$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cbcc6ffb-86ac-3e04-8f93-b750acbb8e59.roa File: cbcc6ffb-86ac-3e04-8f93-b750acbb8e59.roa (raw, json) Hash identifier: yKORYfoh3qsvZjmLMioQtFwx88saggJmOP8Feue+7xA= Subject key identifier: A6:3D:8C:BB:EE:A0:4B:F4:29:19:B5:D1:D4:05:F3:F8:17:40:AF:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC494DE7252896631C700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cbcc6ffb-86ac-3e04-8f93-b750acbb8e59.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 98.17.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c4:94:de:72:52:89:66:31:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=8b77443e-0f0a-4063-8aa6-70352278b3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:72:1c:5b:3d:e1:f4:7d:7d:f4:bd:0b:ad: 55:d0:3d:6d:df:36:ee:b9:72:2e:1f:4c:13:61:a6: a4:7a:bd:c7:fe:97:a4:e3:db:b9:66:58:a7:d0:9a: 78:99:f5:f7:a3:1e:f8:38:91:9c:4e:4a:cb:74:8f: ec:0b:cc:ec:f7:f5:9a:c0:2c:c5:19:63:00:6b:79: c6:57:46:2d:9d:9c:ba:0c:fa:a2:cd:ce:18:e1:fc: fe:e4:34:c1:e4:9d:2d:32:19:5b:3a:58:8c:e4:ef: d1:9c:3e:3c:2d:4d:86:26:f5:5d:3e:2e:2b:8c:de: 5c:7b:d9:ed:a5:9b:01:c9:81:dd:61:88:23:83:04: 2d:c4:ca:3b:4c:8e:ae:f9:22:f2:3e:75:09:d1:29: 8d:79:e8:21:5c:eb:bc:9f:33:42:fe:cd:d9:2f:06: aa:01:db:a3:20:26:f4:bf:4b:1e:79:e2:49:2d:a9: 46:62:02:4f:8f:41:fe:ad:a2:1e:c8:26:6f:c1:8e: bc:3e:52:e5:f5:08:83:d5:ed:c8:4e:c7:ce:59:19: a8:93:c0:91:8e:63:7c:d6:fe:14:bb:da:61:2b:c4: af:7a:57:fd:9c:f6:77:7d:fa:2a:ab:42:06:a3:6f: a9:ba:66:f5:fe:1c:97:e9:f4:f3:4d:56:f9:4c:d1: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3D:8C:BB:EE:A0:4B:F4:29:19:B5:D1:D4:05:F3:F8:17:40:AF:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cbcc6ffb-86ac-3e04-8f93-b750acbb8e59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d6:f8:24:ad:eb:4b:cd:6d:bc:da:01:08:a0:b4:7a:2c:15: 74:da:ee:e1:7e:0a:bf:df:e5:ee:9d:13:95:8d:b5:28:1d:d6: 45:cc:7c:8c:78:c4:0f:3d:51:a4:aa:c0:74:e4:1c:72:57:04: 20:3b:23:50:20:d6:6d:27:b6:a3:fa:92:57:90:76:13:4b:5a: 6d:16:46:dc:b8:ef:33:a4:ff:c6:9a:ec:09:6a:bf:16:5e:21: 42:43:14:bd:85:93:d5:f8:8e:15:82:94:ed:66:7e:ff:b2:e7: 95:ff:89:e5:e3:1f:ba:35:08:85:56:9d:2e:45:f7:81:70:1f: 3b:b7:1b:88:e5:0c:09:fd:28:9b:b2:26:a9:6c:c6:a4:6b:0f: ba:6e:50:14:22:04:ba:a6:ef:d0:73:56:f4:a1:aa:41:47:8c: f4:c5:90:5b:aa:dc:4d:62:b2:33:ab:5f:69:18:44:18:81:6f: 4d:d8:ef:50:a1:ca:50:c4:2e:ed:4e:54:7e:66:64:d4:01:1f: 14:57:0e:84:ca:70:4b:d4:b0:c1:48:75:96:41:08:ec:67:1a: 6d:c2:e3:bc:00:1d:77:60:38:b0:87:fe:ab:8d:eb:fb:4f:6d: 28:77:5a:4f:cc:aa:55:24:89:45:6e:b1:ff:e8:b1:47:9e:53: 62:96:8c:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMSU3nJSiWYxxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OGI3NzQ0M2UtMGYwYS00MDYzLThhYTYtNzAzNTIyNzhiM2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOlyHFs94fR9ffS9C61V0D1t3zbuuXIuH0wT Yaaker3H/pek49u5Zlin0Jp4mfX3ox74OJGcTkrLdI/sC8zs9/WawCzFGWMAa3nG V0YtnZy6DPqizc4Y4fz+5DTB5J0tMhlbOliM5O/RnD48LU2GJvVdPi4rjN5ce9nt pZsByYHdYYgjgwQtxMo7TI6u+SLyPnUJ0SmNeeghXOu8nzNC/s3ZLwaqAdujICb0 v0seeeJJLalGYgJPj0H+raIeyCZvwY68PlLl9QiD1e3ITsfOWRmok8CRjmN81v4U u9phK8Svelf9nPZ3ffoqq0IGo2+pumb1/hyX6fTzTVb5TNGt0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKY9jLvuoEv0KRm10dQF8/gXQK/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2JjYzZmZmItODZhYy0z ZTA0LThmOTMtYjc1MGFjYmI4ZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbW+CSt60vNbbzaAQigtHosFXTa7uF+Cr/f5e6dE5WNtSgd1kXMfIx4 xA89UaSqwHTkHHJXBCA7I1Ag1m0ntqP6kleQdhNLWm0WRty47zOk/8aa7AlqvxZe IUJDFL2Fk9X4jhWClO1mfv+y55X/ieXjH7o1CIVWnS5F94FwHzu3G4jlDAn9KJuy JqlsxqRrD7puUBQiBLqm79BzVvShqkFHjPTFkFuq3E1isjOrX2kYRBiBb03Y71Ch ylDELu1OVH5mZNQBHxRXDoTKcEvUsMFIdZZBCOxnGm3C47wAHXdgOLCH/quN6/tP bSh3Wk/MqlUkiUVusf/osUeeU2KWjDo= -----END CERTIFICATE-----Generated at Fri Oct 10 17:50:45 2025 by rpki-client