$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d70faa83-212f-34fc-9b4a-167e90a3d0ff.roa File: d70faa83-212f-34fc-9b4a-167e90a3d0ff.roa (raw, json) Hash identifier: I9GFgcM8s3licQI6kYu2K7HznZZpVlzCvdJB7wQ45xI= Subject key identifier: F1:EE:3D:8D:E1:F3:7B:C4:14:0C:A1:8B:AD:A8:7B:E2:9F:90:6B:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2A2C474DFF7AE727034BD100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d70faa83-212f-34fc-9b4a-167e90a3d0ff.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 98.21.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:47:4d:ff:7a:e7:27:03:4b:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=9ca668d2-c948-46a4-a5f1-61bcb4b21112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:ca:6b:30:9b:80:90:b2:bf:15:d2:db:46: 98:0c:7a:8d:ff:c9:de:c6:5a:ce:a4:ca:fd:2c:5e: 8a:1e:fe:af:3a:a1:ff:58:1a:30:cf:53:55:28:47: 45:53:90:db:c8:76:ce:d5:4f:8c:4f:25:26:3c:a2: 55:37:91:f5:a6:93:15:66:2b:d7:28:16:63:14:7e: 2b:d8:d7:a4:45:72:f8:3a:9f:02:de:bd:97:7c:17: 7b:40:5c:4a:7f:0d:31:e2:93:03:93:66:ec:66:43: bf:6e:47:e1:b0:c7:cb:93:24:70:19:31:d9:fd:b5: 3c:d2:56:df:e9:fa:74:1a:5c:c1:0c:ab:17:f6:c8: f6:4d:bf:34:bb:79:d3:08:a5:50:f8:a1:97:18:54: f1:03:d1:ae:29:38:2d:52:00:b4:ed:e0:b4:aa:75: e9:d1:f2:7b:d4:94:e6:fc:1b:89:62:5f:7b:84:21: 5e:0e:04:85:11:d7:39:24:7d:94:50:7e:44:ac:3d: 87:eb:b6:87:5a:c0:ea:90:65:e0:b7:3e:23:4a:aa: 74:97:48:9c:9c:8e:95:23:38:c6:61:0b:71:e4:5d: 2c:d5:5c:4a:80:91:ce:ff:60:c2:a6:58:54:90:cc: 80:01:78:39:86:cc:4e:7b:7a:43:6f:c4:33:cd:4b: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EE:3D:8D:E1:F3:7B:C4:14:0C:A1:8B:AD:A8:7B:E2:9F:90:6B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d70faa83-212f-34fc-9b4a-167e90a3d0ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:2f:a0:04:0e:ac:50:ea:07:d7:99:26:23:d3:2e:e9:6b:33: e7:ef:29:ff:0a:f9:60:5b:70:50:22:e2:eb:ae:4b:60:7a:44: f3:4c:e4:cd:39:41:78:b4:2c:a8:b2:4b:65:17:f3:23:f8:83: 52:e5:97:7d:8d:56:00:22:c2:9f:e3:53:fb:1c:45:cf:48:10: 9b:ca:de:55:5c:bc:7a:b7:84:f3:8e:28:02:51:ba:17:e9:cd: 0f:d2:7d:42:a8:eb:62:ae:9c:34:4c:0b:e9:9c:7e:c7:9a:30: 55:eb:5f:6d:78:3e:36:c5:7a:60:a0:ca:6d:ce:66:d6:ba:80: 33:33:8c:1f:e0:c0:a6:76:49:6e:b0:07:1d:44:91:28:87:ec: 1b:7c:0f:7c:14:a2:63:e2:89:10:0b:b3:a5:40:cd:4a:c0:f8: 77:c9:de:01:0f:44:9a:7a:b4:67:ff:cc:d4:86:29:9f:f1:1b: 52:db:f6:ff:74:a2:dc:bc:61:2a:12:83:9e:3a:61:e5:b2:e3: 75:a4:98:5c:a0:82:58:e8:97:2e:60:bb:17:04:10:7b:60:8f: fd:e6:e0:a8:38:88:b5:6a:b9:3f:ab:6c:20:ab:40:32:b3:4e: 6b:90:0b:a0:aa:a1:d1:68:6c:48:d1:00:9f:93:d6:19:a6:9e: 4f:c6:72:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEdN/3rnJwNL0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk OWNhNjY4ZDItYzk0OC00NmE0LWE1ZjEtNjFiY2I0YjIxMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3vKazCbgJCyvxXS20aYDHqN/8nexlrOpMr9 LF6KHv6vOqH/WBowz1NVKEdFU5DbyHbO1U+MTyUmPKJVN5H1ppMVZivXKBZjFH4r 2NekRXL4Op8C3r2XfBd7QFxKfw0x4pMDk2bsZkO/bkfhsMfLkyRwGTHZ/bU80lbf 6fp0GlzBDKsX9sj2Tb80u3nTCKVQ+KGXGFTxA9GuKTgtUgC07eC0qnXp0fJ71JTm /BuJYl97hCFeDgSFEdc5JH2UUH5ErD2H67aHWsDqkGXgtz4jSqp0l0icnI6VIzjG YQtx5F0s1VxKgJHO/2DCplhUkMyAAXg5hsxOe3pDb8QzzUv7LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHuPY3h83vEFAyhi62oe+KfkGugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDcwZmFhODMtMjEyZi0z NGZjLTliNGEtMTY3ZTkwYTNkMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhVnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMvoAQOrFDqB9eZJiPTLulrM+fvKf8K+WBbcFAi4uuuS2B6RPNM5M05 QXi0LKiyS2UX8yP4g1Lll32NVgAiwp/jU/scRc9IEJvK3lVcvHq3hPOOKAJRuhfp zQ/SfUKo62KunDRMC+mcfseaMFXrX214PjbFemCgym3OZta6gDMzjB/gwKZ2SW6w Bx1EkSiH7Bt8D3wUomPiiRALs6VAzUrA+HfJ3gEPRJp6tGf/zNSGKZ/xG1Lb9v90 oty8YSoSg546YeWy43WkmFyggljoly5guxcEEHtgj/3m4Kg4iLVquT+rbCCrQDKz TmuQC6CqodFobEjRAJ+T1hmmnk/GcrQ= -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:10 2025 by rpki-client