$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa File: 3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa (raw, json) Hash identifier: WNWyswj1IaRR6OBFUvMKHDDBTxsDg/n6gGFnqvJO9lg= Subject key identifier: 29:F2:54:78:5A:9F:8E:0A:09:8C:4B:E5:7C:B9:F3:32:9E:4E:E3:37 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CD4A3B96E5F166360B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.23.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cd:4a:3b:96:e5:f1:66:36:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=cf88932b-c06e-4ae0-a7c9-f714b4a68964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:e0:b3:16:d3:82:c2:7d:54:ca:0a:8d:ed: ae:6d:dc:97:22:e1:13:bd:74:9f:c1:ea:93:03:d3: 5a:c2:07:09:8e:23:84:ae:a9:f8:84:a3:0d:ed:1f: b8:05:1f:62:db:26:70:30:0b:73:17:c2:92:21:cd: c1:3b:30:3f:e6:f8:33:f6:22:58:d8:7b:ed:da:c7: 05:59:d0:2e:29:4f:ab:b6:8a:aa:ba:c4:a8:51:d8: 19:bc:11:62:66:ee:a2:a0:43:14:db:fa:19:45:50: 0f:77:16:4b:27:44:92:ce:40:1a:fd:64:61:17:98: ce:de:77:de:bf:bb:9c:1b:4e:57:84:4d:70:11:15: b5:81:f6:e4:ed:b8:a9:7b:8d:63:fc:f1:63:46:71: 96:96:89:44:2b:38:b1:28:57:30:c2:78:e9:0c:6e: 0d:e0:7b:9a:54:b6:57:32:47:45:a2:c5:6d:4f:c7: ed:23:92:81:31:97:c6:71:6b:30:c5:7b:10:bc:6d: 46:0e:70:03:95:87:47:ce:de:fd:87:18:5c:2b:21: a4:2f:07:1e:61:d0:53:ae:0a:3a:e6:df:5f:26:c2: 7f:af:fe:fd:45:76:ce:ce:3d:46:66:f9:a7:74:7f: 54:b7:8a:5d:eb:76:88:77:83:b1:cc:1c:e7:2b:25: 1c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F2:54:78:5A:9F:8E:0A:09:8C:4B:E5:7C:B9:F3:32:9E:4E:E3:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:72:a7:31:45:17:84:e7:58:20:78:1a:4e:fe:31:45:a3:97: b2:44:4d:9e:4d:63:03:1b:62:56:51:fb:2e:59:d6:f6:5f:93: 04:e4:b7:8f:98:43:ab:e7:a8:da:40:c0:e4:36:bb:7d:44:3d: dd:c5:e0:44:a2:b6:c2:13:a3:44:3c:25:f1:e5:d1:9b:30:29: b3:d8:18:b6:ec:47:3e:a5:82:80:2e:a3:49:21:68:38:03:e7: 5f:7c:95:50:bf:d1:3a:e5:9f:0c:ee:2a:f5:1f:9d:8e:78:70: 18:c2:0d:f7:42:b1:85:05:9a:0c:08:43:3f:5a:b1:67:17:a0: 45:8b:2e:8f:87:b8:e3:3b:d0:20:58:7e:69:86:80:ad:10:31: b7:8d:cd:1b:f5:d4:f2:67:91:cc:65:65:2d:bd:10:7b:fb:6d: f4:3a:25:4c:dc:3f:6f:45:dd:3f:c3:09:7d:95:36:ef:1d:42: 28:85:f0:12:3b:d3:e8:4e:ab:17:24:27:2d:38:29:b3:e2:ec: e2:a3:dd:ae:37:25:cf:b0:cf:57:f0:7c:78:68:56:5e:e2:dc: f0:22:67:17:53:89:4b:92:5e:34:2b:d9:91:a4:47:b2:d5:ee: 3c:a0:6f:32:82:e9:8c:fd:a5:b0:c3:86:65:ee:57:1e:d3:44: 2d:ab:52:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoM1KO5bl8WY2C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk Y2Y4ODkzMmItYzA2ZS00YWUwLWE3YzktZjcxNGI0YTY4OTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl43gsxbTgsJ9VMoKje2ubdyXIuETvXSfweqT A9NawgcJjiOErqn4hKMN7R+4BR9i2yZwMAtzF8KSIc3BOzA/5vgz9iJY2Hvt2scF WdAuKU+rtoqqusSoUdgZvBFiZu6ioEMU2/oZRVAPdxZLJ0SSzkAa/WRhF5jO3nfe v7ucG05XhE1wERW1gfbk7bipe41j/PFjRnGWlolEKzixKFcwwnjpDG4N4HuaVLZX MkdFosVtT8ftI5KBMZfGcWswxXsQvG1GDnADlYdHzt79hxhcKyGkLwceYdBTrgo6 5t9fJsJ/r/79RXbOzj1GZvmndH9Ut4pd63aId4OxzBznKyUcxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnyVHhan44KCYxL5Xy58zKeTuM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JiOWQ4MmEtM2FmZi0z MjExLTk2Y2ItYTQ2M2U2Yjg1ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdypzFFF4TnWCB4Gk7+MUWjl7JETZ5NYwMbYlZR+y5Z1vZfkwTkt4+Y Q6vnqNpAwOQ2u31EPd3F4ESitsITo0Q8JfHl0ZswKbPYGLbsRz6lgoAuo0khaDgD 5198lVC/0TrlnwzuKvUfnY54cBjCDfdCsYUFmgwIQz9asWcXoEWLLo+HuOM70CBY fmmGgK0QMbeNzRv11PJnkcxlZS29EHv7bfQ6JUzcP29F3T/DCX2VNu8dQiiF8BI7 0+hOqxckJy04KbPi7OKj3a43Jc+wz1fwfHhoVl7i3PAiZxdTiUuSXjQr2ZGkR7LV 7jygbzKC6Yz9pbDDhmXuVx7TRC2rUvo= -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:02 2025 by rpki-client