$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a1230a7-6e54-30e8-973b-fddf6cdb9b0a.roa File: 2a1230a7-6e54-30e8-973b-fddf6cdb9b0a.roa (raw, json) Hash identifier: fcmZortt6AjkRBz0IHdMMlEMy1Aik4yKgRPO/Mu+bfM= Subject key identifier: 4D:22:DE:A4:DA:6C:35:6F:A8:D9:27:3D:A6:2B:A5:16:F2:95:C9:FF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD8943D60C6B09904D8B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a1230a7-6e54-30e8-973b-fddf6cdb9b0a.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 98.18.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:89:43:d6:0c:6b:09:90:4d:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=4ab41564-da9d-4289-966b-cfd412efa300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dc:86:91:bd:2d:5a:d3:0f:f4:df:92:64:15: 86:9d:68:c3:01:2f:4c:a0:43:be:ce:b9:53:64:f5: 16:6e:99:a6:d2:1d:73:d0:56:ef:94:04:aa:b2:0a: 98:af:a3:50:7c:99:2d:30:9a:17:8c:57:8d:fe:23: e1:01:da:b5:cd:17:1a:84:8d:0e:84:0b:0b:45:77: f0:2c:79:ce:33:ac:7c:30:b1:66:a2:1c:15:60:82: 03:1b:a2:80:93:fb:21:f9:2d:9e:85:25:7e:2c:5c: 58:db:a7:69:69:90:54:57:f9:b4:d7:52:a2:0b:c4: 5f:61:b6:d4:6a:40:0f:27:d7:e0:a6:d2:8b:6c:c7: 4d:08:ad:44:b8:f2:4d:70:bf:e2:81:6f:bf:df:ac: ce:5e:5d:c2:d3:59:fb:50:5e:ef:53:c0:18:55:ad: 11:2f:16:ca:9f:56:c2:de:bc:aa:e2:f3:e7:25:23: 89:d9:a7:9a:66:26:94:ef:b0:9b:06:60:9c:a4:0e: a8:a4:0a:5f:1e:fe:e5:e5:c1:b3:8d:a5:7c:82:d5: 15:50:2c:91:b3:e3:00:65:f1:56:ea:99:55:47:6e: 7f:be:84:88:54:69:5b:e6:e3:ed:76:f5:d7:8b:d0: 3f:73:c3:b6:a7:18:51:99:5b:26:35:d5:df:db:a3: 75:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:22:DE:A4:DA:6C:35:6F:A8:D9:27:3D:A6:2B:A5:16:F2:95:C9:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a1230a7-6e54-30e8-973b-fddf6cdb9b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:65:c2:92:28:5f:79:97:ef:64:2e:9c:f9:19:23:fb:5f:7c: 10:df:8e:de:46:33:b5:3a:92:29:b0:bc:75:3b:b7:5a:7d:13: c1:cb:2f:aa:a1:79:f5:fd:e0:01:4d:fb:1f:b0:79:ae:76:ef: 58:63:44:82:6f:6d:8b:71:42:1b:53:aa:d5:1a:38:78:0d:c2: 30:5f:3f:0d:24:ea:35:51:5e:92:a7:4c:df:d7:45:8e:c7:bb: 3e:22:0e:08:21:c2:43:b6:a2:b2:4a:33:07:c1:f4:26:14:d6: 78:06:25:da:0e:c5:a6:4e:8a:ec:de:28:d3:5e:82:a6:bb:fe: dd:95:92:af:dd:77:99:fc:e6:6e:2d:c5:48:b5:7c:89:41:e6: 43:96:3c:2d:0e:f2:38:6f:79:e5:f7:fe:aa:f6:e2:99:b2:b9: 83:a5:91:85:0a:de:95:33:d1:a1:2b:9a:b7:60:e3:77:f9:e8: b6:75:ef:e7:c1:42:f3:2b:58:d8:3c:8f:82:76:f3:2d:67:37: 1e:f2:c4:88:25:2c:a8:59:84:b1:e5:34:69:77:f6:da:39:9c: b2:58:6f:be:1a:44:9d:36:56:95:aa:2a:40:30:c5:f4:7b:41: ab:16:31:72:c6:3c:b0:c2:81:a2:e8:aa:83:1b:62:be:e4:14: 0b:56:bb:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3YlD1gxrCZBNiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NGFiNDE1NjQtZGE5ZC00Mjg5LTk2NmItY2ZkNDEyZWZhMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdyGkb0tWtMP9N+SZBWGnWjDAS9MoEO+zrlT ZPUWbpmm0h1z0FbvlASqsgqYr6NQfJktMJoXjFeN/iPhAdq1zRcahI0OhAsLRXfw LHnOM6x8MLFmohwVYIIDG6KAk/sh+S2ehSV+LFxY26dpaZBUV/m011KiC8RfYbbU akAPJ9fgptKLbMdNCK1EuPJNcL/igW+/36zOXl3C01n7UF7vU8AYVa0RLxbKn1bC 3ryq4vPnJSOJ2aeaZiaU77CbBmCcpA6opApfHv7l5cGzjaV8gtUVUCyRs+MAZfFW 6plVR25/voSIVGlb5uPtdvXXi9A/c8O2pxhRmVsmNdXf26N1iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0i3qTabDVvqNknPaYrpRbylcn/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmExMjMwYTctNmU1NC0z MGU4LTk3M2ItZmRkZjZjZGI5YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNlwpIoX3mX72QunPkZI/tffBDfjt5GM7U6kimwvHU7t1p9E8HLL6qh efX94AFN+x+wea5271hjRIJvbYtxQhtTqtUaOHgNwjBfPw0k6jVRXpKnTN/XRY7H uz4iDgghwkO2orJKMwfB9CYU1ngGJdoOxaZOiuzeKNNegqa7/t2Vkq/dd5n85m4t xUi1fIlB5kOWPC0O8jhveeX3/qr24pmyuYOlkYUK3pUz0aErmrdg43f56LZ17+fB QvMrWNg8j4J28y1nNx7yxIglLKhZhLHlNGl39to5nLJYb74aRJ02VpWqKkAwxfR7 QasWMXLGPLDCgaLoqoMbYr7kFAtWu0A= -----END CERTIFICATE-----Generated at Mon Oct 20 06:45:04 2025 by rpki-client