$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa File: d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa (raw, json) Hash identifier: wOo611KWPt6WDvg86ipOsez2hIjQ9Kvr1txgHP89GEk= Subject key identifier: 04:23:2F:24:FE:39:A5:68:2D:67:B5:E7:4A:94:E0:60:97:51:CC:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF71C83B115B2B3EF2280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 98.20.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f7:1c:83:b1:15:b2:b3:ef:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b3414993-c79c-49ad-b1f9-dd0ff0646ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:23:5f:e9:f1:d9:db:f9:e6:07:69:1d:da:e1: 82:ad:9b:4a:94:27:24:b7:ce:2a:54:8c:e4:3d:0b: b3:9a:bb:a3:f0:b8:a0:db:0e:b6:6e:73:2a:e4:98: c4:6f:5a:cd:39:a5:f5:8c:6b:54:56:24:b3:0d:c7: 90:40:92:f2:52:62:fb:15:66:b4:3f:36:48:ca:a3: e0:be:86:11:09:66:a7:b4:e0:17:ce:14:2f:b9:7f: d4:ff:16:50:a8:6b:3f:0f:70:78:47:6e:ba:81:49: 83:0f:ea:d3:cb:31:25:68:aa:e2:c3:28:10:35:26: fc:84:08:03:af:d1:ba:45:85:90:37:b2:fc:df:6b: b7:ed:0a:16:6f:79:63:db:07:84:ec:c0:35:b9:8f: e3:51:0a:a9:ab:35:3e:89:bb:1a:96:1a:a3:09:f3: 24:d3:73:0f:d2:0c:da:d4:e1:dd:70:45:ee:62:24: 65:58:8d:44:ae:3d:fe:fd:6d:81:98:d1:14:83:0e: ea:4d:fa:66:92:73:04:38:e2:d0:19:ce:a2:e8:dd: 63:8a:ac:b9:27:6d:ec:10:95:65:fd:61:4e:0d:65: 39:de:15:e8:69:bd:91:bc:0a:07:18:2c:b2:88:83: 35:c9:ef:ce:a6:29:a7:79:e3:55:9a:8f:28:bb:c8: fc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:23:2F:24:FE:39:A5:68:2D:67:B5:E7:4A:94:E0:60:97:51:CC:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a0:2e:f4:06:27:9c:c7:a0:7c:24:dc:b3:9e:e5:5b:0a:c7: cd:62:56:90:2a:9a:7b:40:68:f8:8c:93:c8:d3:96:77:91:2a: a2:98:b4:6d:6b:d9:51:77:a3:dc:2f:56:51:a9:db:b4:b9:3a: a7:47:d7:69:bf:70:5b:51:7f:83:97:c1:5c:72:40:f5:60:0c: 8c:d4:15:8f:ba:7c:1e:f8:ec:ff:f5:32:1b:b2:58:cc:b5:31: 56:80:31:e7:de:57:fd:0f:1a:9f:4c:c9:c6:c7:0c:8e:f8:3e: 11:ef:5e:13:33:ff:34:0a:94:6c:1a:aa:c2:8f:d5:c0:e0:4c: d3:fa:f1:f9:63:05:28:bf:8d:c7:90:0d:c4:73:33:56:85:26: 87:70:e6:ab:67:26:e8:2a:f2:ca:92:20:02:69:c5:dd:21:a2: be:ee:e5:5f:26:8b:90:28:77:34:64:6b:bf:86:7c:8b:6d:7c: b4:0a:e7:79:67:6d:54:25:1f:e0:e6:20:ae:f2:76:bf:40:d2: c5:d7:c7:c3:b2:4c:b4:6c:be:b1:fe:bd:4d:c4:d8:cf:55:b9: 0e:2c:90:c6:76:f4:34:27:80:07:0d:fc:b2:d5:24:66:83:0d: 24:25:c6:b2:93:e7:9f:b9:23:de:29:83:e2:5c:c3:35:c2:9f: 15:90:e5:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPccg7EVsrPvIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YjM0MTQ5OTMtYzc5Yy00OWFkLWIxZjktZGQwZmYwNjQ2Y2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiNf6fHZ2/nmB2kd2uGCrZtKlCckt84qVIzk PQuzmruj8Lig2w62bnMq5JjEb1rNOaX1jGtUViSzDceQQJLyUmL7FWa0PzZIyqPg voYRCWantOAXzhQvuX/U/xZQqGs/D3B4R266gUmDD+rTyzElaKriwygQNSb8hAgD r9G6RYWQN7L832u37QoWb3lj2weE7MA1uY/jUQqpqzU+ibsalhqjCfMk03MP0gza 1OHdcEXuYiRlWI1Erj3+/W2BmNEUgw7qTfpmknMEOOLQGc6i6N1jiqy5J23sEJVl /WFODWU53hXoab2RvAoHGCyyiIM1ye/OpimneeNVmo8ou8j87QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQjLyT+OaVoLWe150qU4GCXUcwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDYwOWQ3ZDEtODFlOC0z NzAzLTlhMTItYTZmOTdhMWJkNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYhQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACygLvQGJ5zHoHwk3LOe5VsKx81iVpAqmntAaPiMk8jTlneRKqKYtG1r 2VF3o9wvVlGp27S5OqdH12m/cFtRf4OXwVxyQPVgDIzUFY+6fB747P/1MhuyWMy1 MVaAMefeV/0PGp9MycbHDI74PhHvXhMz/zQKlGwaqsKP1cDgTNP68fljBSi/jceQ DcRzM1aFJodw5qtnJugq8sqSIAJpxd0hor7u5V8mi5AodzRka7+GfIttfLQK53ln bVQlH+DmIK7ydr9A0sXXx8OyTLRsvrH+vU3E2M9VuQ4skMZ29DQngAcN/LLVJGaD DSQlxrKT55+5I94pg+JcwzXCnxWQ5Ro= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:50 2025 by rpki-client