$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa File: 040f0daa-4901-3c20-af2f-533b29edcc22.roa (raw, json) Hash identifier: Nercsk4K/NLHZGbKX59qGgU1tCKWvnX7HqfcPbPeQyM= Subject key identifier: 1C:6B:54:8C:A9:4A:9F:0C:2F:96:FB:8F:1E:58:5C:73:C2:25:0E:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D5DC0BF6D50BF15E1200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 98.16.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d5:dc:0b:f6:d5:0b:f1:5e:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=9d94098d-b872-4a21-bba9-c5d93ccb0765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:4c:1d:b9:b4:56:f8:4b:07:14:1b:28:71: 4d:c7:f3:37:3b:a7:04:48:53:49:c8:70:c1:c9:c2: 1b:86:a8:5c:5d:3f:f3:97:4d:98:a5:6f:83:3d:0e: 14:93:cd:4d:10:c2:97:07:79:4c:a8:3a:14:0d:ba: f0:70:c2:0f:63:f3:b1:ae:c9:fc:ef:3c:1c:7e:6a: 68:7f:66:c8:68:31:b9:80:a3:0b:90:e5:09:58:49: 08:6c:7b:d4:59:e9:1f:18:2d:a2:71:5e:21:dd:50: 06:72:e0:d9:67:e1:ef:c8:b5:74:90:db:ad:95:b3: 1c:78:fb:58:e9:b2:f5:83:4e:00:21:2b:99:8a:6f: 25:a1:99:ff:c3:23:b8:2f:93:64:2d:33:d6:f0:e9: 2b:6d:1e:31:eb:70:8b:04:7f:1d:c1:54:df:f9:54: b0:11:a2:3d:27:f0:96:9b:36:15:64:ba:2d:aa:70: 17:24:b3:98:d0:f9:e1:6a:84:d3:07:df:cd:d3:a3: 6c:fa:bc:cb:13:8e:87:57:34:d3:f1:6c:53:73:c3: 39:5a:fc:81:35:69:73:eb:bf:58:58:69:34:88:75: 55:19:38:dd:96:bd:c6:3a:c2:f6:b4:c1:34:0b:21: c7:df:fb:bb:c5:6d:f5:1c:a2:27:1a:3c:db:96:0a: 56:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6B:54:8C:A9:4A:9F:0C:2F:96:FB:8F:1E:58:5C:73:C2:25:0E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a6:fc:c9:d7:dc:8f:46:75:5a:31:9e:a4:96:28:23:e2:c1: 3a:96:4f:c0:43:17:de:f2:92:81:80:05:7c:15:6a:a7:ef:43: 94:29:d6:ca:be:d7:2f:ba:4b:fb:81:c3:f3:fa:06:0e:9a:be: 8f:5f:40:44:23:85:6f:7e:3a:3d:15:ac:7e:27:1f:c6:db:2c: 7e:d0:0f:f9:76:2d:a0:f3:68:7e:fb:00:fa:cf:26:72:67:38: 53:b0:cc:fc:7d:c8:96:97:86:c1:fc:76:6d:bb:1e:e4:8d:cd: a1:1b:bd:34:1c:1f:a0:9c:ab:c2:7e:4e:3d:b1:9c:f7:1d:bb: 9b:c0:3f:62:2e:9a:91:e9:44:33:16:77:fe:67:10:85:cb:e0: a2:33:7f:9d:e8:b0:7e:50:85:6d:9b:ae:cd:f7:c8:0d:7a:3d: 74:55:fd:7b:ae:d2:02:3c:49:0f:0b:01:07:de:08:3f:8f:1c: df:4c:cb:d6:00:4d:44:7b:9b:85:cd:85:15:39:46:ed:a0:0b: 4f:68:01:b5:77:9d:31:be:79:b2:42:15:e3:60:82:c7:f6:50: 3f:5d:d2:3d:d2:6f:fd:a3:d4:b8:01:f2:e3:38:56:c2:6f:f0: c3:6d:43:70:6e:bd:39:28:cf:fd:89:0a:d4:3b:24:8c:4f:2a: ac:09:b6:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNXcC/bVC/FeEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk OWQ5NDA5OGQtYjg3Mi00YTIxLWJiYTktYzVkOTNjY2IwNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtadMHbm0VvhLBxQbKHFNx/M3O6cESFNJyHDB ycIbhqhcXT/zl02YpW+DPQ4Uk81NEMKXB3lMqDoUDbrwcMIPY/Oxrsn87zwcfmpo f2bIaDG5gKMLkOUJWEkIbHvUWekfGC2icV4h3VAGcuDZZ+HvyLV0kNutlbMcePtY 6bL1g04AISuZim8loZn/wyO4L5NkLTPW8OkrbR4x63CLBH8dwVTf+VSwEaI9J/CW mzYVZLotqnAXJLOY0PnhaoTTB9/N06Ns+rzLE46HVzTT8WxTc8M5WvyBNWlz679Y WGk0iHVVGTjdlr3GOsL2tME0CyHH3/u7xW31HKInGjzblgpWrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxrVIypSp8ML5b7jx5YXHPCJQ7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQwZjBkYWEtNDkwMS0z YzIwLWFmMmYtNTMzYjI5ZWRjYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHam/MnX3I9GdVoxnqSWKCPiwTqWT8BDF97ykoGABXwVaqfvQ5Qp1sq+ 1y+6S/uBw/P6Bg6avo9fQEQjhW9+Oj0VrH4nH8bbLH7QD/l2LaDzaH77APrPJnJn OFOwzPx9yJaXhsH8dm27HuSNzaEbvTQcH6Ccq8J+Tj2xnPcdu5vAP2IumpHpRDMW d/5nEIXL4KIzf53osH5QhW2brs33yA16PXRV/Xuu0gI8SQ8LAQfeCD+PHN9My9YA TUR7m4XNhRU5Ru2gC09oAbV3nTG+ebJCFeNggsf2UD9d0j3Sb/2j1LgB8uM4VsJv 8MNtQ3BuvTkoz/2JCtQ7JIxPKqwJtjM= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:34 2025 by rpki-client