$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d12af04-2386-32b8-bb48-4b8966b6c222.roa File: 2d12af04-2386-32b8-bb48-4b8966b6c222.roa (raw, json) Hash identifier: XY1A7UNqYv7A23H/7Wk4I3xCIx9TwWqLVvB9jn9N49o= Subject key identifier: 21:66:30:F6:18:ED:C8:FB:E2:07:98:74:E8:C2:D2:9A:EC:4A:6A:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CCC560500D194611FAA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d12af04-2386-32b8-bb48-4b8966b6c222.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.18.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cc:c5:60:50:0d:19:46:11:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=b6046d55-c54d-41a0-bca3-6e8aa5d175bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ca:f3:70:c9:6c:66:5c:cd:d9:5c:be:62:6c: 2e:4f:78:b8:3b:e6:db:a4:04:da:34:06:30:ac:44: 1e:d9:91:1e:71:b6:2b:4f:57:c8:2c:48:a9:05:37: 17:cb:4a:c4:11:46:2f:8a:1b:f2:d2:d9:4b:8e:d1: e0:2e:d6:9f:1e:80:6d:37:bd:86:bb:83:cf:8b:bc: 95:32:57:bf:ab:3e:e7:78:86:ef:72:19:ba:4a:eb: df:e0:82:91:19:98:94:07:78:9c:2e:51:12:9d:7e: a1:50:ea:13:35:3a:ef:3a:52:8e:2d:9d:a3:f6:f0: 13:2c:ef:13:98:15:ec:c9:81:9d:57:41:4c:06:37: b2:01:a7:6c:96:df:c5:92:52:da:ae:6c:16:5a:3e: ed:40:92:11:f2:18:79:ac:2c:f1:e9:2b:00:5e:f6: 7f:4b:59:62:eb:99:bd:a7:b2:15:eb:ce:49:c4:f3: 26:83:e4:dc:6f:37:6f:66:22:1e:c4:24:a1:76:dd: 60:96:78:ef:1a:c3:88:ed:68:c4:24:0a:1e:d4:15: f4:21:b3:1c:5a:c9:18:c0:98:0c:45:32:b0:20:aa: 4a:f8:99:f9:df:37:d2:af:42:f7:72:c1:80:78:97: 31:96:7c:08:e9:d5:eb:5c:05:a7:5a:ac:91:b7:69: af:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:66:30:F6:18:ED:C8:FB:E2:07:98:74:E8:C2:D2:9A:EC:4A:6A:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d12af04-2386-32b8-bb48-4b8966b6c222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:40:bd:8e:2e:49:ea:6f:ae:d0:35:23:6c:c0:c2:37:47:2e: 5d:e4:5e:25:45:a5:7d:c6:95:85:12:6f:d0:9b:ef:31:3b:e6: 29:66:a7:ea:c6:6d:cd:c9:cf:35:bc:ca:c8:88:88:9a:1e:08: f8:07:a4:5a:e8:74:1f:2e:f7:8f:ad:44:ca:3d:f5:6e:03:bb: ea:88:cc:df:12:79:4d:94:b6:ac:9b:bd:08:7c:d1:eb:55:d0: a9:93:55:a5:d7:2a:5f:7d:c6:05:60:ff:18:63:f6:12:9e:63: ef:8e:0d:40:44:44:46:ca:e6:bc:5f:f6:28:19:c1:4e:5b:cf: cc:eb:3e:14:85:b0:55:08:12:b8:9d:68:46:99:74:65:cc:4e: 94:2d:22:2e:80:76:9e:b7:83:26:8a:c2:2e:e8:2b:49:45:ba: e4:51:c1:96:bb:dd:f3:3d:ba:a6:eb:1e:a4:19:b5:bd:39:d7: 49:aa:1b:cd:74:60:00:f9:d6:a6:67:e0:86:de:06:e3:0d:52: 8c:c5:d8:1a:6d:41:c2:0a:03:54:96:26:cc:4f:32:6e:45:c6: da:87:64:dc:d6:5e:5b:c0:0d:f2:c6:b6:d5:35:63:6a:bc:16: 7c:b0:45:a7:64:68:23:29:67:33:2c:ea:6a:b9:6f:6f:a6:27: d3:d0:11:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMzFYFANGUYR+qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YjYwNDZkNTUtYzU0ZC00MWEwLWJjYTMtNmU4YWE1ZDE3NWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMrzcMlsZlzN2Vy+YmwuT3i4O+bbpATaNAYw rEQe2ZEecbYrT1fILEipBTcXy0rEEUYvihvy0tlLjtHgLtafHoBtN72Gu4PPi7yV Mle/qz7neIbvchm6Suvf4IKRGZiUB3icLlESnX6hUOoTNTrvOlKOLZ2j9vATLO8T mBXsyYGdV0FMBjeyAadslt/FklLarmwWWj7tQJIR8hh5rCzx6SsAXvZ/S1li65m9 p7IV685JxPMmg+TcbzdvZiIexCShdt1glnjvGsOI7WjEJAoe1BX0IbMcWskYwJgM RTKwIKpK+Jn53zfSr0L3csGAeJcxlnwI6dXrXAWnWqyRt2mvbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFmMPYY7cj74geYdOjC0prsSmoeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQxMmFmMDQtMjM4Ni0z MmI4LWJiNDgtNGI4OTY2YjZjMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhJeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZAvY4uSepvrtA1I2zAwjdHLl3kXiVFpX3GlYUSb9Cb7zE75ilmp+rG bc3JzzW8ysiIiJoeCPgHpFrodB8u94+tRMo99W4Du+qIzN8SeU2UtqybvQh80etV 0KmTVaXXKl99xgVg/xhj9hKeY++ODUBEREbK5rxf9igZwU5bz8zrPhSFsFUIErid aEaZdGXMTpQtIi6Adp63gyaKwi7oK0lFuuRRwZa73fM9uqbrHqQZtb0510mqG810 YAD51qZn4IbeBuMNUozF2BptQcIKA1SWJsxPMm5FxtqHZNzWXlvADfLGttU1Y2q8 FnywRadkaCMpZzMs6mq5b2+mJ9PQEZo= -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:20 2025 by rpki-client