$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcff4e4a-8176-31ac-868b-e22f3528e7e6.roa File: dcff4e4a-8176-31ac-868b-e22f3528e7e6.roa (raw, json) Hash identifier: RN/Y3a22yTeiTukAvmxbdc5fgGbM8SUYCMTwfDkQhM8= Subject key identifier: C7:7A:53:5D:CC:7D:04:BF:84:1B:4A:AC:78:55:22:44:9A:52:7F:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B970CFBD94D80CCAB12B4BC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcff4e4a-8176-31ac-868b-e22f3528e7e6.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 98.19.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:fb:d9:4d:80:cc:ab:12:b4:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=763237cd-4b83-4c06-bea4-fe936da7ba20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:11:0d:ab:ae:c5:62:6c:7a:f5:44:ff:a9: a7:6f:9a:cc:88:1e:87:b5:8f:81:de:bf:65:34:ef: 56:53:97:90:53:4a:7d:43:eb:82:95:f7:d6:df:4b: a7:a9:d9:c7:48:6e:45:ed:64:d8:62:8e:0b:ea:e9: 03:9b:40:c3:18:7f:88:d7:b8:1c:66:18:0b:53:59: 85:30:2d:2c:38:bf:ed:f2:b3:4d:eb:5f:b4:f9:a2: 99:e2:3d:be:34:ba:35:1c:69:ab:ca:0b:8e:98:23: 7c:a2:56:31:05:00:24:1c:4c:a1:17:01:ac:90:61: 7e:67:0d:dc:31:f8:5e:87:83:42:26:d1:6a:31:3e: 00:19:cc:91:96:16:39:85:98:b6:31:40:a4:ca:d8: 74:16:98:27:2f:82:0e:75:3f:09:0a:1e:b5:ee:28: 72:30:46:5f:b1:09:9e:3c:1d:13:9b:a7:63:c5:85: 73:f5:55:e9:a5:9c:53:fe:70:c0:0c:ee:37:da:d7: e9:74:46:cb:30:b3:9c:f2:9d:34:40:cd:ee:3c:b1: ae:f9:ca:65:03:7b:f9:0b:bc:e6:44:a2:9f:0e:1d: 49:69:c3:d3:39:a6:55:8e:b7:0f:ea:4f:b9:bc:d1: 85:39:7a:f6:61:d6:93:2b:0f:22:57:e4:4c:33:9a: 14:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7A:53:5D:CC:7D:04:BF:84:1B:4A:AC:78:55:22:44:9A:52:7F:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcff4e4a-8176-31ac-868b-e22f3528e7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f7:a3:ff:c2:a8:d0:65:e8:da:a4:92:6c:a1:92:63:e3:36: 59:18:7b:4c:c7:a8:06:59:2e:8b:0c:3f:ea:33:de:54:62:1f: 04:a1:b1:e0:af:af:81:9f:9c:73:52:21:fd:cf:11:85:c8:75: 35:59:12:0b:ea:13:fd:2b:a5:50:a4:43:90:d5:98:dd:e7:da: a0:62:73:ad:2d:aa:a6:31:64:1a:4a:18:68:37:6c:f9:49:f4: 25:c0:af:b5:ef:ed:8e:d5:7a:40:6f:78:0b:18:08:f0:d6:58: 7f:ac:04:70:58:b5:b5:f9:8c:01:2f:ed:b0:77:5e:5e:48:0b: bf:2e:7a:1b:d8:95:93:04:a4:7c:02:4d:ab:52:fd:75:77:0f: 6f:bf:8a:73:28:6b:de:90:7d:96:9c:29:20:5d:23:70:93:01: 49:54:e3:c1:7e:4a:8c:d3:27:9e:d1:38:37:d5:dd:e0:23:38: 93:b3:3e:ef:e9:c7:ae:c3:c5:43:f4:66:c9:5e:63:ee:a5:a4: 6c:d9:48:c8:c8:94:5b:51:50:35:99:b1:5e:06:3a:4e:c8:01: 3f:84:91:ba:2f:d2:20:0f:29:f0:b7:3c:e7:13:b7:b0:a2:d8: 52:19:32:a2:87:c7:70:f7:f2:61:7d:6a:e9:89:40:5e:75:0c: 5c:78:b3:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPvZTYDMqxK0vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NzYzMjM3Y2QtNGI4My00YzA2LWJlYTQtZmU5MzZkYTdiYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwgRDauuxWJsevVE/6mnb5rMiB6HtY+B3r9l NO9WU5eQU0p9Q+uClffW30unqdnHSG5F7WTYYo4L6ukDm0DDGH+I17gcZhgLU1mF MC0sOL/t8rNN61+0+aKZ4j2+NLo1HGmryguOmCN8olYxBQAkHEyhFwGskGF+Zw3c Mfheh4NCJtFqMT4AGcyRlhY5hZi2MUCkyth0FpgnL4IOdT8JCh617ihyMEZfsQme PB0Tm6djxYVz9VXppZxT/nDADO432tfpdEbLMLOc8p00QM3uPLGu+cplA3v5C7zm RKKfDh1JacPTOaZVjrcP6k+5vNGFOXr2YdaTKw8iV+RMM5oUvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd6U13MfQS/hBtKrHhVIkSaUn9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGNmZjRlNGEtODE3Ni0z MWFjLTg2OGItZTIyZjM1MjhlN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhNcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED3o//CqNBl6NqkkmyhkmPjNlkYe0zHqAZZLosMP+oz3lRiHwShseCv r4GfnHNSIf3PEYXIdTVZEgvqE/0rpVCkQ5DVmN3n2qBic60tqqYxZBpKGGg3bPlJ 9CXAr7Xv7Y7VekBveAsYCPDWWH+sBHBYtbX5jAEv7bB3Xl5IC78uehvYlZMEpHwC TatS/XV3D2+/inMoa96QfZacKSBdI3CTAUlU48F+SozTJ57RODfV3eAjOJOzPu/p x67DxUP0ZsleY+6lpGzZSMjIlFtRUDWZsV4GOk7IAT+Ekbov0iAPKfC3POcTt7Ci 2FIZMqKHx3D38mF9aumJQF51DFx4s7k= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:23 2025 by rpki-client