$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa File: 201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa (raw, json) Hash identifier: Vr/XwKu3KYtmB2gU5PZEkQmA9GkPOQqcKUxhIKDoSj8= Subject key identifier: 1A:27:EF:28:B4:62:5F:E5:D3:9E:23:81:33:23:29:70:18:CD:6F:F7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22172AA3477C7EFC6CA0980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 98.22.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:72:aa:34:77:c7:ef:c6:ca:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=ed4f0471-e16b-44ee-9c4a-ec2e9624a215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0f:a1:14:63:1c:29:43:c2:05:89:53:5d:6b: 51:36:75:bc:ed:19:c3:06:80:5f:80:e8:68:2b:41: 28:bb:b8:0e:03:45:aa:e5:7c:cb:83:3c:21:aa:6b: 11:a6:71:60:67:09:39:bf:9d:61:74:10:f3:2a:ec: 1c:0a:17:2c:37:ec:eb:c4:51:fc:32:d6:99:b6:e5: af:81:7e:ab:55:4f:d5:58:3d:e1:57:d2:a1:3f:ef: e4:de:c8:f5:1a:01:9f:b6:c2:32:7f:0e:02:69:47: b9:73:19:33:80:d9:56:d8:93:f2:1d:90:97:b3:25: 82:0d:9e:38:8a:ee:a2:1e:13:6c:a7:a1:3c:15:82: 67:5f:f4:1b:7a:14:92:95:e7:2e:08:50:b0:3c:18: 1a:cc:4d:20:3b:6b:08:ec:cf:af:c5:3f:1c:8e:a6: 90:49:22:b8:04:86:f0:2d:3f:9f:3c:57:c3:53:e3: 45:3a:79:b9:b9:de:ab:07:60:ca:e7:86:a1:2b:ca: 7e:1f:2e:00:da:f9:6a:3f:ab:52:a9:7b:33:23:ec: 05:2f:9d:00:7a:d8:6a:8a:6f:45:8d:55:0a:f8:5b: c4:0c:ee:17:6e:96:be:22:48:4f:84:9c:c6:c4:12: 7d:4b:0c:01:66:ef:2a:85:16:39:4b:05:c6:3c:a3: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:27:EF:28:B4:62:5F:E5:D3:9E:23:81:33:23:29:70:18:CD:6F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:49:02:07:a8:99:82:1d:a9:19:73:ae:95:db:f2:12:8e:f9: 43:d2:6d:a6:12:47:34:34:fa:b3:42:13:5a:3d:c3:19:c0:43: a2:d1:09:64:fe:ec:d2:6b:eb:e7:f7:37:32:db:a8:fd:85:d8: 26:35:d4:08:10:5d:8a:79:b6:46:00:f2:d0:a8:14:e5:3a:85: 09:2a:04:58:ae:cd:5c:df:48:6d:84:e3:54:0c:f0:71:92:31: 29:5b:f8:bb:d8:4f:be:f3:96:40:66:75:fb:3d:15:29:07:72: 9a:1b:bb:8b:ef:f4:3d:4b:a9:c9:3b:c9:52:53:90:58:53:ef: 39:6f:4e:dd:c2:bf:85:b9:13:44:05:43:c9:16:4d:d2:f8:09: b3:40:d4:b8:1b:fa:d8:f7:eb:66:f1:ca:0a:5b:22:3c:00:14: 27:f6:a9:29:cd:13:eb:83:f2:a8:b5:81:96:30:83:08:d0:e9: 05:3f:99:91:f8:57:22:a5:77:03:de:5a:ea:83:03:5f:01:ea: 79:49:32:1b:89:21:dc:ef:36:34:01:be:01:31:27:7c:24:dc: 7c:c9:cf:f8:a2:6c:ed:81:bc:44:3a:cb:a8:92:c8:b7:cf:68: 7f:f6:71:52:87:a2:2c:cb:1b:2d:97:1c:b4:80:94:8f:0d:14: 5d:97:fc:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXKqNHfH78bKCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWQ0ZjA0NzEtZTE2Yi00NGVlLTljNGEtZWMyZTk2MjRhMjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig+hFGMcKUPCBYlTXWtRNnW87RnDBoBfgOho K0Eou7gOA0Wq5XzLgzwhqmsRpnFgZwk5v51hdBDzKuwcChcsN+zrxFH8MtaZtuWv gX6rVU/VWD3hV9KhP+/k3sj1GgGftsIyfw4CaUe5cxkzgNlW2JPyHZCXsyWCDZ44 iu6iHhNsp6E8FYJnX/QbehSSlecuCFCwPBgazE0gO2sI7M+vxT8cjqaQSSK4BIbw LT+fPFfDU+NFOnm5ud6rB2DK54ahK8p+Hy4A2vlqP6tSqXszI+wFL50Aethqim9F jVUK+FvEDO4Xbpa+IkhPhJzGxBJ9SwwBZu8qhRY5SwXGPKOqkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBon7yi0Yl/l054jgTMjKXAYzW/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjAxYmM1OGYtNzA0ZC0z OGJiLTk3MzEtMGY0Y2E0YjBkMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRJAgeomYIdqRlzrpXb8hKO+UPSbaYSRzQ0+rNCE1o9wxnAQ6LRCWT+ 7NJr6+f3NzLbqP2F2CY11AgQXYp5tkYA8tCoFOU6hQkqBFiuzVzfSG2E41QM8HGS MSlb+LvYT77zlkBmdfs9FSkHcpobu4vv9D1Lqck7yVJTkFhT7zlvTt3Cv4W5E0QF Q8kWTdL4CbNA1Lgb+tj362bxygpbIjwAFCf2qSnNE+uD8qi1gZYwgwjQ6QU/mZH4 VyKldwPeWuqDA18B6nlJMhuJIdzvNjQBvgExJ3wk3HzJz/iibO2BvEQ6y6iSyLfP aH/2cVKHoizLGy2XHLSAlI8NFF2X/BY= -----END CERTIFICATE-----Generated at Wed Aug 6 16:24:20 2025 by rpki-client