$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa File: 2a428851-c296-3ffd-83aa-596e36f896f0.roa (raw, json) Hash identifier: dNpbXTZb6j8L7sJaNPtzySPARz0dqUdlWyYll/yNzLk= Subject key identifier: F0:35:F8:BB:BF:E1:F9:DA:FB:FD:6B:54:18:E1:CC:A4:1E:2E:C4:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CC845A0BE1BDCC3D3B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.16.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cc:84:5a:0b:e1:bd:cc:3d:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=38a9cbee-3b73-4c86-a5ba-da6bf5be27d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:b7:d6:ca:6b:44:89:ed:e7:3c:d3:93:92: 48:5d:05:ae:61:a6:cb:5c:20:35:16:e9:81:2c:c6: 28:40:62:f5:c0:cf:67:33:cb:35:96:27:31:0b:1d: 18:e9:4e:80:f5:d4:60:f8:ec:63:d2:2a:de:92:a9: 79:41:85:d2:80:8c:c2:9c:54:3b:df:99:4e:28:56: 0b:94:97:87:e9:a4:4e:45:12:5e:73:d8:09:69:8a: 2a:b9:03:3c:8b:4a:df:da:dd:92:60:53:00:3a:7f: 42:e5:b5:cf:4e:27:d8:28:e4:00:00:6c:b8:eb:79: a1:4b:3b:9d:f3:f5:c2:2e:86:31:f2:97:31:c4:c9: d3:71:03:06:cd:16:22:61:34:65:52:05:86:75:d8: 74:d8:78:15:82:12:07:a8:8e:6b:79:97:6a:c7:57: 2c:37:bf:b9:75:a4:1c:c4:71:49:0f:ca:cd:4c:b7: 40:80:78:9f:78:ff:07:08:4e:bc:a7:e5:88:e0:e2: 6a:76:d3:e8:8f:d6:fc:c2:4b:db:43:cf:2e:e3:a7: 7b:b9:9d:ea:12:99:ba:ad:9a:09:ab:37:ab:f6:e4: 31:4e:5e:4e:0c:79:3d:63:b1:cf:03:cf:9c:07:ca: 74:7e:78:98:ac:ea:38:90:3c:bd:08:59:82:8f:78: d8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:35:F8:BB:BF:E1:F9:DA:FB:FD:6B:54:18:E1:CC:A4:1E:2E:C4:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:cb:a9:b0:77:85:fe:04:c9:30:83:eb:bd:2a:8a:ef:dc:ef: f3:5c:f0:be:4e:fe:e1:a7:e8:ef:ec:3c:4d:02:c3:78:33:f2: 6a:44:38:af:ff:cf:fa:5c:50:57:bb:ec:7c:bf:92:c9:90:26: 34:d2:d9:68:7b:87:77:3e:85:f5:55:42:f3:2d:d5:3d:3f:2b: 42:52:39:6e:e3:6a:f6:8a:b5:63:a7:d1:15:0e:17:1e:74:92: d7:5f:eb:e0:ff:34:f4:d1:59:bd:e2:df:f2:eb:1a:ca:ec:d7: 03:18:2d:a9:7b:b0:64:44:3d:fc:a0:68:04:60:a7:1e:8f:7e: 44:64:2a:2f:78:f5:fc:22:bc:c0:69:83:d8:ee:8b:d3:8b:04: e8:be:e5:56:74:cc:2a:79:64:4f:cb:60:72:a4:71:02:19:68: d8:e0:70:25:f7:a4:0f:ef:ab:dd:2d:cd:e1:21:7f:f4:e5:a8: 01:6e:8f:ba:70:71:d7:67:eb:9e:25:5e:73:e1:70:1d:b8:a5: f5:21:ed:a3:99:8a:1c:04:42:44:ec:53:1a:9d:66:3f:6f:46: 6a:9a:77:7c:7c:64:7d:b1:75:cb:29:5a:da:5d:d9:d4:9b:27: d4:33:e9:3d:78:02:60:f3:b4:93:c7:73:92:99:8d:b9:25:01: be:7f:e5:89 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoMyEWgvhvcw9OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MzhhOWNiZWUtM2I3My00Yzg2LWE1YmEtZGE2YmY1YmUyN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCq31sprRInt5zzTk5JIXQWuYabLXCA1FumB LMYoQGL1wM9nM8s1licxCx0Y6U6A9dRg+Oxj0irekql5QYXSgIzCnFQ735lOKFYL lJeH6aRORRJec9gJaYoquQM8i0rf2t2SYFMAOn9C5bXPTifYKOQAAGy463mhSzud 8/XCLoYx8pcxxMnTcQMGzRYiYTRlUgWGddh02HgVghIHqI5reZdqx1csN7+5daQc xHFJD8rNTLdAgHifeP8HCE68p+WI4OJqdtPoj9b8wkvbQ88u46d7uZ3qEpm6rZoJ qzer9uQxTl5ODHk9Y7HPA8+cB8p0fniYrOo4kDy9CFmCj3jY5wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPA1+Lu/4fna+/1rVBjhzKQeLsSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0Mjg4NTEtYzI5Ni0z ZmZkLTgzYWEtNTk2ZTM2Zjg5NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDYhAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAR8upsHeF/gTJMIPrvSqK79zv81zwvk7+4afo7+w8TQLDeDPyakQ4r//P +lxQV7vsfL+SyZAmNNLZaHuHdz6F9VVC8y3VPT8rQlI5buNq9oq1Y6fRFQ4XHnSS 11/r4P809NFZveLf8usayuzXAxgtqXuwZEQ9/KBoBGCnHo9+RGQqL3j1/CK8wGmD 2O6L04sE6L7lVnTMKnlkT8tgcqRxAhlo2OBwJfekD++r3S3N4SF/9OWoAW6PunBx 12frniVec+FwHbil9SHto5mKHARCROxTGp1mP29Gapp3fHxkfbF1yyla2l3Z1Jsn 1DPpPXgCYPO0k8dzkpmNuSUBvn/liQ== -----END CERTIFICATE-----Generated at Wed Aug 6 12:44:21 2025 by rpki-client