$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa File: 5c4d4390-cf6b-3694-845f-b3f976f482a7.roa (raw, json) Hash identifier: UcTZyZtCmto+N2hF5qlOl+3Ufp13nt70tAJGgKq3lsY= Subject key identifier: 0A:DE:71:9D:DB:EB:A0:B5:B2:F9:BC:E2:37:49:C6:37:AC:1F:34:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CC4FB52F607B3CAA89400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 98.20.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:c4:fb:52:f6:07:b3:ca:a8:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=33fa7f9b-8fc1-4320-8242-a6e85a575e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:09:0e:c8:da:c6:44:52:99:d8:87:34:be:18: 7f:b2:14:1b:23:af:ec:ed:fd:3e:1e:bd:cd:00:0d: 6f:02:32:4e:ea:66:4a:55:40:c9:c7:0b:ee:16:de: 98:24:4a:c7:a1:db:f3:4c:2b:81:ab:8c:71:84:cd: b5:17:d8:3f:f0:e3:ea:ce:85:63:b1:38:1e:41:6b: dc:11:93:81:44:0c:61:61:34:bc:9c:c3:fc:fd:1d: 69:3c:ce:73:82:6e:de:a1:63:b5:f5:d3:75:d1:ef: f5:42:1b:ff:dc:51:8e:cd:17:b5:e8:57:56:51:9c: 16:a7:2e:16:58:e9:63:e7:63:e7:f4:b7:94:a3:50: 81:6a:f6:b5:80:15:a7:46:80:9e:85:cc:c7:d1:af: 29:f2:de:d3:c8:50:c9:ab:c9:97:99:37:73:2e:71: 52:9a:39:d8:11:64:68:49:a5:8b:9b:1f:51:80:e5: 14:49:ef:47:23:62:6b:3b:f1:4f:b1:77:f2:85:cf: ce:d7:a0:40:61:fd:d7:97:cb:c8:cc:c0:08:ca:cd: b1:56:7f:b1:26:00:07:72:57:a7:e4:38:26:e8:91: 62:74:f5:90:c8:3e:10:86:87:ad:34:47:49:a1:64: 6a:42:ee:59:ef:d1:6d:7e:0f:60:31:83:69:52:61: ef:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DE:71:9D:DB:EB:A0:B5:B2:F9:BC:E2:37:49:C6:37:AC:1F:34:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ca:16:4a:3d:12:1f:81:7f:bc:e9:ec:92:42:91:35:db:11: 92:ae:c0:d8:e5:ba:03:4b:12:c2:e2:28:41:78:25:2d:41:01: 7b:dd:de:97:05:c1:de:14:14:9a:d5:4c:72:0f:d7:11:db:7f: 68:bc:da:15:32:ef:b3:ee:2e:39:cd:74:31:b3:05:bd:d8:df: 3b:0b:f4:aa:19:5d:5a:9d:5b:77:51:54:5c:5f:a8:5f:ba:c2: f3:6a:3e:85:86:85:5f:ec:2a:be:7f:21:56:79:8b:bf:25:40: a8:e7:3b:64:b4:eb:75:8d:a4:2b:f4:70:52:ce:24:3e:b5:7b: 7a:22:0e:9b:8f:6c:4a:27:2d:ea:dc:c0:65:b9:c1:b3:ed:fc: 71:0c:4e:b2:8c:02:43:68:1d:26:f8:ba:43:22:1c:2c:f4:97: 3c:1b:58:ab:33:61:0a:22:94:6e:87:b8:ce:1d:47:e7:a3:1d: f4:a4:01:09:79:d6:72:ef:9d:e4:1f:8a:37:2e:e8:a8:3e:2d: 98:f7:85:3d:12:db:5d:b3:df:92:d6:cf:dd:1b:96:a0:e0:b3: 82:13:9e:f0:b4:26:1c:8f:0d:1b:ec:3d:85:b0:f7:be:72:b1: c3:69:60:30:f4:8a:1c:f2:06:b3:62:5f:0b:d7:66:24:c9:fa: db:84:fc:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXMT7UvYHs8qolAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MzNmYTdmOWItOGZjMS00MzIwLTgyNDItYTZlODVhNTc1ZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAkOyNrGRFKZ2Ic0vhh/shQbI6/s7f0+Hr3N AA1vAjJO6mZKVUDJxwvuFt6YJErHodvzTCuBq4xxhM21F9g/8OPqzoVjsTgeQWvc EZOBRAxhYTS8nMP8/R1pPM5zgm7eoWO19dN10e/1Qhv/3FGOzRe16FdWUZwWpy4W WOlj52Pn9LeUo1CBava1gBWnRoCehczH0a8p8t7TyFDJq8mXmTdzLnFSmjnYEWRo SaWLmx9RgOUUSe9HI2JrO/FPsXfyhc/O16BAYf3Xl8vIzMAIys2xVn+xJgAHclen 5Dgm6JFidPWQyD4QhoetNEdJoWRqQu5Z79Ftfg9gMYNpUmHvEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArecZ3b66C1svm84jdJxjesHzQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWM0ZDQzOTAtY2Y2Yi0z Njk0LTg0NWYtYjNmOTc2ZjQ4MmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHKFko9Eh+Bf7zp7JJCkTXbEZKuwNjlugNLEsLiKEF4JS1BAXvd3pcF wd4UFJrVTHIP1xHbf2i82hUy77PuLjnNdDGzBb3Y3zsL9KoZXVqdW3dRVFxfqF+6 wvNqPoWGhV/sKr5/IVZ5i78lQKjnO2S063WNpCv0cFLOJD61e3oiDpuPbEonLerc wGW5wbPt/HEMTrKMAkNoHSb4ukMiHCz0lzwbWKszYQoilG6HuM4dR+ejHfSkAQl5 1nLvneQfijcu6Kg+LZj3hT0S212z35LWz90blqDgs4ITnvC0JhyPDRvsPYWw975y scNpYDD0ihzyBrNiXwvXZiTJ+tuE/AY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:58:52 2025 by rpki-client