LVB+03hzfQogIS7wBkOnMeyjYNDH2kStIFhheDPYlNknbGDsljnOHKWqeHgUOh AVeY7QW1MpsE3tTWbFxAzm24TKDY3js= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:09 2025 by rpki-client