$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85384b2-fc8f-3f52-8f12-9ccad266f344.roa File: d85384b2-fc8f-3f52-8f12-9ccad266f344.roa (raw, json) Hash identifier: /J+/LpkwzgyyepMb2+wRdPsYV9ykOX1J1cKo/OOQj74= Subject key identifier: 77:00:FE:EE:C0:9E:43:93:1A:4E:73:18:1E:DF:69:66:ED:6C:B0:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C59084DE3F25D70268C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85384b2-fc8f-3f52-8f12-9ccad266f344.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 198.14.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:59:08:4d:e3:f2:5d:70:26:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=d1fadfbb-2510-4bfe-b848-b9948e37f69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:4c:2f:c9:97:dc:5a:74:57:c9:2d:fc:2a: b6:d2:b4:ee:69:67:e3:f4:ce:3b:9d:84:58:53:d0: c2:8b:0c:bc:c3:d8:23:2f:62:0f:bc:04:f0:89:52: e6:1e:33:19:1c:90:8a:66:b0:bf:3f:b1:85:7d:5e: 5d:19:98:58:e2:33:bd:24:f6:37:96:39:bb:f4:b8: d6:38:e3:83:33:4c:4f:0a:04:f1:61:df:79:e6:c7: 7d:0d:9e:ec:ac:b6:0b:ae:17:74:04:51:89:02:eb: 53:d3:ed:b3:12:d2:57:f8:c5:fd:b4:4e:c4:1d:b8: ba:f2:f7:7b:ca:00:cf:01:c3:3c:33:40:51:75:07: 18:0f:1e:0d:5f:37:44:45:15:2b:d4:13:10:48:ec: 5c:72:9a:11:f9:6a:58:2d:ba:b9:12:c2:1d:fe:ad: 01:17:73:fe:3c:11:80:db:27:11:6a:a2:1e:40:dd: ce:55:bb:d4:e2:45:6a:f3:02:2e:48:0d:b6:cb:78: 99:c3:07:f1:42:8a:a3:83:17:c7:c7:9c:d5:a2:43: 5c:28:1d:ad:3a:98:8b:71:f1:d9:aa:77:90:0c:ad: df:59:79:e6:6a:9a:12:70:76:53:cc:1e:5c:b4:f7: 3e:8a:a9:7d:b1:c0:12:11:78:cb:c9:ff:06:31:2e: 78:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:00:FE:EE:C0:9E:43:93:1A:4E:73:18:1E:DF:69:66:ED:6C:B0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85384b2-fc8f-3f52-8f12-9ccad266f344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.14.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7d:7b:f3:26:93:a2:5b:2a:af:88:76:1e:18:1c:7e:e5:ed: 4e:53:34:d6:46:9b:b9:3a:d9:33:e2:aa:0a:cb:9a:df:16:87: 33:ba:42:26:f3:2b:ff:18:c7:da:ad:42:16:21:e0:2d:36:a6: 33:9e:cd:df:af:23:01:73:f5:59:41:23:f2:81:f0:0e:92:93: 9e:92:4e:c9:57:82:c1:22:81:be:d8:49:d0:47:47:19:9a:f6: bb:25:10:79:77:f0:ab:62:23:85:e9:cd:5a:08:82:6c:6a:cc: 87:24:cf:de:8a:6b:b4:f0:77:fc:fa:16:bd:ac:1f:22:5d:d5: cc:0b:92:c0:42:75:76:74:53:72:b8:5e:4e:7c:b4:b4:83:0a: 5c:52:f7:c5:81:95:bc:b8:79:21:93:78:1b:f4:76:40:4b:11: a2:6f:3d:d3:d7:23:5e:e4:25:9b:5a:fc:22:7a:ad:38:a6:09: 15:ba:0e:0f:f1:80:3c:8d:f4:fa:8c:e7:0c:64:65:13:32:1a: 5d:59:ad:32:22:7a:6d:56:bf:ec:1c:07:91:76:05:b4:76:04: 8b:a6:55:3a:26:cb:14:d9:4b:9f:48:fb:14:56:f5:10:44:39: 60:f8:d4:31:ab:0d:74:ba:ff:27:3d:88:cd:23:59:14:e5:2c: 71:98:58:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFkITePyXXAmjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk ZDFmYWRmYmItMjUxMC00YmZlLWI4NDgtYjk5NDhlMzdmNjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaBML8mX3Fp0V8kt/Cq20rTuaWfj9M47nYRY U9DCiwy8w9gjL2IPvATwiVLmHjMZHJCKZrC/P7GFfV5dGZhY4jO9JPY3ljm79LjW OOODM0xPCgTxYd955sd9DZ7srLYLrhd0BFGJAutT0+2zEtJX+MX9tE7EHbi68vd7 ygDPAcM8M0BRdQcYDx4NXzdERRUr1BMQSOxccpoR+WpYLbq5EsId/q0BF3P+PBGA 2ycRaqIeQN3OVbvU4kVq8wIuSA22y3iZwwfxQoqjgxfHx5zVokNcKB2tOpiLcfHZ qneQDK3fWXnmapoScHZTzB5ctPc+iql9scASEXjLyf8GMS54ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcA/u7AnkOTGk5zGB7faWbtbLB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDg1Mzg0YjItZmM4Zi0z ZjUyLThmMTItOWNjYWQyNjZmMzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExg7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl9e/Mmk6JbKq+Idh4YHH7l7U5TNNZGm7k62TPiqgrLmt8WhzO6Qibz K/8Yx9qtQhYh4C02pjOezd+vIwFz9VlBI/KB8A6Sk56STslXgsEigb7YSdBHRxma 9rslEHl38KtiI4XpzVoIgmxqzIckz96Ka7Twd/z6Fr2sHyJd1cwLksBCdXZ0U3K4 Xk58tLSDClxS98WBlby4eSGTeBv0dkBLEaJvPdPXI17kJZta/CJ6rTimCRW6Dg/x gDyN9PqM5wxkZRMyGl1ZrTIiem1Wv+wcB5F2BbR2BIumVTomyxTZS59I+xRW9RBE OWD41DGrDXS6/yc9iM0jWRTlLHGYWLc= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:31 2025 by rpki-client