$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a2f858b-513e-375a-88c7-94e0fe278bba.roa File: 4a2f858b-513e-375a-88c7-94e0fe278bba.roa (raw, json) Hash identifier: wE2WCH+gBKmKtP55BVEKVzMvWWIVVz+IzJEL2QTxsOk= Subject key identifier: B2:1B:82:A0:20:B0:AD:2C:57:C1:B7:B4:21:3D:6E:49:5F:A6:1F:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B4C6114321069C78F4980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a2f858b-513e-375a-88c7-94e0fe278bba.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 98.17.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:4c:61:14:32:10:69:c7:8f:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=00ce3d94-c759-4ee6-becf-0c0baccc33ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:81:e4:c7:21:29:c8:e1:8e:95:7a:51:d0: 64:8d:b8:4b:cc:e9:1d:fb:ed:7f:a7:f4:a4:df:9b: 80:1e:ef:3c:b6:e8:db:66:42:a2:37:35:44:14:02: 19:ba:2b:69:a9:b1:30:c6:fe:09:f3:fc:57:c4:3e: a7:8e:0f:6b:41:c7:64:11:a3:88:ec:96:12:e2:73: 4b:ad:5a:1a:82:14:47:1b:75:ee:d3:c6:de:38:ac: 3a:37:bd:c8:2c:03:c1:cc:fe:42:ef:43:02:60:33: 59:8f:9d:ac:aa:a0:2e:7b:84:5a:cc:fa:3f:12:3d: cb:4b:7d:7d:10:74:8f:ef:56:d0:78:8e:9d:21:0c: b3:49:30:d7:f2:a0:ae:8e:f0:93:1c:38:87:0e:5e: 86:16:19:3d:21:55:c8:1c:69:78:21:c3:12:98:3e: 69:97:7c:b2:f7:55:c0:be:ec:8b:8f:2a:7c:15:c8: 5b:f8:bf:05:20:14:1e:bb:5b:bd:9c:c5:10:7e:4b: ed:38:37:c7:03:96:55:a9:e7:3a:37:8e:a8:78:f6: 0e:52:15:ad:de:03:1f:94:44:97:f4:76:0a:4e:d4: ce:5c:36:b4:3f:06:b7:ab:c9:a7:7d:e8:89:d2:c6: b6:f6:64:53:3a:01:97:8a:db:c4:70:79:f2:ed:c8: 49:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1B:82:A0:20:B0:AD:2C:57:C1:B7:B4:21:3D:6E:49:5F:A6:1F:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a2f858b-513e-375a-88c7-94e0fe278bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d7:b1:cd:a8:02:78:41:97:26:8f:48:16:d8:ef:ec:a7:17: d8:ad:f0:33:40:72:fc:08:69:6a:14:60:d0:57:07:84:1e:fa: 71:97:c8:3b:aa:b5:c6:63:3f:6a:44:6c:5a:14:b6:ff:81:57: 9d:98:cb:4e:b8:db:c1:81:7e:84:3c:ef:d6:dd:32:be:36:eb: b5:59:a0:66:5d:32:0a:98:b0:16:df:c5:54:a1:a4:28:2b:65: 00:86:b5:bd:3a:08:a7:d9:27:ac:b9:62:5a:5c:2d:e6:14:0d: 8b:8b:94:5a:6f:a7:f1:b4:09:1e:46:c8:0b:1d:81:99:3c:06: 95:8e:9a:5a:d5:e8:d1:a7:15:4f:b7:10:00:20:f4:5e:87:6a: cd:4b:84:c6:38:a6:f2:89:25:a3:5e:e7:7e:42:4b:1c:00:bf: 3c:9c:94:52:9b:cb:b1:7b:1c:44:3c:98:b5:ee:39:c1:95:fd: 2b:a7:c9:41:bf:1f:81:2b:7b:d2:77:17:d8:9c:ee:b6:54:02: 2f:63:0c:02:5b:39:ca:26:da:c8:28:61:7f:da:db:51:80:bc: ff:56:3a:0b:0b:16:17:c9:fe:10:2a:d2:42:08:89:42:fb:c0: 9d:0c:25:4b:f1:0e:9c:4e:f0:91:1b:5a:16:62:fb:18:0b:89: d5:ff:88:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC0xhFDIQacePSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MDBjZTNkOTQtYzc1OS00ZWU2LWJlY2YtMGMwYmFjY2MzM2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOWB5MchKcjhjpV6UdBkjbhLzOkd++1/p/Sk 35uAHu88tujbZkKiNzVEFAIZuitpqbEwxv4J8/xXxD6njg9rQcdkEaOI7JYS4nNL rVoaghRHG3Xu08beOKw6N73ILAPBzP5C70MCYDNZj52sqqAue4RazPo/Ej3LS319 EHSP71bQeI6dIQyzSTDX8qCujvCTHDiHDl6GFhk9IVXIHGl4IcMSmD5pl3yy91XA vuyLjyp8Fchb+L8FIBQeu1u9nMUQfkvtODfHA5ZVqec6N46oePYOUhWt3gMflESX 9HYKTtTOXDa0Pwa3q8mnfeiJ0sa29mRTOgGXitvEcHny7chJUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIbgqAgsK0sV8G3tCE9bklfph/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGEyZjg1OGItNTEzZS0z NzVhLTg4YzctOTRlMGZlMjc4YmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/Xsc2oAnhBlyaPSBbY7+ynF9it8DNAcvwIaWoUYNBXB4Qe+nGXyDuq tcZjP2pEbFoUtv+BV52Yy06428GBfoQ879bdMr4267VZoGZdMgqYsBbfxVShpCgr ZQCGtb06CKfZJ6y5YlpcLeYUDYuLlFpvp/G0CR5GyAsdgZk8BpWOmlrV6NGnFU+3 EAAg9F6Has1LhMY4pvKJJaNe535CSxwAvzyclFKby7F7HEQ8mLXuOcGV/SunyUG/ H4Ere9J3F9ic7rZUAi9jDAJbOcom2sgoYX/a21GAvP9WOgsLFhfJ/hAq0kIIiUL7 wJ0MJUvxDpxO8JEbWhZi+xgLidX/iO4= -----END CERTIFICATE-----Generated at Mon Aug 4 16:13:52 2025 by rpki-client