$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/582980c6-dd93-3fa3-9146-7e6ac6a45b0a.roa File: 582980c6-dd93-3fa3-9146-7e6ac6a45b0a.roa (raw, json) Hash identifier: bi/gGPnH3hwuG3Gt8+pBwJeY68bHtgNeylgeBRzcNvs= Subject key identifier: AB:A0:93:B5:A2:B2:E4:27:C0:DE:A7:CF:8A:7C:5D:94:9B:43:01:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38621D30BC76D00BCCF3BB4 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/582980c6-dd93-3fa3-9146-7e6ac6a45b0a.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 98.17.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:21:d3:0b:c7:6d:00:bc:cf:3b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=651ebbdc-6930-424b-a500-b53f433a253f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4d:2d:1e:dc:26:31:fe:15:3b:38:04:2d:14: 95:71:40:83:4f:a6:75:5f:33:ab:c4:3e:6c:e6:88: 16:61:d2:a9:e1:f9:98:c0:ed:28:81:6d:5d:9b:b3: 63:ef:db:a1:9c:c1:9e:1a:eb:89:e6:c9:2b:99:1e: c4:2e:99:4a:c5:83:d6:5b:c5:5e:d9:0f:a4:ac:0d: 02:ba:04:e2:8b:72:bd:bf:ef:8d:c6:28:93:06:07: e8:39:dc:e9:ac:de:23:ad:c5:65:1b:76:fe:2d:e2: 44:5b:20:da:a2:15:8e:20:67:ab:c8:d2:3f:f0:76: 37:ee:44:85:6d:5c:ad:b9:6b:dd:2d:5a:da:00:e2: 05:2f:0a:4f:f9:a9:97:5e:3f:e7:e7:b5:00:20:02: 76:37:40:01:13:56:99:74:22:26:51:ac:89:0c:3d: 76:f6:9c:c9:16:14:ae:a4:2b:ed:3a:aa:c7:dd:aa: 78:e7:48:cd:3d:9c:9a:1f:96:38:50:74:dc:63:d4: 5d:30:04:1a:8e:dd:60:d3:39:48:7d:74:4e:c1:12: b8:94:3c:13:5c:7f:92:fa:62:eb:1b:8c:af:58:5b: b7:f8:e9:99:e9:09:83:51:75:62:fa:68:b1:c3:c4: 49:63:30:00:93:41:e2:07:e0:18:12:5c:22:81:99: d0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A0:93:B5:A2:B2:E4:27:C0:DE:A7:CF:8A:7C:5D:94:9B:43:01:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/582980c6-dd93-3fa3-9146-7e6ac6a45b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:16:cf:e9:bf:e9:91:47:3c:f7:12:6a:fd:69:57:98:ee:da: 2a:76:59:7f:a6:f4:31:35:51:e2:0e:0d:86:b3:ee:4f:7f:77: b7:62:7a:c4:06:ef:cf:73:d8:5c:fd:d8:b8:dd:f1:f1:88:8e: 59:b2:1f:10:23:86:bf:4a:6a:7c:22:83:0e:db:d1:b5:d9:50: 4c:9a:86:dd:3c:d1:eb:18:62:6f:7f:34:b0:b1:52:16:a0:a2: 52:a5:ed:d0:69:e9:41:45:f8:c9:8d:ac:f7:e0:f4:3d:81:68: 98:f3:21:48:ed:e9:fd:c8:3d:80:83:96:47:59:06:9b:11:51: d1:ba:16:e2:54:67:d8:bf:d5:1c:8f:b8:25:de:3a:70:b2:dd: ae:16:73:cb:c6:38:cc:31:81:28:65:73:cc:bb:20:02:3f:49: 29:86:3d:d4:a1:be:16:04:f2:5c:f1:1e:ab:55:6e:a5:dc:21: e8:09:f9:1f:5a:4a:7f:9d:1d:f1:59:ff:03:72:d5:4b:0d:0b: a8:8a:31:5b:c0:2e:56:3f:7f:83:17:79:93:5a:6c:5f:47:d3: 6a:b7:3c:3f:7f:10:d4:22:bf:08:5d:13:db:ea:36:83:fa:de: c0:94:dd:f0:af:4d:df:12:6b:bf:21:6a:ae:8d:ac:52:f3:c0: 6f:63:6b:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiHTC8dtALzPO7QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk NjUxZWJiZGMtNjkzMC00MjRiLWE1MDAtYjUzZjQzM2EyNTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k0tHtwmMf4VOzgELRSVcUCDT6Z1XzOrxD5s 5ogWYdKp4fmYwO0ogW1dm7Nj79uhnMGeGuuJ5skrmR7ELplKxYPWW8Ve2Q+krA0C ugTii3K9v++NxiiTBgfoOdzprN4jrcVlG3b+LeJEWyDaohWOIGeryNI/8HY37kSF bVytuWvdLVraAOIFLwpP+amXXj/n57UAIAJ2N0ABE1aZdCImUayJDD129pzJFhSu pCvtOqrH3ap450jNPZyaH5Y4UHTcY9RdMAQajt1g0zlIfXROwRK4lDwTXH+S+mLr G4yvWFu3+OmZ6QmDUXVi+mixw8RJYzAAk0HiB+AYElwigZnQuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKugk7WisuQnwN6nz4p8XZSbQwGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTgyOTgwYzYtZGQ5My0z ZmEzLTkxNDYtN2U2YWM2YTQ1YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhGTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMWz+m/6ZFHPPcSav1pV5ju2ip2WX+m9DE1UeIODYaz7k9/d7diesQG 789z2Fz92Ljd8fGIjlmyHxAjhr9Kanwigw7b0bXZUEyaht080esYYm9/NLCxUhag olKl7dBp6UFF+MmNrPfg9D2BaJjzIUjt6f3IPYCDlkdZBpsRUdG6FuJUZ9i/1RyP uCXeOnCy3a4Wc8vGOMwxgShlc8y7IAI/SSmGPdShvhYE8lzxHqtVbqXcIegJ+R9a Sn+dHfFZ/wNy1UsNC6iKMVvALlY/f4MXeZNabF9H02q3PD9/ENQivwhdE9vqNoP6 3sCU3fCvTd8Sa78haq6NrFLzwG9jax4= -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:23 2025 by rpki-client