$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8294649c-0760-3b78-8cfe-93bffb3d0231.roa File: 8294649c-0760-3b78-8cfe-93bffb3d0231.roa (raw, json) Hash identifier: VdtNsAxLScUxfpoXRFmcRm4rGreXLPC28bwUTGO3A5w= Subject key identifier: 54:85:91:08:1D:6C:FA:69:77:DA:BC:35:DA:0C:5D:BC:D9:7B:4E:BB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE405368A89D7D2020E10880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8294649c-0760-3b78-8cfe-93bffb3d0231.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.16.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:53:68:a8:9d:7d:20:20:e1:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=6c41eccb-529e-40b2-8a4f-c7d550f5935d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:02:ce:e0:0a:1b:a9:85:9a:41:96:33:8c: a3:88:9a:19:1a:b8:d0:95:50:f5:66:60:42:d0:f0: df:f1:33:1c:d9:7b:41:67:49:9e:8e:81:ad:94:54: 77:ab:45:12:27:16:d8:a0:4a:32:8c:96:50:74:00: fe:52:31:c9:ad:d3:d5:ac:eb:73:09:2e:ce:1b:b4: b4:41:d1:a9:17:c0:3c:d3:04:86:6e:92:27:e8:22: 89:bf:27:0a:bb:69:f9:8a:dc:af:0c:2d:5a:a8:ca: 51:b9:7a:49:de:07:7e:25:fa:9a:5a:00:c4:ae:8d: 38:f6:73:6b:40:f4:2f:6e:88:a6:5b:6b:6a:57:f3: b6:64:35:ac:06:96:71:bc:30:3e:96:f2:76:51:57: cd:04:62:b5:89:c2:04:1f:d8:e2:1b:83:bc:6f:09: db:24:d9:5a:a0:43:11:10:ac:9e:88:4a:41:29:52: a1:56:d7:77:29:d3:0b:99:76:c6:98:6a:e8:01:87: bf:54:9a:18:4a:64:2b:00:26:a9:0e:b6:37:0a:08: f3:d1:a6:46:79:8c:a4:b1:d2:71:a8:72:bc:57:40: 76:25:87:1e:98:6f:25:e1:e5:45:58:8d:27:6d:c3: c3:49:4e:b1:0e:80:59:9d:1f:fd:4c:b1:99:00:a6: 44:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:85:91:08:1D:6C:FA:69:77:DA:BC:35:DA:0C:5D:BC:D9:7B:4E:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8294649c-0760-3b78-8cfe-93bffb3d0231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:75:e0:bd:ae:fb:c1:ce:2c:c0:d6:6d:b6:ee:5c:e1:0b:27: 0a:16:d7:b7:fb:68:7e:8a:e1:3f:ad:9d:33:49:5f:b1:42:ad: 69:4d:ad:5d:a1:b2:cb:ff:d6:06:bb:89:17:f9:b4:0f:af:77: 50:9c:52:0b:9c:e3:42:f2:93:ba:42:5f:66:d6:19:b4:b3:97: a7:3e:62:59:fd:b5:48:59:97:b4:85:37:e6:41:ee:a0:b3:4a: e7:01:b3:88:57:29:e2:d3:45:9a:f2:09:31:8f:4e:e3:97:3f: 5b:a7:91:46:06:19:ca:6f:82:c7:fe:2e:e0:96:14:95:1f:19: 60:8a:8b:99:eb:a5:7d:58:2d:ef:7f:a4:0f:6e:af:e1:f6:ce: db:b6:bf:fb:2b:ea:3a:7d:f3:b2:0f:4c:7e:0c:0b:c3:24:51: 08:38:f3:a4:13:e4:08:3b:13:6b:33:cf:ee:da:c2:19:9a:7d: d7:f6:ce:7d:01:c8:dd:90:15:a1:f3:d7:f1:22:0e:a5:30:37: a5:34:f9:4a:fb:aa:9c:68:2c:c5:aa:22:65:d5:97:b5:77:d9: 81:3c:05:57:1d:ae:b6:81:3d:cf:e6:0e:86:c1:33:31:b9:bf: af:27:03:00:97:3d:98:a7:c2:df:18:24:60:de:99:41:ea:0b: 51:82:4a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFNoqJ19ICDhCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NmM0MWVjY2ItNTI5ZS00MGIyLThhNGYtYzdkNTUwZjU5MzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm0CzuAKG6mFmkGWM4yjiJoZGrjQlVD1ZmBC 0PDf8TMc2XtBZ0mejoGtlFR3q0USJxbYoEoyjJZQdAD+UjHJrdPVrOtzCS7OG7S0 QdGpF8A80wSGbpIn6CKJvycKu2n5ityvDC1aqMpRuXpJ3gd+JfqaWgDEro049nNr QPQvboimW2tqV/O2ZDWsBpZxvDA+lvJ2UVfNBGK1icIEH9jiG4O8bwnbJNlaoEMR EKyeiEpBKVKhVtd3KdMLmXbGmGroAYe/VJoYSmQrACapDrY3Cgjz0aZGeYyksdJx qHK8V0B2JYcemG8l4eVFWI0nbcPDSU6xDoBZnR/9TLGZAKZEzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSFkQgdbPppd9q8NdoMXbzZe067MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODI5NDY0OWMtMDc2MC0z Yjc4LThjZmUtOTNiZmZiM2QwMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl14L2u+8HOLMDWbbbuXOELJwoW17f7aH6K4T+tnTNJX7FCrWlNrV2h ssv/1ga7iRf5tA+vd1CcUguc40Lyk7pCX2bWGbSzl6c+Yln9tUhZl7SFN+ZB7qCz SucBs4hXKeLTRZryCTGPTuOXP1unkUYGGcpvgsf+LuCWFJUfGWCKi5nrpX1YLe9/ pA9ur+H2ztu2v/sr6jp987IPTH4MC8MkUQg486QT5Ag7E2szz+7awhmafdf2zn0B yN2QFaHz1/EiDqUwN6U0+Ur7qpxoLMWqImXVl7V32YE8BVcdrraBPc/mDobBMzG5 v68nAwCXPZinwt8YJGDemUHqC1GCSvA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:51 2025 by rpki-client