$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d08a5cf-3277-3703-9515-b5271bca93a5.roa File: 9d08a5cf-3277-3703-9515-b5271bca93a5.roa (raw, json) Hash identifier: GcqBh1Zbcd+vMJtifZAVrznoJ1GSRMMA74ftBvXJGX0= Subject key identifier: E9:76:B5:9B:C3:89:0E:93:A1:65:BB:41:89:99:FD:35:8A:70:12:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404C3AE8DE3A0B232FC8C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d08a5cf-3277-3703-9515-b5271bca93a5.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.20.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4c:3a:e8:de:3a:0b:23:2f:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=6bebe3aa-81b1-4b16-a394-fea0f172cd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:b9:0b:92:a0:5c:1d:c2:1a:ac:52:84:f7: a2:fe:ac:4d:9e:c3:4c:b6:ce:02:10:6c:87:40:f4: e2:f4:de:23:1e:8e:a5:54:3f:a1:bc:29:b9:37:36: f6:20:65:35:b6:18:e3:e0:60:f0:8c:61:5a:bc:dc: 09:35:08:1c:b4:ad:5d:90:3e:ec:ac:11:0b:f1:a4: c9:b1:fd:e4:fa:a4:e5:6c:de:13:5f:02:77:4a:f3: c2:9a:cd:bd:f8:50:1b:97:95:27:62:84:bc:2b:84: d0:82:43:20:3e:23:91:af:4a:02:c8:4e:56:c6:43: b8:1d:af:72:ce:13:36:aa:d9:b6:c8:b5:09:2f:05: d2:a7:2e:ce:18:b1:51:80:e8:05:b6:e2:f0:84:b0: b7:77:d1:3d:c7:98:a2:eb:62:ea:56:b0:32:8d:35: 0a:a9:b2:a1:c7:32:c6:ca:0e:21:a6:d2:73:be:c6: ea:e4:16:e5:01:2b:41:21:74:ea:09:1e:e8:5f:3e: b8:1b:a1:f1:95:29:7d:45:64:b3:98:48:30:4c:cf: 70:ca:8e:60:7b:7b:aa:68:ec:79:6d:54:c7:70:17: a5:04:c1:72:7f:d4:09:e4:9b:65:17:cd:6d:ef:e8: 4a:bb:2b:48:00:e6:5a:0c:d8:f9:b8:fb:fb:aa:8c: e1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:76:B5:9B:C3:89:0E:93:A1:65:BB:41:89:99:FD:35:8A:70:12:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d08a5cf-3277-3703-9515-b5271bca93a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:0c:5a:75:f7:a7:b8:81:cd:6d:e4:a0:7e:4d:b8:3f:8c:1b: c2:d6:95:d5:01:1c:93:fe:1d:91:4c:da:c1:98:fd:da:ee:42: 9e:fd:8d:0a:76:39:15:47:52:29:b5:31:e4:33:66:ad:f3:9f: 6a:67:3b:70:cb:7e:fe:ce:13:af:c6:f8:83:35:0d:b3:24:6a: 21:3a:82:91:35:fb:31:d1:f9:05:1e:0e:29:d2:63:a1:89:d6: 9f:91:e0:f6:fc:bf:0d:79:ce:82:24:6f:65:a2:90:5a:5f:d6: 3b:35:b3:ac:a4:5f:01:9a:e5:ee:d9:ac:b8:ce:65:95:07:10: 7c:25:69:54:9f:05:1e:07:52:b7:0e:30:ee:9c:7f:7a:4b:b2: 6c:5d:2a:7f:f0:19:bf:38:e6:e1:8d:2f:dc:2e:bd:8d:9b:1c: b2:00:d7:66:12:19:97:99:d1:13:a1:2c:0a:ab:6b:18:c3:2d: 3a:80:b1:eb:bd:64:9d:98:86:f9:c8:1b:e1:45:04:9a:b4:27: 2a:5e:fc:fb:dc:7d:fe:d4:b3:9c:76:a8:12:e7:09:4e:88:aa: 2b:08:cc:b0:14:a1:a4:1d:51:aa:e0:8c:a4:57:b9:c9:3f:c7: 9f:b2:5e:33:77:fb:e6:c5:35:8b:0e:8f:81:31:84:81:9d:03: 06:4a:57:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEw66N46CyMvyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NmJlYmUzYWEtODFiMS00YjE2LWEzOTQtZmVhMGYxNzJjZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLC5C5KgXB3CGqxShPei/qxNnsNMts4CEGyH QPTi9N4jHo6lVD+hvCm5Nzb2IGU1thjj4GDwjGFavNwJNQgctK1dkD7srBEL8aTJ sf3k+qTlbN4TXwJ3SvPCms29+FAbl5UnYoS8K4TQgkMgPiORr0oCyE5WxkO4Ha9y zhM2qtm2yLUJLwXSpy7OGLFRgOgFtuLwhLC3d9E9x5ii62LqVrAyjTUKqbKhxzLG yg4hptJzvsbq5BblAStBIXTqCR7oXz64G6HxlSl9RWSzmEgwTM9wyo5ge3uqaOx5 bVTHcBelBMFyf9QJ5JtlF81t7+hKuytIAOZaDNj5uPv7qozhYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOl2tZvDiQ6ToWW7QYmZ/TWKcBJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWQwOGE1Y2YtMzI3Ny0z NzAzLTk1MTUtYjUyNzFiY2E5M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEMWnX3p7iBzW3koH5NuD+MG8LWldUBHJP+HZFM2sGY/druQp79jQp2 ORVHUim1MeQzZq3zn2pnO3DLfv7OE6/G+IM1DbMkaiE6gpE1+zHR+QUeDinSY6GJ 1p+R4Pb8vw15zoIkb2WikFpf1js1s6ykXwGa5e7ZrLjOZZUHEHwlaVSfBR4HUrcO MO6cf3pLsmxdKn/wGb845uGNL9wuvY2bHLIA12YSGZeZ0ROhLAqraxjDLTqAseu9 ZJ2YhvnIG+FFBJq0Jype/Pvcff7Us5x2qBLnCU6IqisIzLAUoaQdUargjKRXuck/ x5+yXjN3++bFNYsOj4ExhIGdAwZKV9M= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:44 2025 by rpki-client