$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa File: 2df1ec2d-c15c-37ee-9be8-f210775488b5.roa (raw, json) Hash identifier: GkSltmE2n75NfpJHoIxeB2rBvDI+KEtbEyQRu16NZ+o= Subject key identifier: 78:B5:A0:D5:35:C7:5E:95:4B:8F:06:F7:58:6B:28:6C:6A:57:7F:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B7F525E21801A955F1A994E20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 98.17.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5e:21:80:1a:95:5f:1a:99:4e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=51983e03-c35e-4d2d-a3ba-7b82aa099960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ae:da:0f:37:e7:b1:64:49:9b:40:44:35:01: 9d:78:5e:08:d0:be:5b:19:11:91:bf:d0:39:4a:23: 09:75:41:77:28:b4:03:aa:29:9c:61:a9:81:68:24: 35:ef:dc:6a:11:42:34:9b:ff:07:fc:87:f1:8f:bb: ad:8a:f9:c7:1f:70:21:e0:c0:9b:f1:a6:64:ba:fd: dd:84:5e:83:fd:d8:c8:78:df:5b:69:a9:24:4b:73: 15:69:a9:c1:25:ea:00:c0:d6:f7:13:0e:20:33:33: 40:1b:fa:25:6f:ac:41:fa:7d:8f:30:e5:06:ff:a0: a1:23:ea:dd:83:20:91:d9:e0:56:29:bb:58:b0:ac: e0:bf:e5:fe:b8:62:96:af:2b:05:f8:dd:52:d0:d0: 09:64:b8:08:ca:07:6c:e7:8b:55:66:a2:5c:78:35: e1:5b:c2:39:f2:f9:ea:f8:97:5c:69:7f:7d:8d:52: b9:fd:74:af:89:fc:2b:0d:9a:73:20:1c:f4:f7:d8: e2:cc:8f:76:28:64:f2:4b:82:39:72:21:b0:11:b9: ff:de:d5:f8:bf:01:d9:72:b2:87:b4:48:6a:53:37: ba:73:cb:d2:44:09:f0:dd:ce:d4:90:09:69:0b:75: d8:0c:a1:18:69:5f:ef:07:63:b6:ce:0e:f7:c3:39: 21:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B5:A0:D5:35:C7:5E:95:4B:8F:06:F7:58:6B:28:6C:6A:57:7F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:79:bb:70:67:20:f2:ac:d0:d7:08:ff:10:1c:df:e9:1e:18: 06:98:ef:df:48:33:1e:be:1b:6d:68:77:65:e1:9f:a6:8b:0f: af:bd:b6:e0:45:e1:22:8a:c2:63:e1:c4:e8:27:16:d9:b5:13: e2:40:1b:77:90:2a:b6:80:42:88:b3:b1:aa:e4:3c:e7:11:ce: b5:f5:a7:57:8d:88:7a:42:f4:ec:4f:88:5e:01:af:ea:61:08: 21:88:b3:78:f5:65:5c:43:9b:68:29:0c:57:2a:6f:a8:84:98: 3b:b6:3d:88:79:dd:08:ef:18:47:e4:8c:5a:ea:f7:e6:4f:cf: 76:a5:f2:62:b7:a1:03:5b:b9:33:a8:dc:f9:69:ad:59:2c:10: d2:04:01:fc:7e:94:d1:d8:7c:1e:6f:7e:a7:c0:fd:43:1d:1e: 45:cd:a2:e3:db:a3:9a:74:f3:3d:33:25:2b:de:01:1e:17:db: 07:68:a7:a2:96:a9:14:b6:89:c4:81:0d:ba:54:f7:5d:16:28: c6:ff:ed:52:39:92:57:4a:7c:eb:23:0c:e2:27:c5:3f:58:74: cf:88:b5:2a:ba:be:05:15:89:73:5b:b3:f9:cd:51:66:ef:cf: 30:c3:c7:b5:a5:07:89:c6:c8:f5:54:aa:a5:76:41:34:12:2f: 1d:d6:6d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ul4hgBqVXxqZTiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTE5ODNlMDMtYzM1ZS00ZDJkLWEzYmEtN2I4MmFhMDk5OTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha7aDzfnsWRJm0BENQGdeF4I0L5bGRGRv9A5 SiMJdUF3KLQDqimcYamBaCQ179xqEUI0m/8H/Ifxj7utivnHH3Ah4MCb8aZkuv3d hF6D/djIeN9baakkS3MVaanBJeoAwNb3Ew4gMzNAG/olb6xB+n2PMOUG/6ChI+rd gyCR2eBWKbtYsKzgv+X+uGKWrysF+N1S0NAJZLgIygds54tVZqJceDXhW8I58vnq +JdcaX99jVK5/XSvifwrDZpzIBz099jizI92KGTyS4I5ciGwEbn/3tX4vwHZcrKH tEhqUze6c8vSRAnw3c7UkAlpC3XYDKEYaV/vB2O2zg73wzkhfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHi1oNU1x16VS48G91hrKGxqV39zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRmMWVjMmQtYzE1Yy0z N2VlLTliZTgtZjIxMDc3NTQ4OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGF5u3BnIPKs0NcI/xAc3+keGAaY799IMx6+G21od2Xhn6aLD6+9tuBF 4SKKwmPhxOgnFtm1E+JAG3eQKraAQoizsarkPOcRzrX1p1eNiHpC9OxPiF4Br+ph CCGIs3j1ZVxDm2gpDFcqb6iEmDu2PYh53QjvGEfkjFrq9+ZPz3al8mK3oQNbuTOo 3PlprVksENIEAfx+lNHYfB5vfqfA/UMdHkXNouPbo5p08z0zJSveAR4X2wdop6KW qRS2icSBDbpU910WKMb/7VI5kldKfOsjDOInxT9YdM+ItSq6vgUViXNbs/nNUWbv zzDDx7WlB4nGyPVUqqV2QTQSLx3WbeA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:22 2025 by rpki-client