$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e71b1fdf-884d-3f18-9efb-4a4e95157eee.roa File: e71b1fdf-884d-3f18-9efb-4a4e95157eee.roa (raw, json) Hash identifier: 6UditDTqEkW/wVcmCjBVImZfzPDzQ+k4O9Uzt0FM+EI= Subject key identifier: B5:0F:BA:79:6C:EA:A8:B5:39:28:A6:50:F0:70:D2:1D:D8:B1:4C:A3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3821B09EA230C6E63C13BD30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e71b1fdf-884d-3f18-9efb-4a4e95157eee.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 98.20.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:b0:9e:a2:30:c6:e6:3c:13:bd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=817fdff4-d181-4e40-84ad-620d7bd3738e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d2:39:42:f0:28:41:11:8e:54:5b:54:0b:25: 90:79:ca:3c:a4:00:c3:fb:77:a8:cf:09:36:7a:b0: 34:21:e0:6e:d9:f3:76:94:83:75:8d:1b:22:5f:c8: c9:d6:99:bf:0b:98:d1:8a:47:2b:c8:ee:ae:06:a9: 09:eb:3c:ef:5f:e9:cb:f5:b1:89:48:95:e3:b3:4e: af:00:cf:d0:ac:f4:bf:12:b4:3b:b9:5e:c5:64:cd: 01:99:21:fb:68:af:16:51:e5:48:fd:28:e3:dc:b4: 9b:93:8e:a1:c5:9e:07:72:5a:ec:6b:20:61:55:c2: 04:4d:f8:24:75:c7:31:a9:94:a0:63:26:a7:29:2e: 18:1b:cd:20:0e:3d:de:28:8c:05:87:02:7f:1b:34: 94:19:be:a8:60:cc:bc:10:9f:ff:53:6c:10:89:87: 3f:31:61:1d:74:4a:d6:1a:4e:80:02:1a:3b:82:57: c3:44:22:6c:e0:83:cc:75:46:17:22:fa:3c:00:d3: db:64:4f:3a:00:94:98:a6:27:04:3d:ea:2f:08:2a: a6:ea:36:eb:dd:f2:af:12:5c:58:be:ec:b3:72:27: 42:ac:bb:cf:4f:c4:b3:a3:3d:ad:d7:49:3a:14:d4: f1:6b:be:ef:53:eb:32:14:04:b0:4e:be:c0:0c:8f: d1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0F:BA:79:6C:EA:A8:B5:39:28:A6:50:F0:70:D2:1D:D8:B1:4C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e71b1fdf-884d-3f18-9efb-4a4e95157eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:55:66:cf:f1:99:7b:e1:a9:ea:bc:ba:eb:76:87:bc:2e:dd: 7a:77:99:1b:d1:d7:22:06:65:c4:6a:50:4c:68:bc:0a:af:b0: 3e:87:dd:c4:e5:a0:f1:77:43:dc:62:3f:64:67:71:73:84:a5: 87:6a:c9:ab:7c:c5:a7:87:a8:fe:a1:2a:a5:e3:0b:cf:fe:ee: c2:8b:a0:f3:fc:f3:73:70:2d:65:ac:4f:a2:0f:16:48:68:c6: 11:54:f6:95:0c:e8:fb:0e:be:d5:ce:ed:30:9e:13:84:85:c4: 73:4f:30:a7:35:d1:90:e5:ba:3e:b8:e4:d1:e0:9a:5f:2c:27: 9a:95:09:4d:11:83:e5:85:6b:c8:1a:c4:d8:f2:17:1a:81:db: 54:7b:8f:74:16:f4:0b:6c:cd:80:e6:69:ae:97:5d:6a:3f:08: 65:c1:03:89:e7:5a:7e:da:30:8c:f7:3e:67:cc:8d:b2:8b:ca: 98:1f:f4:eb:cd:37:1e:17:76:e1:65:d2:d6:10:b8:f5:f0:c0: e0:6a:4e:75:03:fe:16:0a:9b:83:d1:78:01:e5:20:9e:d6:12: 05:86:5f:4e:e2:d4:b4:87:9c:af:fd:86:72:fb:d6:20:17:81: 94:3e:38:d1:60:c9:98:7f:75:4f:95:21:a7:23:b4:8a:51:69: 91:43:1b:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IbCeojDG5jwTvTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ODE3ZmRmZjQtZDE4MS00ZTQwLTg0YWQtNjIwZDdiZDM3MzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktI5QvAoQRGOVFtUCyWQeco8pADD+3eozwk2 erA0IeBu2fN2lIN1jRsiX8jJ1pm/C5jRikcryO6uBqkJ6zzvX+nL9bGJSJXjs06v AM/QrPS/ErQ7uV7FZM0BmSH7aK8WUeVI/Sjj3LSbk46hxZ4HclrsayBhVcIETfgk dccxqZSgYyanKS4YG80gDj3eKIwFhwJ/GzSUGb6oYMy8EJ//U2wQiYc/MWEddErW Gk6AAho7glfDRCJs4IPMdUYXIvo8ANPbZE86AJSYpicEPeovCCqm6jbr3fKvElxY vuyzcidCrLvPT8Szoz2t10k6FNTxa77vU+syFASwTr7ADI/RYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUPunls6qi1OSimUPBw0h3YsUyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTcxYjFmZGYtODg0ZC0z ZjE4LTllZmItNGE0ZTk1MTU3ZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRVZs/xmXvhqeq8uut2h7wu3Xp3mRvR1yIGZcRqUExovAqvsD6H3cTl oPF3Q9xiP2RncXOEpYdqyat8xaeHqP6hKqXjC8/+7sKLoPP883NwLWWsT6IPFkho xhFU9pUM6PsOvtXO7TCeE4SFxHNPMKc10ZDluj645NHgml8sJ5qVCU0Rg+WFa8ga xNjyFxqB21R7j3QW9AtszYDmaa6XXWo/CGXBA4nnWn7aMIz3PmfMjbKLypgf9OvN Nx4XduFl0tYQuPXwwOBqTnUD/hYKm4PReAHlIJ7WEgWGX07i1LSHnK/9hnL71iAX gZQ+ONFgyZh/dU+VIacjtIpRaZFDG+w= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:39 2025 by rpki-client