$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa File: f0d0f913-7559-3d06-ac30-36057e4c69cc.roa (raw, json) Hash identifier: trlBPsGQ59SmH88VpUinGJxkezEiuKeJFfM7WrnvNJg= Subject key identifier: 0A:04:89:94:8A:C9:22:19:FB:0D:70:AD:DC:31:38:6B:D4:33:B2:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA1029B7EEE21A79F5380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 98.20.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a1:02:9b:7e:ee:21:a7:9f:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=1cd47991-24ee-437a-80e8-0feaad5efe9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d6:ef:b5:2d:6c:55:9c:9b:b4:77:0f:c5:14: ce:99:60:38:33:c3:8f:e4:9e:58:c7:4f:e4:8e:78: 5c:4f:e3:5f:65:93:4b:90:1f:38:cd:67:30:fd:0f: 4b:ff:e6:a2:dd:66:86:90:64:e3:40:ba:9c:2b:18: b2:bd:84:1c:c0:55:ca:11:0f:d5:31:ac:5b:c0:76: de:94:d4:51:dc:7a:0d:2b:09:ec:e8:7b:e8:4e:3b: 39:af:25:aa:74:48:83:29:e6:b5:bc:b9:06:44:8a: 80:20:ba:69:8a:53:b4:45:78:01:75:51:8d:49:7b: bc:73:bf:d9:93:a7:6b:53:70:8d:93:47:c6:fe:d8: 7a:53:58:0d:7d:c2:f1:b9:3e:5a:5f:0d:f7:3e:53: ed:42:a6:23:a0:a1:14:fa:85:50:28:d0:8f:c7:64: 5c:bd:b0:31:c6:8a:ba:b5:70:bd:bd:a8:97:68:49: f1:c7:e5:2a:e8:a4:57:c0:83:dd:4f:6f:83:9a:e6: 84:70:40:36:d1:d1:0e:84:a8:9c:f9:93:0e:04:11: e7:2f:91:98:f6:3a:8d:82:83:d4:fa:44:6c:84:9b: 3a:a7:a3:ad:1a:40:21:d0:ca:11:43:6f:4d:f7:8c: b4:56:55:01:10:e4:82:03:50:a7:ca:65:75:12:9a: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:04:89:94:8A:C9:22:19:FB:0D:70:AD:DC:31:38:6B:D4:33:B2:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f0d0f913-7559-3d06-ac30-36057e4c69cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0e:2e:ab:a6:56:8a:eb:6c:f5:7e:f9:36:66:8f:f0:6d:25: e3:49:98:6d:64:49:90:71:b9:cd:14:57:9f:aa:da:9e:00:76: ec:61:15:b0:10:46:2e:55:78:5c:50:af:66:e5:64:72:72:53: c6:03:ee:07:14:2d:9f:47:8f:15:35:b3:77:48:79:e0:ec:bf: 13:14:d6:6e:d6:de:9c:aa:bb:90:56:64:a7:1b:09:c3:45:0a: 3f:35:1a:2b:a3:31:d4:98:44:8b:22:17:84:94:60:34:09:fa: 5e:d4:6e:2f:ff:75:bf:7c:9c:f5:27:6f:94:39:07:68:dc:0f: e6:12:23:80:18:bd:16:8c:7d:0c:f4:c6:84:c2:58:0b:e7:84: b6:70:3d:72:fe:79:f7:6e:5f:b4:a1:2d:8f:a9:24:ea:18:db: 69:9d:7b:4c:db:75:d2:36:07:3a:9a:f4:ae:a3:20:2c:ad:c8: fc:da:c2:25:07:cc:78:36:09:5c:44:9a:17:b3:d4:a8:b1:aa: 0d:8b:f8:7c:35:66:22:ee:0d:0d:fd:13:56:2b:73:21:fa:f0: b1:98:37:55:18:c5:85:94:17:86:e9:57:e6:4f:e6:23:c8:91: 81:82:43:84:17:46:51:9d:ff:cb:86:ae:e5:01:8f:e4:45:2d: 2e:d3:a1:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKECm37uIaefU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MWNkNDc5OTEtMjRlZS00MzdhLTgwZTgtMGZlYWFkNWVmZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdbvtS1sVZybtHcPxRTOmWA4M8OP5J5Yx0/k jnhcT+NfZZNLkB84zWcw/Q9L/+ai3WaGkGTjQLqcKxiyvYQcwFXKEQ/VMaxbwHbe lNRR3HoNKwns6HvoTjs5ryWqdEiDKea1vLkGRIqAILppilO0RXgBdVGNSXu8c7/Z k6drU3CNk0fG/th6U1gNfcLxuT5aXw33PlPtQqYjoKEU+oVQKNCPx2RcvbAxxoq6 tXC9vaiXaEnxx+Uq6KRXwIPdT2+DmuaEcEA20dEOhKic+ZMOBBHnL5GY9jqNgoPU +kRshJs6p6OtGkAh0MoRQ29N94y0VlUBEOSCA1CnymV1Epo6dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoEiZSKySIZ+w1wrdwxOGvUM7IoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjBkMGY5MTMtNzU1OS0z ZDA2LWFjMzAtMzYwNTdlNGM2OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAOLqumVorrbPV++TZmj/BtJeNJmG1kSZBxuc0UV5+q2p4AduxhFbAQ Ri5VeFxQr2blZHJyU8YD7gcULZ9HjxU1s3dIeeDsvxMU1m7W3pyqu5BWZKcbCcNF Cj81GiujMdSYRIsiF4SUYDQJ+l7Ubi//db98nPUnb5Q5B2jcD+YSI4AYvRaMfQz0 xoTCWAvnhLZwPXL+efduX7ShLY+pJOoY22mde0zbddI2Bzqa9K6jICytyPzawiUH zHg2CVxEmhez1Kixqg2L+Hw1ZiLuDQ39E1YrcyH68LGYN1UYxYWUF4bpV+ZP5iPI kYGCQ4QXRlGd/8uGruUBj+RFLS7ToeQ= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:40 2025 by rpki-client