$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/764f9975-eae7-3068-8ff3-cc54d81de699.roa File: 764f9975-eae7-3068-8ff3-cc54d81de699.roa (raw, json) Hash identifier: qnN6mXyEZonMT86kFr0jXow7hObDcHZY1Wm6jhSz5Lw= Subject key identifier: DF:0C:00:21:C0:A8:6E:77:D0:7A:12:15:7A:D2:83:CD:96:41:3A:BC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FBF2D8FB3E97B3447A30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/764f9975-eae7-3068-8ff3-cc54d81de699.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.20.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fb:f2:d8:fb:3e:97:b3:44:7a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=c586a9c1-0d22-44e4-8589-81d2b22c4a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c0:48:0b:29:e1:8d:96:0e:82:aa:cc:0d:2f: 08:ce:d8:4b:00:0a:61:03:4d:1b:b2:36:a6:81:a8: 89:6a:31:dd:88:8d:64:8a:49:08:32:dc:b4:0c:39: 22:37:35:4f:78:5b:4c:d3:bc:e1:19:76:ec:1c:6e: 89:d6:ca:f0:17:60:b3:91:d8:61:47:fa:20:78:45: 90:6a:bd:c9:91:5f:07:13:13:ff:9b:4d:2d:80:13: 5d:ce:5b:d6:9e:b8:e6:42:66:58:e8:bf:02:0d:db: e0:d2:d8:c3:b9:fb:4e:2a:e5:bf:00:07:ac:93:e3: eb:49:89:9e:17:6a:80:49:71:2c:54:e7:79:a5:6f: a4:f7:a6:26:0d:fd:f3:f5:a7:f3:a8:7e:ee:a9:74: d2:44:89:7d:0b:50:75:49:1f:69:4c:c1:84:cb:55: a1:2b:0b:cd:f1:81:3a:2c:93:b1:29:0c:a5:b4:21: 46:83:fa:c7:a5:68:c1:c7:3c:d4:50:3f:45:9d:df: 46:45:93:86:5a:e2:15:46:d2:56:35:ad:e5:af:92: 50:ef:3f:33:4d:f7:7c:63:c4:9f:d1:e5:9c:25:e3: d1:05:9e:2c:df:45:b5:8a:d3:9c:6f:37:74:c7:f3: 80:e4:44:fd:20:85:1d:31:ca:14:22:7c:ed:25:b3: 23:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0C:00:21:C0:A8:6E:77:D0:7A:12:15:7A:D2:83:CD:96:41:3A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/764f9975-eae7-3068-8ff3-cc54d81de699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:43:d9:8b:3d:f3:d3:63:8b:08:e4:12:de:e0:09:ff:e6:19: 3a:a0:f3:a9:2f:c0:6a:0a:07:3e:92:f6:cb:8e:96:40:25:f7: fb:eb:d4:92:07:00:39:c7:e9:49:0d:64:a2:aa:8d:0f:c8:d7: 63:0a:34:d2:a4:b2:bc:29:31:0f:5d:e6:d1:2a:7c:cc:20:f1: 27:0a:66:0d:cd:90:84:ed:02:3b:b6:dd:12:75:ab:86:c3:be: ac:f2:fb:04:fc:e0:71:51:30:e4:d4:42:9e:19:79:e6:b1:3a: ec:16:03:cf:74:8f:05:10:6f:be:94:c3:bf:c6:ac:8e:7d:d9: f5:68:92:ff:43:f3:d0:25:a3:93:33:81:e1:6f:74:27:ae:5c: 0c:98:a9:45:f9:f2:8b:d2:e7:62:82:ca:e7:01:ad:5c:8f:56: 6e:92:48:a8:7f:ce:b1:f3:c3:77:46:cb:33:d5:cb:6d:33:94: b1:bf:80:31:e5:e2:11:e5:78:95:20:03:c3:ab:45:ef:0c:27: 7c:59:79:95:54:b7:82:5a:f4:ad:16:ec:bc:3c:66:60:e2:8e: 45:a9:c4:39:cd:a6:5c:7f:02:00:f6:3b:ba:0b:03:0b:b9:3b: 16:55:5f:43:0d:b4:a3:a7:f1:b0:28:bd:e4:1a:ab:16:4b:c4: f9:9a:ed:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPvy2Ps+l7NEejAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YzU4NmE5YzEtMGQyMi00NGU0LTg1ODktODFkMmIyMmM0YTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8BICynhjZYOgqrMDS8IzthLAAphA00bsjam gaiJajHdiI1kikkIMty0DDkiNzVPeFtM07zhGXbsHG6J1srwF2CzkdhhR/ogeEWQ ar3JkV8HExP/m00tgBNdzlvWnrjmQmZY6L8CDdvg0tjDuftOKuW/AAesk+PrSYme F2qASXEsVOd5pW+k96YmDf3z9afzqH7uqXTSRIl9C1B1SR9pTMGEy1WhKwvN8YE6 LJOxKQyltCFGg/rHpWjBxzzUUD9Fnd9GRZOGWuIVRtJWNa3lr5JQ7z8zTfd8Y8Sf 0eWcJePRBZ4s30W1itOcbzd0x/OA5ET9IIUdMcoUInztJbMjawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8MACHAqG530HoSFXrSg82WQTq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzY0Zjk5NzUtZWFlNy0z MDY4LThmZjMtY2M1NGQ4MWRlNjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtD2Ys989NjiwjkEt7gCf/mGTqg86kvwGoKBz6S9suOlkAl9/vr1JIH ADnH6UkNZKKqjQ/I12MKNNKksrwpMQ9d5tEqfMwg8ScKZg3NkITtAju23RJ1q4bD vqzy+wT84HFRMOTUQp4ZeeaxOuwWA890jwUQb76Uw7/GrI592fVokv9D89Alo5Mz geFvdCeuXAyYqUX58ovS52KCyucBrVyPVm6SSKh/zrHzw3dGyzPVy20zlLG/gDHl 4hHleJUgA8OrRe8MJ3xZeZVUt4Ja9K0W7Lw8ZmDijkWpxDnNplx/AgD2O7oLAwu5 OxZVX0MNtKOn8bAoveQaqxZLxPma7fo= -----END CERTIFICATE-----Generated at Wed Aug 6 05:27:19 2025 by rpki-client