$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af9b080b-cdc3-3b98-aa9b-f87253d7a4dd.roa File: af9b080b-cdc3-3b98-aa9b-f87253d7a4dd.roa (raw, json) Hash identifier: eG8nBJFQhXhGv7H16I0xOhjc+J+c0xZ47CcXfM29cJQ= Subject key identifier: 80:73:7C:6E:FF:88:29:2A:9D:D7:0B:9B:FE:99:6B:80:C6:C2:11:68 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD3F826E000BA8380EBE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af9b080b-cdc3-3b98-aa9b-f87253d7a4dd.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 98.17.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3f:82:6e:00:0b:a8:38:0e:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=f868345d-6a2f-4b6e-9209-135055fc99a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:47:c8:b4:9e:ba:ae:47:79:5e:bb:3b:fb: fd:1c:67:1d:dc:59:43:7f:41:39:2d:b8:4b:59:6f: 6e:72:d9:63:eb:fd:9f:40:35:57:29:8f:5a:63:03: 2b:7f:57:b8:69:a7:02:48:bd:8e:f8:48:f8:f1:c1: 43:dd:1e:6e:48:4b:8f:43:b9:34:6b:f3:be:5f:60: 81:58:25:c0:30:af:34:bf:2e:92:c6:f1:2e:12:ce: 9e:d8:cf:68:39:1a:ed:ce:49:72:23:07:90:55:26: eb:65:31:6f:67:46:68:69:07:cb:1e:64:06:3d:e9: 45:79:28:b4:a5:01:89:de:ab:e6:1b:f8:81:0d:c1: 2e:37:1a:9f:22:c5:cb:71:d5:9d:0b:24:8a:69:96: ae:d9:33:30:1c:10:9e:e7:24:a5:67:b6:c0:f5:74: f0:77:d7:a0:49:31:a3:72:51:e3:14:8d:d9:3d:f5: a2:b4:49:5e:e4:eb:bf:4f:b7:71:30:df:ae:1e:70: 85:b3:55:8d:c7:6a:e9:ef:3c:e2:43:ad:08:3a:4a: 35:01:25:96:d8:a8:24:ff:73:b4:ca:26:68:fe:37: 3f:1f:81:eb:d5:ea:2d:7c:94:ff:28:6f:b0:a7:3b: a4:02:4e:0d:4e:18:1a:01:a6:93:67:e9:b1:b0:78: 1e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:73:7C:6E:FF:88:29:2A:9D:D7:0B:9B:FE:99:6B:80:C6:C2:11:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af9b080b-cdc3-3b98-aa9b-f87253d7a4dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:1f:64:d1:31:d6:27:0e:a3:6f:92:69:29:e0:95:ab:84:54: 7a:a8:2c:b2:72:98:1c:28:e2:d3:1e:b4:7c:2c:7d:81:ef:1a: 71:73:40:30:ab:ad:8a:52:3e:00:01:d7:9d:21:bf:50:b5:75: 59:42:cf:05:2c:3d:43:6d:5d:ee:19:83:a5:b2:1b:4c:9c:8e: a5:42:22:8e:df:60:3a:b6:7a:16:ea:ac:28:fa:b2:69:54:15: 36:3b:10:e3:25:a4:c4:5e:19:7c:5f:9c:ef:96:f7:3c:38:dc: f2:38:d3:65:6e:3b:24:1d:fe:c9:ef:d0:3f:e7:18:96:c1:0b: 10:8a:5f:6d:14:33:0f:d5:76:22:47:5a:1c:89:9d:3a:0a:00: 89:29:c8:e0:cf:b7:81:b1:e8:8a:e6:b4:3b:fb:6c:ab:f0:4c: 17:67:ed:fd:a0:12:4b:4d:9d:15:4f:b1:fe:80:b1:d5:b1:42: 24:97:1d:c5:f6:78:b6:bc:61:ee:8d:2c:ef:9d:81:95:41:5e: 24:47:0b:ea:8c:54:97:32:c7:d0:89:78:f7:6b:95:68:5b:a8: bb:3c:77:f4:f5:d9:6d:e0:60:80:d7:3d:42:ab:1c:03:d0:99: a5:9f:81:bd:04:cd:24:9a:0d:8b:bd:80:35:e9:ed:a9:19:64: b1:bd:c7:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3T+CbgALqDgOvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk Zjg2ODM0NWQtNmEyZi00YjZlLTkyMDktMTM1MDU1ZmM5OWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoNHyLSeuq5HeV67O/v9HGcd3FlDf0E5LbhL WW9uctlj6/2fQDVXKY9aYwMrf1e4aacCSL2O+Ej48cFD3R5uSEuPQ7k0a/O+X2CB WCXAMK80vy6SxvEuEs6e2M9oORrtzklyIweQVSbrZTFvZ0ZoaQfLHmQGPelFeSi0 pQGJ3qvmG/iBDcEuNxqfIsXLcdWdCySKaZau2TMwHBCe5ySlZ7bA9XTwd9egSTGj clHjFI3ZPfWitEle5Ou/T7dxMN+uHnCFs1WNx2rp7zziQ60IOko1ASWW2Kgk/3O0 yiZo/jc/H4Hr1eotfJT/KG+wpzukAk4NThgaAaaTZ+mxsHge2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBzfG7/iCkqndcLm/6Za4DGwhFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWY5YjA4MGItY2RjMy0z Yjk4LWFhOWItZjg3MjUzZDdhNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMfZNEx1icOo2+SaSnglauEVHqoLLJymBwo4tMetHwsfYHvGnFzQDCr rYpSPgAB150hv1C1dVlCzwUsPUNtXe4Zg6WyG0ycjqVCIo7fYDq2ehbqrCj6smlU FTY7EOMlpMReGXxfnO+W9zw43PI402VuOyQd/snv0D/nGJbBCxCKX20UMw/VdiJH WhyJnToKAIkpyODPt4Gx6IrmtDv7bKvwTBdn7f2gEktNnRVPsf6AsdWxQiSXHcX2 eLa8Ye6NLO+dgZVBXiRHC+qMVJcyx9CJePdrlWhbqLs8d/T12W3gYIDXPUKrHAPQ maWfgb0EzSSaDYu9gDXp7akZZLG9x+Q= -----END CERTIFICATE-----Generated at Mon Oct 20 15:13:37 2025 by rpki-client