$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d410945-00d3-33e8-9750-df14388cbd3a.roa File: 3d410945-00d3-33e8-9750-df14388cbd3a.roa (raw, json) Hash identifier: AyXzuTV23tU99GQ7lreTNimOXggUUXoBm3//DO5gYZw= Subject key identifier: 82:25:50:D4:DE:48:5C:E4:40:3D:B7:44:2A:52:C1:F4:52:3B:6D:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB3861B5FCFD845430636EDD0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d410945-00d3-33e8-9750-df14388cbd3a.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 98.23.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:1b:5f:cf:d8:45:43:06:36:ed:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=ad570c1d-d2e6-4389-9d74-f9bb30bae99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:61:b3:2d:84:3a:80:b9:e1:23:4e:f0:b0:51: 6e:8a:a7:98:ce:f1:6b:19:de:a2:96:b9:6a:85:ba: a6:e0:01:1e:42:7d:56:dd:a5:16:c9:44:ec:0d:ac: 0c:05:2c:e4:c7:26:70:05:e3:80:9f:94:91:9c:5c: 13:1a:bf:61:2e:ad:cd:dc:d1:22:06:3c:88:b5:00: 96:a3:ed:5f:c6:fb:1e:b3:59:1f:50:31:b5:9d:e0: 02:89:ce:1c:a1:74:93:bc:ca:b5:91:1d:a0:e7:52: 44:52:ee:a0:a0:51:40:e6:7b:4e:ff:d6:55:67:c1: 77:eb:cb:45:28:c8:4b:37:64:18:34:e5:35:1d:fe: 07:5e:90:9b:fb:6d:1b:09:3f:92:c3:3e:67:8f:03: 84:8e:0f:d7:36:4c:bb:98:66:38:94:a3:33:01:44: 87:7f:fb:28:f1:53:c9:53:60:10:e7:fe:9f:65:e8: fd:43:c6:2d:c8:f6:56:cf:03:a9:a4:05:8d:e8:27: 16:01:22:d4:bd:08:0d:96:26:e4:08:06:53:81:f3: 22:af:8a:1a:42:4e:30:41:7e:0c:b3:b1:2d:38:88: f2:e2:76:4e:fb:64:f5:99:67:51:c3:8f:06:ab:77: fc:19:6c:6a:45:7c:d5:9d:c8:12:57:8b:44:d1:2c: ec:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:25:50:D4:DE:48:5C:E4:40:3D:B7:44:2A:52:C1:F4:52:3B:6D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d410945-00d3-33e8-9750-df14388cbd3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:71:5b:c8:39:2c:71:85:4a:d1:d4:f6:17:c3:0b:cf:9d:4b: bf:b8:e3:a8:e2:ee:c1:d2:de:fb:46:85:71:bf:c9:ab:17:5f: c9:1d:13:80:3a:c8:a1:f9:b7:c8:a1:d3:5a:98:bf:06:61:b0: 16:59:2c:ae:2f:06:35:6b:05:6d:4e:da:d5:5d:90:22:e5:f8: c1:cc:a4:e3:17:19:58:cd:56:9f:bc:bd:ae:61:1c:a9:97:46: f4:f0:74:be:7c:84:ea:68:8f:d8:67:96:1e:0d:a1:12:2b:ca: e7:d3:47:07:54:ab:6c:72:7a:21:60:df:b0:93:d4:38:ef:44: ec:52:6e:6c:52:b1:e3:bf:27:50:e1:f0:34:aa:e2:9e:5a:d6: 41:d2:62:61:c4:31:81:96:44:92:7a:e7:24:46:22:82:09:08: e4:a0:1f:07:45:c1:31:fc:d2:fd:78:39:9f:f1:20:2d:33:58: ac:b6:e2:cb:58:0b:46:25:2c:e0:09:be:ee:ac:e7:00:67:9f: 25:a4:16:0e:f1:be:ac:65:72:3d:68:85:88:87:01:0f:26:42: af:5f:15:7d:09:e3:db:97:a0:38:e8:6f:e0:5c:01:c7:7c:6a: 37:3b:18:e4:b5:03:b7:b7:fd:d9:f0:b7:78:ab:70:ea:ce:24: 6a:1b:e3:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhhtfz9hFQwY27dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk YWQ1NzBjMWQtZDJlNi00Mzg5LTlkNzQtZjliYjMwYmFlOTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2GzLYQ6gLnhI07wsFFuiqeYzvFrGd6ilrlq hbqm4AEeQn1W3aUWyUTsDawMBSzkxyZwBeOAn5SRnFwTGr9hLq3N3NEiBjyItQCW o+1fxvses1kfUDG1neACic4coXSTvMq1kR2g51JEUu6goFFA5ntO/9ZVZ8F368tF KMhLN2QYNOU1Hf4HXpCb+20bCT+Swz5njwOEjg/XNky7mGY4lKMzAUSHf/so8VPJ U2AQ5/6fZej9Q8YtyPZWzwOppAWN6CcWASLUvQgNlibkCAZTgfMir4oaQk4wQX4M s7EtOIjy4nZO+2T1mWdRw48Gq3f8GWxqRXzVncgSV4tE0Szs/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIlUNTeSFzkQD23RCpSwfRSO22MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Q0MTA5NDUtMDBkMy0z M2U4LTk3NTAtZGYxNDM4OGNiZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtxW8g5LHGFStHU9hfDC8+dS7+446ji7sHS3vtGhXG/yasXX8kdE4A6 yKH5t8ih01qYvwZhsBZZLK4vBjVrBW1O2tVdkCLl+MHMpOMXGVjNVp+8va5hHKmX RvTwdL58hOpoj9hnlh4NoRIryufTRwdUq2xyeiFg37CT1DjvROxSbmxSseO/J1Dh 8DSq4p5a1kHSYmHEMYGWRJJ65yRGIoIJCOSgHwdFwTH80v14OZ/xIC0zWKy24stY C0YlLOAJvu6s5wBnnyWkFg7xvqxlcj1ohYiHAQ8mQq9fFX0J49uXoDjob+BcAcd8 ajc7GOS1A7e3/dnwt3ircOrOJGob42Y= -----END CERTIFICATE-----Generated at Mon Aug 4 16:12:48 2025 by rpki-client