$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa File: 06397e4a-5944-3cf6-9cd6-202ce248026d.roa (raw, json) Hash identifier: op8xkwq4ezbuuMnsoq3rMQMOtK7gc6llHlyGUDvOrQU= Subject key identifier: 27:A3:6F:7D:30:C4:E6:6A:96:CF:33:27:B6:04:57:4B:92:BD:7A:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B7F52091D41D973C9B0C5E400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 98.20.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:09:1d:41:d9:73:c9:b0:c5:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=cfc792b5-7081-4625-ac7c-e9c6853d71c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:e5:c8:c2:eb:3e:0d:0a:1d:7e:de:fb:f5: 37:19:26:15:0e:e5:51:47:a2:b2:43:f7:eb:c1:a7: 67:30:d1:ee:c0:57:7a:10:64:9b:37:36:d6:0f:de: 5c:e1:f1:e6:d7:5d:9b:42:5a:18:6e:68:ef:ad:e1: 86:23:8b:37:8a:7f:de:57:50:92:62:74:0c:05:72: 06:e6:1f:d8:78:8a:c6:57:7d:7e:3b:5b:cd:5e:ca: 05:96:28:d3:3a:1d:42:83:dc:54:20:8f:ab:9b:6f: 74:61:9a:ad:3d:62:5f:a4:cf:ff:03:1d:cf:1d:58: 36:0f:b9:f4:74:d6:b8:33:ec:5d:7b:68:fd:6c:5f: 53:c6:7a:88:e2:68:e0:b0:ea:5e:74:b4:e7:74:c4: f1:ce:3b:ca:4b:55:95:af:b7:e6:2f:47:49:e1:e3: 9b:7b:58:e1:27:20:e3:b0:b3:11:b0:c1:e4:36:9f: 71:d8:9f:c1:63:05:7e:3b:5c:31:a9:b4:eb:e1:48: c5:cd:68:2f:d4:98:84:1c:5a:ac:f2:ce:22:0f:4d: 09:53:71:d8:63:8f:e3:9d:c8:14:18:4f:dc:bf:b9: d8:12:c3:83:fd:5c:c5:97:76:de:df:27:7f:33:25: 20:1c:9a:0c:bc:4f:9b:f7:2a:03:fc:9b:34:a0:d3: 8d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A3:6F:7D:30:C4:E6:6A:96:CF:33:27:B6:04:57:4B:92:BD:7A:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:17:bd:86:70:b2:35:19:2f:b7:4d:d0:b9:45:9d:0d:18:cc: 7c:17:c5:60:2b:63:8c:b8:b8:9e:8f:6d:3b:f8:bf:1a:f5:7a: 44:39:9b:f2:33:20:4d:e1:3b:d7:5b:b9:cd:29:b5:6b:4e:2e: 05:c0:08:f6:21:0b:24:d7:dc:a3:03:9e:5c:97:fa:d0:ab:85: 2d:84:cc:d9:85:2a:a3:5a:da:7e:57:b9:1a:98:c5:56:69:99: 79:5e:46:bc:35:1b:45:25:37:ae:b0:4e:e9:9e:47:ba:d1:fa: a0:dc:cb:d6:a5:21:6b:9c:12:f4:13:4c:0a:52:73:80:d9:da: cd:f9:a1:90:0e:97:1e:41:86:cd:a8:e9:1b:4d:ca:1b:20:20: 71:c2:b3:0b:01:a7:34:ca:24:c5:ac:8f:b3:c0:34:6e:44:ed: 78:64:ad:ec:44:31:46:ae:b5:09:9d:d5:8c:5a:89:6e:14:27: a3:a4:d1:90:3f:b7:c2:e8:ba:48:0f:0b:6c:af:de:42:e4:c0: f8:a5:9c:ca:83:15:33:56:71:d7:46:bb:a1:e2:0a:5b:e7:10: d3:9b:c6:57:d5:a5:e4:00:33:2c:ac:f5:8f:6e:9c:10:a7:79: 1f:da:04:8e:55:c5:c2:60:41:bd:06:a0:be:23:18:9c:af:14: c7:50:62:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UgkdQdlzybDF5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk Y2ZjNzkyYjUtNzA4MS00NjI1LWFjN2MtZTljNjg1M2Q3MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3nlyMLrPg0KHX7e+/U3GSYVDuVRR6KyQ/fr wadnMNHuwFd6EGSbNzbWD95c4fHm112bQloYbmjvreGGI4s3in/eV1CSYnQMBXIG 5h/YeIrGV31+O1vNXsoFlijTOh1Cg9xUII+rm290YZqtPWJfpM//Ax3PHVg2D7n0 dNa4M+xde2j9bF9TxnqI4mjgsOpedLTndMTxzjvKS1WVr7fmL0dJ4eObe1jhJyDj sLMRsMHkNp9x2J/BYwV+O1wxqbTr4UjFzWgv1JiEHFqs8s4iD00JU3HYY4/jncgU GE/cv7nYEsOD/VzFl3be3yd/MyUgHJoMvE+b9yoD/Js0oNONmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCejb30wxOZqls8zJ7YEV0uSvXouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDYzOTdlNGEtNTk0NC0z Y2Y2LTljZDYtMjAyY2UyNDgwMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhT+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYXvYZwsjUZL7dN0LlFnQ0YzHwXxWArY4y4uJ6PbTv4vxr1ekQ5m/Iz IE3hO9dbuc0ptWtOLgXACPYhCyTX3KMDnlyX+tCrhS2EzNmFKqNa2n5XuRqYxVZp mXleRrw1G0UlN66wTumeR7rR+qDcy9alIWucEvQTTApSc4DZ2s35oZAOlx5Bhs2o 6RtNyhsgIHHCswsBpzTKJMWsj7PANG5E7XhkrexEMUautQmd1YxaiW4UJ6Ok0ZA/ t8LoukgPC2yv3kLkwPilnMqDFTNWcddGu6HiClvnENObxlfVpeQAMyys9Y9unBCn eR/aBI5VxcJgQb0GoL4jGJyvFMdQYqw= -----END CERTIFICATE-----Generated at Mon Oct 20 10:03:05 2025 by rpki-client