$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca8ad885-891a-3218-b71b-69d42f35fd5c.roa File: ca8ad885-891a-3218-b71b-69d42f35fd5c.roa (raw, json) Hash identifier: QVLz5DwdKQjM2Pvko/0H3deXZCcmX5HngxSr8p3rafk= Subject key identifier: 0C:AE:A9:94:D5:92:93:A4:04:84:43:EB:EA:D6:03:D5:48:18:75:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD3E25E1D8CB2AC55F5D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca8ad885-891a-3218-b71b-69d42f35fd5c.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 98.18.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3e:25:e1:d8:cb:2a:c5:5f:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=98ab0a70-c9b7-447e-9bce-46cca5319d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8a:b3:77:da:a0:75:38:36:c3:33:4c:67:26: 27:78:c3:a7:f3:11:ed:0d:34:bb:c5:55:a9:4b:2f: 0c:b8:c0:e9:41:31:00:9a:78:2e:20:0a:3d:c3:4d: d4:e0:8b:5a:61:bb:b2:d3:7e:be:45:f5:df:6d:ab: 99:1d:c7:57:3b:a2:28:6d:45:21:7b:eb:7e:39:34: 99:a0:c1:c0:00:f0:1b:16:52:a8:65:65:d6:12:99: 6b:c4:61:1b:e8:79:35:90:0b:10:61:19:a2:9b:c2: ec:99:48:45:01:73:fb:87:86:05:76:4b:49:d1:4d: 9a:e5:af:1e:71:4e:0e:40:c7:83:a2:21:12:4f:29: 54:44:94:01:46:c4:0f:7b:95:94:5f:68:41:06:cf: 9c:72:22:27:6e:ea:90:5b:6e:e9:03:bc:02:f0:5a: 1a:4b:07:fd:9a:b3:14:b4:2e:61:3a:0f:07:1c:21: c4:72:1f:7a:68:69:54:ee:1e:00:e3:d2:9e:65:e5: 5c:a8:13:da:d8:be:1a:c5:e4:de:7c:3d:84:c7:50: 57:59:ea:db:ba:9e:dd:ce:82:15:2f:f8:d0:c3:de: d5:0d:6d:d1:42:78:4e:d2:02:54:39:d4:fa:50:7e: a8:7c:ea:ee:e6:b7:d4:18:d6:e0:d3:8c:69:73:78: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AE:A9:94:D5:92:93:A4:04:84:43:EB:EA:D6:03:D5:48:18:75:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca8ad885-891a-3218-b71b-69d42f35fd5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:15:a6:11:b5:d7:2d:ad:f3:32:cd:85:9d:90:05:0d:50:fa: 4a:62:91:a2:9f:cb:32:a0:29:ce:5a:01:f6:70:e6:ed:a5:c9: e1:f1:b7:00:58:a1:a4:f9:64:cc:90:77:bc:3b:6a:66:3e:58: 5b:52:f1:bf:2d:47:b0:b2:ca:34:72:91:69:92:60:74:c7:23: 9b:af:3e:8e:6c:a5:66:a0:84:4f:b6:2d:18:1a:d0:f7:00:81: dc:e8:76:d7:9b:e4:a8:a0:00:bf:c9:90:8d:2e:08:cd:0e:78: 59:75:8e:5d:f2:23:fa:ce:18:82:f7:80:73:35:d9:81:ef:69: dd:83:b6:dd:a1:f2:ab:55:25:3e:61:f4:77:db:d8:19:63:b3: 86:84:ba:35:9b:3a:94:e4:39:fb:38:14:6b:a0:99:98:f8:d9: 03:a3:11:88:16:48:f9:0d:07:47:02:d7:7e:52:34:05:4a:fc: e6:ba:57:f5:9c:f7:cd:70:4f:73:10:51:9f:18:df:ac:33:ec: 7e:e1:28:26:71:43:fb:8d:be:a4:51:1b:bd:8e:b0:fc:32:2d: 23:be:2e:0b:28:b2:e6:97:b7:5c:2f:c1:a6:bf:2e:00:1b:30: f8:e7:63:01:20:2b:54:b9:6f:2d:5a:a8:ad:7b:cd:f1:b8:c6: 99:60:89:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3T4l4djLKsVfXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk OThhYjBhNzAtYzliNy00NDdlLTliY2UtNDZjY2E1MzE5ZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIqzd9qgdTg2wzNMZyYneMOn8xHtDTS7xVWp Sy8MuMDpQTEAmnguIAo9w03U4ItaYbuy036+RfXfbauZHcdXO6IobUUhe+t+OTSZ oMHAAPAbFlKoZWXWEplrxGEb6Hk1kAsQYRmim8LsmUhFAXP7h4YFdktJ0U2a5a8e cU4OQMeDoiESTylURJQBRsQPe5WUX2hBBs+cciInbuqQW27pA7wC8FoaSwf9mrMU tC5hOg8HHCHEch96aGlU7h4A49KeZeVcqBPa2L4axeTefD2Ex1BXWerbup7dzoIV L/jQw97VDW3RQnhO0gJUOdT6UH6ofOru5rfUGNbg04xpc3hpJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyuqZTVkpOkBIRD6+rWA9VIGHUQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E4YWQ4ODUtODkxYS0z MjE4LWI3MWItNjlkNDJmMzVmZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwVphG11y2t8zLNhZ2QBQ1Q+kpikaKfyzKgKc5aAfZw5u2lyeHxtwBY oaT5ZMyQd7w7amY+WFtS8b8tR7CyyjRykWmSYHTHI5uvPo5spWaghE+2LRga0PcA gdzodteb5KigAL/JkI0uCM0OeFl1jl3yI/rOGIL3gHM12YHvad2Dtt2h8qtVJT5h 9Hfb2Bljs4aEujWbOpTkOfs4FGugmZj42QOjEYgWSPkNB0cC135SNAVK/Oa6V/Wc 981wT3MQUZ8Y36wz7H7hKCZxQ/uNvqRRG72OsPwyLSO+LgsosuaXt1wvwaa/LgAb MPjnYwEgK1S5by1aqK17zfG4xplgifg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:18 2025 by rpki-client