$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44ddf1ae-54a4-3289-a3d1-497e50cc6caa.roa File: 44ddf1ae-54a4-3289-a3d1-497e50cc6caa.roa (raw, json) Hash identifier: LbO4bxXzmdk1vdLwvh2xGPkArGtzQHwcFj8eZnwJ1/8= Subject key identifier: 0A:6C:5F:F9:28:24:25:CE:1D:BE:44:CA:AF:D5:A7:7E:3C:F9:51:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3821AA3F79CBFAAC3EDA6440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44ddf1ae-54a4-3289-a3d1-497e50cc6caa.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 98.20.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:aa:3f:79:cb:fa:ac:3e:da:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=8cba3b9f-61eb-4062-94f0-7950b8396283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:67:e6:71:bf:a0:53:b6:ff:47:d7:f9:f5: c5:3f:b5:0a:b6:c2:a8:10:e5:0a:f4:da:b6:1d:08: a8:48:61:7d:c6:32:89:31:b6:e8:fa:87:bc:5f:cb: c6:f0:18:28:68:ba:52:17:b4:1f:fa:b6:8f:52:20: cf:74:9b:9d:ac:d8:66:54:57:88:49:d7:97:b8:55: 1b:94:ca:b1:ea:8c:21:67:d7:79:38:13:93:45:6e: 64:c6:63:e1:4b:72:26:33:83:3e:07:9e:41:e2:52: 95:d0:dd:d2:67:07:9c:dc:da:66:fd:23:a3:60:91: 6f:04:ad:fa:97:d2:41:04:0e:2c:d9:38:7c:54:ac: 43:b2:c1:5c:01:51:48:2e:83:3d:54:9c:ac:dc:0e: cf:c5:84:56:25:9b:32:dc:c9:14:11:96:55:96:86: 4f:d4:a9:25:7b:a8:46:40:22:c7:0a:f5:b6:2e:9d: c8:50:aa:a6:b7:fc:9e:65:a4:2e:74:b5:54:5c:e0: 96:1c:f6:80:31:ac:28:e2:0e:43:36:09:6a:3d:39: 0e:79:36:bc:d8:f8:c2:ca:8e:6f:49:26:f9:88:ff: ab:ef:17:78:f5:7f:1c:ae:4b:35:43:b4:29:c4:25: b7:6f:ab:e6:ac:78:2e:3d:a1:be:21:e8:af:92:a4: 68:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6C:5F:F9:28:24:25:CE:1D:BE:44:CA:AF:D5:A7:7E:3C:F9:51:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44ddf1ae-54a4-3289-a3d1-497e50cc6caa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8e:5f:78:ee:0e:3a:6b:8f:10:e5:64:30:ef:94:26:82:19: c3:72:44:2a:a7:6c:aa:92:ea:ee:78:c1:81:d6:f7:e8:88:de: 1d:48:a1:df:60:1d:10:96:1c:44:0b:95:ae:be:e3:62:2a:16: 19:3f:68:4a:1f:61:4f:17:70:f1:60:9e:dc:07:fa:ee:b6:7d: 81:0a:c0:f4:40:da:12:05:6f:ea:3f:f2:34:1f:65:79:66:fd: 3f:9b:af:2a:83:83:75:dc:c5:5a:60:17:d5:41:61:a7:d5:d2: 92:d4:0a:cd:8f:ad:21:c8:6c:d3:6c:99:1c:17:9e:8f:1f:af: e7:1e:a9:7e:af:20:96:e2:ca:f2:5a:b5:bc:ed:6f:95:09:8b: d7:c0:ac:37:e4:d2:00:87:c7:23:44:aa:52:6f:91:8f:17:51: 00:c1:b6:f7:78:66:e5:45:d7:d6:86:ba:6d:cf:4a:5d:e5:2f: e7:1d:a5:69:80:14:9c:56:d2:8d:79:57:a8:99:4e:d5:c1:3c: 16:de:ab:5b:7d:09:e8:cc:13:54:e9:5e:03:fa:20:30:58:be: a9:d4:df:5d:2a:2d:18:52:4c:67:a7:63:9a:ee:9a:86:cd:80: ff:0f:c4:c4:be:87:ca:7d:07:5f:a3:13:0d:23:c9:6b:f9:65: dd:3a:d4:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4Iao/ecv6rD7aZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk OGNiYTNiOWYtNjFlYi00MDYyLTk0ZjAtNzk1MGI4Mzk2MjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBRn5nG/oFO2/0fX+fXFP7UKtsKoEOUK9Nq2 HQioSGF9xjKJMbbo+oe8X8vG8BgoaLpSF7Qf+raPUiDPdJudrNhmVFeISdeXuFUb lMqx6owhZ9d5OBOTRW5kxmPhS3ImM4M+B55B4lKV0N3SZwec3Npm/SOjYJFvBK36 l9JBBA4s2Th8VKxDssFcAVFILoM9VJys3A7PxYRWJZsy3MkUEZZVloZP1Kkle6hG QCLHCvW2Lp3IUKqmt/yeZaQudLVUXOCWHPaAMawo4g5DNglqPTkOeTa82PjCyo5v SSb5iP+r7xd49X8crks1Q7QpxCW3b6vmrHguPaG+IeivkqRoRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApsX/koJCXOHb5Eyq/Vp348+VFCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDRkZGYxYWUtNTRhNC0z Mjg5LWEzZDEtNDk3ZTUwY2M2Y2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqOX3juDjprjxDlZDDvlCaCGcNyRCqnbKqS6u54wYHW9+iI3h1Iod9g HRCWHEQLla6+42IqFhk/aEofYU8XcPFgntwH+u62fYEKwPRA2hIFb+o/8jQfZXlm /T+bryqDg3XcxVpgF9VBYafV0pLUCs2PrSHIbNNsmRwXno8fr+ceqX6vIJbiyvJa tbztb5UJi9fArDfk0gCHxyNEqlJvkY8XUQDBtvd4ZuVF19aGum3PSl3lL+cdpWmA FJxW0o15V6iZTtXBPBbeq1t9CejME1TpXgP6IDBYvqnU310qLRhSTGenY5rumobN gP8PxMS+h8p9B1+jEw0jyWv5Zd061O8= -----END CERTIFICATE-----Generated at Tue Nov 4 16:58:53 2025 by rpki-client