$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51e994a9-e1dd-3a4f-bda4-ccb399cea329.roa File: 51e994a9-e1dd-3a4f-bda4-ccb399cea329.roa (raw, json) Hash identifier: J9WYXRjmWL3BzB6K4kJPNAcbRQFxbLhQyJjCp78JLqE= Subject key identifier: 01:D2:2A:3D:00:D6:37:F2:28:53:39:54:A2:63:AD:E6:1C:B9:EF:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38622257D0ACDBF8C1B5D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51e994a9-e1dd-3a4f-bda4-ccb399cea329.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 98.19.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:22:25:7d:0a:cd:bf:8c:1b:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=2e7995fa-91bf-44ed-be01-d347e5fb0fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4e:e8:28:3a:92:13:28:38:ed:b0:a1:b4:70: 42:b4:8f:ff:cb:25:71:ac:10:39:2e:67:ab:32:ff: c3:cc:1b:02:fb:8d:d0:56:8e:30:b0:49:f2:3a:f1: 15:91:b6:27:2f:f3:2f:68:2c:28:97:5c:6e:ea:88: b1:47:fe:9d:4d:8e:72:f3:88:24:59:d4:58:07:96: 0d:13:90:b9:24:84:f2:93:f7:94:80:3b:1a:8d:84: 48:78:11:38:ca:d8:6e:69:5f:19:8f:40:ac:41:a2: 24:92:3f:24:fa:96:66:2b:77:b3:23:7f:20:d1:90: cb:b0:54:0d:15:1a:56:0a:73:9f:69:47:bd:8d:cb: 12:96:ce:ec:7d:35:63:51:49:56:7d:a5:df:bf:94: 94:76:37:8b:4a:88:57:42:af:bc:12:28:d4:85:ce: 37:9a:5d:7d:53:f4:0f:8b:10:bf:d3:b2:f7:94:9a: 73:97:3e:f4:15:ba:f1:1d:f1:40:b1:67:16:6c:40: 95:04:f7:6d:3d:66:8e:af:8e:f3:c9:52:27:83:bb: 79:86:a7:f8:2a:7a:5d:fe:fb:b9:f6:d1:05:ad:21: 11:56:92:a5:0a:98:ad:e9:cd:ff:27:7c:8f:b1:db: 89:c2:9a:05:36:9a:4d:95:2d:d4:a4:eb:11:b0:c1: 64:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D2:2A:3D:00:D6:37:F2:28:53:39:54:A2:63:AD:E6:1C:B9:EF:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51e994a9-e1dd-3a4f-bda4-ccb399cea329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:14:90:d6:3c:3d:60:b8:5c:b2:09:16:59:3e:11:4b:fa:c7: d6:93:93:a2:5f:c7:cf:0e:8e:31:dd:a1:51:8c:fd:45:16:6b: 6d:ac:0a:6d:03:39:b5:a4:a6:cd:c6:d3:91:e2:0a:1d:6f:fc: dd:c1:88:44:96:d4:ab:10:6d:9a:e9:f6:f4:a6:2a:21:67:9d: 88:51:1c:50:4c:21:4a:fe:aa:d3:1a:71:a2:bf:4a:b1:9d:41: e8:18:0c:8a:77:d1:fb:4e:5e:69:0e:f1:d0:55:bc:5a:7a:24: 13:9b:12:3d:86:d6:41:6e:30:b6:a0:84:f1:c3:83:f3:4d:39: 95:e0:f9:e1:4e:83:51:f1:6b:0a:83:e2:c2:01:6c:fe:f3:a5: f2:c7:29:d6:65:83:9a:08:40:e6:6c:04:ae:b7:97:c6:c2:36: b6:17:63:8d:21:d1:ae:21:70:6d:b4:6b:39:7e:d6:f6:e8:86: 46:a2:02:28:8b:05:33:0d:73:a4:25:eb:22:b6:74:ef:b9:f4: 60:b3:51:44:6f:a2:16:cb:6a:25:84:4a:42:b8:a5:1a:3c:d1: fc:86:c1:25:85:c0:33:1b:1a:2b:e7:30:f0:ad:1e:21:76:6a: 69:df:38:e3:9a:85:76:17:5f:40:0a:65:51:11:65:2e:5b:c8: 66:7c:0d:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiIlfQrNv4wbXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk MmU3OTk1ZmEtOTFiZi00NGVkLWJlMDEtZDM0N2U1ZmIwZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k7oKDqSEyg47bChtHBCtI//yyVxrBA5Lmer Mv/DzBsC+43QVo4wsEnyOvEVkbYnL/MvaCwol1xu6oixR/6dTY5y84gkWdRYB5YN E5C5JITyk/eUgDsajYRIeBE4ythuaV8Zj0CsQaIkkj8k+pZmK3ezI38g0ZDLsFQN FRpWCnOfaUe9jcsSls7sfTVjUUlWfaXfv5SUdjeLSohXQq+8EijUhc43ml19U/QP ixC/07L3lJpzlz70FbrxHfFAsWcWbECVBPdtPWaOr47zyVIng7t5hqf4Knpd/vu5 9tEFrSERVpKlCpit6c3/J3yPsduJwpoFNppNlS3UpOsRsMFkdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHSKj0A1jfyKFM5VKJjreYcue/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTFlOTk0YTktZTFkZC0z YTRmLWJkYTQtY2NiMzk5Y2VhMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwUkNY8PWC4XLIJFlk+EUv6x9aTk6Jfx88OjjHdoVGM/UUWa22sCm0D ObWkps3G05HiCh1v/N3BiESW1KsQbZrp9vSmKiFnnYhRHFBMIUr+qtMacaK/SrGd QegYDIp30ftOXmkO8dBVvFp6JBObEj2G1kFuMLaghPHDg/NNOZXg+eFOg1HxawqD 4sIBbP7zpfLHKdZlg5oIQOZsBK63l8bCNrYXY40h0a4hcG20azl+1vbohkaiAiiL BTMNc6Ql6yK2dO+59GCzUURvohbLaiWESkK4pRo80fyGwSWFwDMbGivnMPCtHiF2 amnfOOOahXYXX0AKZVERZS5byGZ8DX8= -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:49 2025 by rpki-client