$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1db8107e-d32b-324a-acff-76bce2d0bd21.roa File: 1db8107e-d32b-324a-acff-76bce2d0bd21.roa (raw, json) Hash identifier: u+Iu2voSokkMf7emHjTRDtpixWfI0yJZw1IQrhutApw= Subject key identifier: 7A:E7:E4:F6:83:9D:62:1C:87:68:CD:83:74:EB:EE:29:3F:69:08:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38628E97EBB698DB60D2400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1db8107e-d32b-324a-acff-76bce2d0bd21.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 98.16.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:28:e9:7e:bb:69:8d:b6:0d:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=3cc725c6-dfc7-4fdf-8d64-ff843e7750c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:da:69:23:e2:b0:48:37:cb:4a:a0:a4:cf: 92:9f:23:e3:d0:97:f9:70:e7:21:80:10:5e:a7:5e: 7a:94:a8:21:be:ab:49:9f:c3:12:45:5f:b5:af:13: 69:c5:45:ca:5a:6f:e8:fd:5f:c5:60:8b:14:66:94: 40:ae:3c:fe:ff:8a:bb:5a:7b:73:9a:06:2e:68:bf: 6a:ee:06:33:35:80:f5:83:f2:f4:e9:c6:9d:a1:17: 8e:ca:ae:43:0e:d7:70:18:b9:1e:2b:af:31:32:ce: bf:1a:5a:0a:09:41:84:b1:2f:1d:17:cc:d3:50:7b: 94:c6:a2:b8:97:ce:e0:3a:e5:3c:7d:5e:cb:6b:1a: e5:28:9a:17:e4:5f:10:ca:2b:b0:f7:9c:13:cd:8a: d1:37:ba:35:3c:85:61:ce:ed:bd:2f:a2:62:40:30: df:b5:de:b8:a0:90:ce:d2:c8:17:1c:aa:ef:43:9d: e9:98:6f:1e:fe:d5:4f:5f:56:46:fb:4b:49:88:b7: 0b:40:51:4f:1f:95:6c:ad:42:3a:2b:3e:75:f2:e9: 82:94:70:3f:2b:7b:ef:7b:0c:41:f9:c9:7a:a1:26: 8c:9d:bc:60:97:c7:a3:f0:62:84:f4:4a:be:10:51: 18:40:eb:19:d4:92:6f:15:35:38:67:5d:40:0c:72: 07:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E7:E4:F6:83:9D:62:1C:87:68:CD:83:74:EB:EE:29:3F:69:08:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1db8107e-d32b-324a-acff-76bce2d0bd21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:5b:53:1d:50:e2:d0:10:8e:9e:d2:f2:08:69:b6:af:be:4d: 27:8b:d3:1a:e9:d0:50:d7:19:84:c4:b4:bf:48:a2:d3:a0:12: 37:cd:d5:13:4d:96:fc:e0:e7:ad:fa:98:84:1a:87:ce:39:80: 6b:a9:fc:a3:48:dd:82:5f:06:3c:12:7b:f4:be:b8:b0:2b:35: ec:79:86:4b:24:38:64:45:8a:18:c4:43:08:33:1b:5f:cc:11: 91:1d:b7:7c:6b:e1:c5:cb:07:b5:7c:f0:f1:91:83:aa:51:f3: 29:b5:f7:06:f2:cc:8b:7f:25:99:10:6c:c7:67:55:8e:8b:05: 1f:50:cb:58:a7:44:2a:56:59:0b:3b:b8:f1:74:2c:c9:7a:5e: 57:5f:18:31:53:ec:b8:65:99:24:94:f9:82:eb:95:3e:d7:99: c0:b2:54:52:57:0f:68:a1:e2:3e:73:62:f3:37:dd:25:93:68: a5:f4:75:8f:ea:14:40:2b:36:d4:cc:49:4f:05:78:f9:d0:5b: 27:6c:79:89:1d:be:00:4c:8b:8b:93:89:6f:9d:1e:20:c1:5e: fc:4c:54:12:f7:e3:98:88:41:0a:f5:02:fc:dd:4e:95:e2:1e: bf:8c:9f:e5:b4:00:5f:ec:36:76:7e:3a:61:dc:4d:45:ac:87: b1:e4:0f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhijpfrtpjbYNJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk M2NjNzI1YzYtZGZjNy00ZmRmLThkNjQtZmY4NDNlNzc1MGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp7aaSPisEg3y0qgpM+SnyPj0Jf5cOchgBBe p156lKghvqtJn8MSRV+1rxNpxUXKWm/o/V/FYIsUZpRArjz+/4q7WntzmgYuaL9q 7gYzNYD1g/L06cadoReOyq5DDtdwGLkeK68xMs6/GloKCUGEsS8dF8zTUHuUxqK4 l87gOuU8fV7LaxrlKJoX5F8Qyiuw95wTzYrRN7o1PIVhzu29L6JiQDDftd64oJDO 0sgXHKrvQ53pmG8e/tVPX1ZG+0tJiLcLQFFPH5VsrUI6Kz518umClHA/K3vvewxB +cl6oSaMnbxgl8ej8GKE9Eq+EFEYQOsZ1JJvFTU4Z11ADHIHeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrn5PaDnWIch2jNg3Tr7ik/aQgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRiODEwN2UtZDMyYi0z MjRhLWFjZmYtNzZiY2UyZDBiZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClbUx1Q4tAQjp7S8ghptq++TSeL0xrp0FDXGYTEtL9IotOgEjfN1RNN lvzg5636mIQah845gGup/KNI3YJfBjwSe/S+uLArNex5hkskOGRFihjEQwgzG1/M EZEdt3xr4cXLB7V88PGRg6pR8ym19wbyzIt/JZkQbMdnVY6LBR9Qy1inRCpWWQs7 uPF0LMl6XldfGDFT7LhlmSSU+YLrlT7XmcCyVFJXD2ih4j5zYvM33SWTaKX0dY/q FEArNtTMSU8FePnQWydseYkdvgBMi4uTiW+dHiDBXvxMVBL345iIQQr1AvzdTpXi Hr+Mn+W0AF/sNnZ+OmHcTUWsh7HkD+g= -----END CERTIFICATE-----Generated at Wed Aug 6 10:10:50 2025 by rpki-client