$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67880de3-678a-3ed2-9b09-075e2377ad48.roa File: 67880de3-678a-3ed2-9b09-075e2377ad48.roa (raw, json) Hash identifier: yXm4FNpg5oQaQHwenHkT+mW71dpQMqFPwppQCHGc5yU= Subject key identifier: 56:86:C3:2D:19:81:FA:A8:A4:E2:83:0F:36:A8:AC:61:E0:BA:D2:9C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CCFDC707608E8F34E100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67880de3-678a-3ed2-9b09-075e2377ad48.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.20.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cc:fd:c7:07:60:8e:8f:34:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=2e356a96-f967-4480-a176-5fa3fd9a89e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ed:9c:b4:f5:f2:dd:c0:93:8b:96:8e:18:80: 92:44:28:67:a3:20:37:f7:a3:cf:92:6e:c0:31:f9: 4b:b2:b6:27:6a:54:7e:a0:5a:1d:80:3d:ff:d0:33: a9:10:e3:5e:d3:29:5d:a3:e6:76:d2:39:35:cf:04: d4:fb:32:c5:8d:af:93:72:d5:99:d1:96:3e:b5:0c: ef:88:56:fa:ad:33:92:1c:74:d7:94:52:e9:62:c2: 79:bd:02:94:6f:31:cb:0e:bc:2a:51:9a:93:52:d1: 8d:5f:4c:dd:d2:49:ff:fd:d7:c1:ff:65:7b:de:ed: 7d:5b:5d:19:3b:e8:85:a8:74:35:fb:da:26:4b:33: 44:4e:65:5f:5b:a6:3f:8b:1e:13:45:f8:9d:2d:f7: ab:ab:b2:f5:ff:c4:45:57:ce:ef:1c:d7:4e:75:ba: 0f:2e:1a:6f:b8:6e:31:78:79:50:d2:33:f6:bd:1e: 4e:1e:ae:6a:81:1b:a3:88:1b:ed:56:fd:ca:7d:9d: e9:14:06:aa:c5:81:3e:51:0d:b5:03:8b:9c:97:40: 34:0b:66:30:3b:de:e9:ef:82:c4:f0:f4:7b:d0:c6: 7d:44:30:59:34:52:fd:c5:fe:5c:7c:72:96:a1:b6: c5:71:e1:f8:23:6e:ae:42:1b:91:56:41:5a:a3:08: 6e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:86:C3:2D:19:81:FA:A8:A4:E2:83:0F:36:A8:AC:61:E0:BA:D2:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67880de3-678a-3ed2-9b09-075e2377ad48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3c:d0:b7:67:f9:0f:fd:86:a9:ac:64:8a:5d:64:0f:3c:f3: ef:b1:03:15:ab:28:5e:5d:b6:52:f1:06:a7:03:b7:cd:2a:0d: 00:e8:0d:83:dd:b0:d2:e9:36:69:a1:21:e0:cc:17:e1:16:fa: 69:37:89:57:91:99:c1:34:5e:83:e2:27:db:f8:1a:aa:b2:c4: e4:08:55:b8:60:9b:07:26:11:7c:83:b0:b6:ad:72:28:b4:6a: 8a:e2:66:85:a0:e0:29:12:da:a8:b4:8f:04:89:f0:07:ff:00: d2:96:ac:b0:10:a2:63:ce:da:4d:57:4c:d0:04:60:20:ca:b2: 51:48:ec:52:e4:c6:64:6e:32:45:87:63:34:32:fb:a7:af:99: 3c:d9:a4:f6:3e:46:8a:15:8c:f5:b9:b2:9a:d6:f2:3f:11:9f: b2:69:12:9e:bb:cb:59:b0:d9:35:ce:ab:3c:1c:c0:24:87:0d: e0:c7:00:c4:e3:f7:c3:6b:03:fb:d0:a1:ed:98:8f:c5:2b:2c: bb:12:3a:a5:1f:ed:27:f3:cb:27:88:fc:71:82:cd:50:8f:46: 32:5a:1d:f3:83:60:57:89:87:dc:5d:e9:bb:a9:28:7b:e3:92: 3e:1b:f2:66:d2:15:39:04:2b:c9:84:b0:fc:2a:02:91:0c:3f: 21:6c:78:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMz9xwdgjo804QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk MmUzNTZhOTYtZjk2Ny00NDgwLWExNzYtNWZhM2ZkOWE4OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+2ctPXy3cCTi5aOGICSRChnoyA396PPkm7A MflLsrYnalR+oFodgD3/0DOpEONe0yldo+Z20jk1zwTU+zLFja+TctWZ0ZY+tQzv iFb6rTOSHHTXlFLpYsJ5vQKUbzHLDrwqUZqTUtGNX0zd0kn//dfB/2V73u19W10Z O+iFqHQ1+9omSzNETmVfW6Y/ix4TRfidLferq7L1/8RFV87vHNdOdboPLhpvuG4x eHlQ0jP2vR5OHq5qgRujiBvtVv3KfZ3pFAaqxYE+UQ21A4ucl0A0C2YwO97p74LE 8PR70MZ9RDBZNFL9xf5cfHKWobbFceH4I26uQhuRVkFaowhu7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaGwy0ZgfqopOKDDzaorGHgutKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjc4ODBkZTMtNjc4YS0z ZWQyLTliMDktMDc1ZTIzNzdhZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY80Ldn+Q/9hqmsZIpdZA888++xAxWrKF5dtlLxBqcDt80qDQDoDYPd sNLpNmmhIeDMF+EW+mk3iVeRmcE0XoPiJ9v4GqqyxOQIVbhgmwcmEXyDsLatcii0 aoriZoWg4CkS2qi0jwSJ8Af/ANKWrLAQomPO2k1XTNAEYCDKslFI7FLkxmRuMkWH YzQy+6evmTzZpPY+RooVjPW5sprW8j8Rn7JpEp67y1mw2TXOqzwcwCSHDeDHAMTj 98NrA/vQoe2Yj8UrLLsSOqUf7SfzyyeI/HGCzVCPRjJaHfODYFeJh9xd6bupKHvj kj4b8mbSFTkEK8mEsPwqApEMPyFseOo= -----END CERTIFICATE-----Generated at Wed Aug 6 12:35:00 2025 by rpki-client