$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa File: 0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa (raw, json) Hash identifier: Lz+Mh4FYNYDVxDV5h8aGgpLOE47iE4Qk42Y1b7yKUg8= Subject key identifier: 7F:B7:BD:0D:C9:42:95:69:A4:84:4F:BE:73:02:75:E1:7B:10:B5:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A7E7B7C14BAE1A21F623533D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 98.17.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:7c:14:ba:e1:a2:1f:62:35:33:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=bebe4e03-07cf-47a7-94ba-41158ddd22fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:99:c9:dd:25:a7:05:fe:33:d9:ca:66:7c: a4:9a:c2:13:83:6c:c9:20:95:a3:32:83:14:a4:52: db:f5:5e:83:72:59:f6:2b:b8:72:4b:24:01:d1:48: 13:2a:f2:86:39:5b:39:0b:e0:bd:e3:74:2b:36:69: 24:25:98:3d:4b:bb:87:f6:00:57:58:ed:8f:af:b2: f4:cf:56:c6:a0:2e:a2:6a:7b:ce:fa:2c:ca:2e:27: 65:45:71:78:d1:96:ad:80:b9:e7:bd:94:40:67:15: 6b:9b:b1:3b:8c:20:d2:9c:7b:77:11:2b:bc:74:7c: db:e7:e2:11:f0:e7:df:97:f7:51:39:30:93:00:b9: 0e:23:75:21:20:8a:2b:63:5d:99:7d:1f:62:65:2e: d0:5a:50:58:ad:2c:64:81:90:97:53:ca:d9:fa:e3: 3d:5a:d3:80:da:b3:98:83:69:4d:b9:00:5f:96:84: 2e:5b:71:33:0b:ac:d0:5d:76:d9:18:c7:aa:e7:f9: 46:fc:5d:7a:05:97:3f:a8:52:79:f3:cd:f4:89:90: ff:43:42:70:b0:4d:21:14:05:8c:58:18:41:38:ad: 5b:c2:69:98:a9:63:10:2d:3a:e0:6a:49:38:9b:ff: 64:8a:e2:00:63:ce:a6:a0:3b:6a:28:ea:33:35:5d: c2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B7:BD:0D:C9:42:95:69:A4:84:4F:BE:73:02:75:E1:7B:10:B5:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0df9b819-1aa7-3c79-94e2-7f27fa9ec0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:77:80:3a:55:ef:0b:b3:d4:4d:c4:96:a3:43:e4:b0:48:45: 20:c5:ff:ed:68:e3:6f:7c:98:c4:5b:59:53:71:38:93:5d:46: 71:f8:98:31:e7:21:3c:7a:bd:65:8a:43:ad:bc:e0:6d:57:ce: 93:0b:3b:4a:95:62:ce:c1:0f:30:35:41:34:c0:c9:a9:93:e5: 9c:d1:f8:c0:84:5d:18:14:89:7b:1c:7e:de:54:7e:02:a6:05: 21:1f:4f:c6:93:eb:d3:62:18:77:eb:48:2b:e9:d2:fe:7a:6e: 9b:83:5f:25:df:34:e4:1f:eb:05:ba:36:43:4e:93:bb:e2:fd: b4:e7:d7:bf:43:d4:f1:fb:a2:12:8d:76:74:27:28:2a:42:7f: 08:87:5b:d7:d2:88:40:a4:67:7b:2a:a5:0c:56:d0:1e:ce:fd: 88:26:ec:3e:e9:55:c5:b3:5d:e5:49:da:8b:2f:29:d3:cb:cf: 6b:45:b8:fb:32:9f:3e:e1:76:97:b5:5e:57:41:9b:42:7a:91: 32:c4:f5:64:4b:33:32:9a:9f:cc:1c:54:2a:96:ec:44:b9:cf: 4d:a6:7b:c8:35:dd:24:58:9b:c7:14:2d:7a:13:1d:5f:06:05: 11:49:3c:4b:0f:37:93:9d:3f:2c:e6:22:50:db:8d:40:98:68: ba:3b:85:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3wUuuGiH2I1M9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YmViZTRlMDMtMDdjZi00N2E3LTk0YmEtNDExNThkZGQyMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzCZyd0lpwX+M9nKZnykmsITg2zJIJWjMoMU pFLb9V6Dcln2K7hySyQB0UgTKvKGOVs5C+C943QrNmkkJZg9S7uH9gBXWO2Pr7L0 z1bGoC6ianvO+izKLidlRXF40ZatgLnnvZRAZxVrm7E7jCDSnHt3ESu8dHzb5+IR 8Offl/dROTCTALkOI3UhIIorY12ZfR9iZS7QWlBYrSxkgZCXU8rZ+uM9WtOA2rOY g2lNuQBfloQuW3EzC6zQXXbZGMeq5/lG/F16BZc/qFJ58830iZD/Q0JwsE0hFAWM WBhBOK1bwmmYqWMQLTrgakk4m/9kiuIAY86moDtqKOozNV3CHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+3vQ3JQpVppIRPvnMCdeF7ELUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGRmOWI4MTktMWFhNy0z Yzc5LTk0ZTItN2YyN2ZhOWVjMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR3gDpV7wuz1E3ElqND5LBIRSDF/+1o4298mMRbWVNxOJNdRnH4mDHn ITx6vWWKQ6284G1XzpMLO0qVYs7BDzA1QTTAyamT5ZzR+MCEXRgUiXscft5UfgKm BSEfT8aT69NiGHfrSCvp0v56bpuDXyXfNOQf6wW6NkNOk7vi/bTn179D1PH7ohKN dnQnKCpCfwiHW9fSiECkZ3sqpQxW0B7O/Ygm7D7pVcWzXeVJ2osvKdPLz2tFuPsy nz7hdpe1XldBm0J6kTLE9WRLMzKan8wcVCqW7ES5z02me8g13SRYm8cULXoTHV8G BRFJPEsPN5OdPyzmIlDbjUCYaLo7hdo= -----END CERTIFICATE-----Generated at Mon Aug 4 19:01:30 2025 by rpki-client