$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa File: 466f6df5-9580-3849-bf40-eeaab04c5e4f.roa (raw, json) Hash identifier: OBQTQnHT7lb5UNSIfo/DI23MgXWRzOEvDGAPAFP3Aww= Subject key identifier: 84:F4:DC:79:02:55:B4:EE:82:09:44:7C:11:81:F8:2C:9D:F8:0E:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB2217217CCD7206A8B0B3CCA Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 98.16.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:72:17:cc:d7:20:6a:8b:0b:3c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=8934ec2a-ec04-4d8e-86c7-db616f8349e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:10:ef:9c:a9:68:b7:b5:77:78:de:70:0f: eb:85:70:68:8d:15:7b:85:2b:13:5a:c7:f6:84:2b: 44:ac:75:64:82:97:2d:0e:e4:83:f4:f1:42:de:5d: 1d:13:9f:a0:84:9c:5f:bb:ed:45:f9:93:db:55:c2: 71:d8:29:67:c9:d2:49:ed:05:e4:ce:78:85:90:f4: d2:08:1d:7e:d1:bb:f8:98:9c:2c:20:bf:99:a1:90: 48:20:b8:d0:43:52:82:75:5c:9f:9e:23:2b:f4:f4: 20:0a:76:72:96:68:61:85:f5:67:c7:50:d9:08:87: 7b:f6:e0:4b:cd:a6:7d:c1:7b:bf:5c:63:37:ff:1f: b8:fe:b4:1d:82:0f:dd:da:74:d3:5b:89:94:c5:f5: aa:e1:35:66:c8:e6:f8:94:96:72:b2:c9:60:0c:ce: 75:54:32:24:86:b8:a7:6c:21:ef:04:c5:8b:bb:32: 60:cb:43:38:20:32:b8:a3:83:20:ce:0e:62:8d:e1: 01:6e:a7:da:d4:0d:69:8e:8d:67:e6:bd:5c:89:98: 68:42:96:d8:4b:d7:38:18:5a:9c:a4:1c:5e:68:94: 12:a9:68:6c:25:76:2b:ca:c2:3d:c4:1f:11:ce:15: ed:87:01:cf:a1:9e:8b:75:d6:2d:cc:40:5e:d6:7b: c3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F4:DC:79:02:55:B4:EE:82:09:44:7C:11:81:F8:2C:9D:F8:0E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5f:98:a9:dd:46:d3:34:93:3e:22:55:bd:b1:5d:5c:fb:93: 64:38:e9:21:e6:a4:72:11:bb:09:5a:f6:66:b9:35:b5:b7:b7: bc:f9:20:c0:81:f0:03:64:2c:72:25:d1:d9:07:7b:b7:5f:33: 4f:77:a0:f7:cc:7f:2a:83:58:a9:ef:f4:d0:c7:fe:4d:be:02: a8:cf:0e:52:b0:8d:d3:f6:7f:c0:5d:d1:41:97:2f:c4:c4:1a: 3e:50:0f:6f:a0:6a:a2:04:9b:e1:de:79:ec:29:2a:3c:54:f1: 81:19:73:dc:30:e9:18:22:0e:67:e7:b0:5a:63:14:61:d3:14: d8:54:50:f6:70:be:f5:53:80:98:6a:d3:54:ea:c3:31:d3:81: fc:78:a7:05:02:e0:b6:be:5a:7a:eb:4d:d5:07:8b:e6:b9:4f: 60:34:02:fc:8d:53:02:d1:d9:a0:a3:34:ad:6f:74:14:64:f3: b6:88:aa:4b:6d:3b:a8:56:8c:77:cc:d8:3c:d4:b5:79:3b:ba: 78:78:c2:ea:bf:39:03:1a:e8:22:f5:e2:10:a7:41:fc:e5:2d: 85:ae:85:58:43:64:ef:15:9e:3a:9d:ce:ef:5f:06:3f:9f:f1: 8c:6e:49:46:e3:ba:00:7a:59:72:cc:18:c6:8f:33:ae:ed:0c: a3:fc:2f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXIXzNcgaosLPMowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODkzNGVjMmEtZWMwNC00ZDhlLTg2YzctZGI2MTZmODM0OWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkIQ75ypaLe1d3jecA/rhXBojRV7hSsTWsf2 hCtErHVkgpctDuSD9PFC3l0dE5+ghJxfu+1F+ZPbVcJx2ClnydJJ7QXkzniFkPTS CB1+0bv4mJwsIL+ZoZBIILjQQ1KCdVyfniMr9PQgCnZylmhhhfVnx1DZCId79uBL zaZ9wXu/XGM3/x+4/rQdgg/d2nTTW4mUxfWq4TVmyOb4lJZysslgDM51VDIkhrin bCHvBMWLuzJgy0M4IDK4o4Mgzg5ijeEBbqfa1A1pjo1n5r1ciZhoQpbYS9c4GFqc pBxeaJQSqWhsJXYrysI9xB8RzhXthwHPoZ6LddYtzEBe1nvDLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIT03HkCVbTugglEfBGB+Cyd+A46MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDY2ZjZkZjUtOTU4MC0z ODQ5LWJmNDAtZWVhYWIwNGM1ZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtfmKndRtM0kz4iVb2xXVz7k2Q46SHmpHIRuwla9ma5NbW3t7z5IMCB 8ANkLHIl0dkHe7dfM093oPfMfyqDWKnv9NDH/k2+AqjPDlKwjdP2f8Bd0UGXL8TE Gj5QD2+gaqIEm+HeeewpKjxU8YEZc9ww6RgiDmfnsFpjFGHTFNhUUPZwvvVTgJhq 01TqwzHTgfx4pwUC4La+WnrrTdUHi+a5T2A0AvyNUwLR2aCjNK1vdBRk87aIqktt O6hWjHfM2DzUtXk7unh4wuq/OQMa6CL14hCnQfzlLYWuhVhDZO8Vnjqdzu9fBj+f 8YxuSUbjugB6WXLMGMaPM67tDKP8L+4= -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:17 2025 by rpki-client