$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/877abb4a-c6fb-3cc9-82bf-8650167161b6.roa File: 877abb4a-c6fb-3cc9-82bf-8650167161b6.roa (raw, json) Hash identifier: nytAwnFKa0BRK689/Mr2Z3vkhzOWZfiz8VNPaMgXavU= Subject key identifier: 39:FC:AC:90:A3:67:25:A8:99:BB:E2:25:60:82:46:63:C3:00:47:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D458EF80C58F1C0A6525 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/877abb4a-c6fb-3cc9-82bf-8650167161b6.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 98.17.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d4:58:ef:80:c5:8f:1c:0a:65:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=ccc6cad9-43b6-49b0-b3d0-a75853a5ab00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7f:90:d8:6e:1c:5b:96:d5:a1:95:7b:55:13: 82:f4:4d:b4:39:bf:7a:3c:80:88:f6:20:2b:82:4d: 04:f8:47:65:b1:2f:47:66:de:55:40:26:ef:1a:ca: 0b:be:14:9b:1c:9e:03:45:31:bf:93:4f:94:c1:70: bc:47:bf:be:c4:ee:73:8f:a6:81:e1:9f:2e:ee:df: e3:8e:99:ca:26:54:04:9d:40:34:1b:85:46:52:9c: 95:11:f5:b1:38:70:8b:6f:cf:12:e7:1a:ea:a6:c3: 57:13:e8:f9:df:d4:ca:e9:c0:41:1e:b6:30:76:17: ae:d7:37:2e:b9:e3:30:57:f8:31:fc:fb:4e:6c:c7: 11:26:2f:b7:32:53:34:14:59:36:44:25:af:c7:78: 39:c9:f5:44:b5:f3:30:60:49:a2:a2:03:12:cf:01: 84:75:a9:1d:8b:5d:04:1c:72:e6:27:43:55:17:d5: 2a:f8:1c:8c:00:b1:82:00:f4:94:a4:aa:85:f1:c4: 8f:ed:5c:5c:9a:12:4e:a0:41:9d:11:6a:2a:7b:c1: d4:e9:09:de:68:74:57:9a:69:76:6c:7c:c5:7e:34: eb:f6:98:ca:9d:2a:4e:80:1e:be:34:8a:48:ca:0c: ea:2d:69:7c:c6:89:f8:f0:ad:1b:0d:73:9d:1a:5f: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FC:AC:90:A3:67:25:A8:99:BB:E2:25:60:82:46:63:C3:00:47:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/877abb4a-c6fb-3cc9-82bf-8650167161b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:83:11:c1:61:89:8e:d6:34:2e:f0:7a:15:cc:4d:33:19:f0: ef:50:51:e2:70:5e:4f:a8:d6:28:54:88:36:a4:9e:b5:aa:b3: b3:9f:48:c7:e8:91:c0:9b:42:d1:ac:85:da:5d:0a:4b:34:f9: ba:80:a6:b2:89:63:79:44:ce:45:7d:2f:dc:e1:6e:8e:6d:73: 5e:a8:82:f7:4a:b2:3f:99:1b:9a:8c:35:00:01:57:51:3e:51: 34:3a:ba:00:14:11:14:cb:e3:14:85:ef:28:08:af:00:8d:c9: b3:b6:c7:53:4a:fd:46:f3:df:8e:f7:b9:7f:40:d7:b4:1c:f6: b3:9a:d3:1a:e5:ea:4d:89:6c:bb:cc:25:22:cb:3f:51:df:59: 7f:fc:6f:81:c5:b0:82:52:4a:a0:fd:5e:40:9e:33:de:7e:20: 45:6f:71:67:55:2b:be:74:61:66:76:bd:c7:34:4b:ac:93:81: 32:ae:02:b4:b6:51:a8:c7:18:f6:cd:40:40:b9:1e:39:aa:da: 65:8e:e9:59:cd:73:e9:fa:7a:0a:c0:71:ab:9f:3d:e8:5b:33: e3:80:8a:71:06:f3:01:12:bf:7c:7a:9d:8d:30:44:25:10:74: f5:00:46:8a:fe:d3:50:3c:40:f9:d5:71:4e:d3:59:6c:3c:9f: 16:26:c8:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNRY74DFjxwKZSUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk Y2NjNmNhZDktNDNiNi00OWIwLWIzZDAtYTc1ODUzYTVhYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX+Q2G4cW5bVoZV7VROC9E20Ob96PICI9iAr gk0E+EdlsS9HZt5VQCbvGsoLvhSbHJ4DRTG/k0+UwXC8R7++xO5zj6aB4Z8u7t/j jpnKJlQEnUA0G4VGUpyVEfWxOHCLb88S5xrqpsNXE+j539TK6cBBHrYwdheu1zcu ueMwV/gx/PtObMcRJi+3MlM0FFk2RCWvx3g5yfVEtfMwYEmiogMSzwGEdakdi10E HHLmJ0NVF9Uq+ByMALGCAPSUpKqF8cSP7VxcmhJOoEGdEWoqe8HU6QneaHRXmml2 bHzFfjTr9pjKnSpOgB6+NIpIygzqLWl8xon48K0bDXOdGl/UdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDn8rJCjZyWombviJWCCRmPDAEdiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODc3YWJiNGEtYzZmYi0z Y2M5LTgyYmYtODY1MDE2NzE2MWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqDEcFhiY7WNC7wehXMTTMZ8O9QUeJwXk+o1ihUiDaknrWqs7OfSMfo kcCbQtGshdpdCks0+bqAprKJY3lEzkV9L9zhbo5tc16ogvdKsj+ZG5qMNQABV1E+ UTQ6ugAUERTL4xSF7ygIrwCNybO2x1NK/Ubz3473uX9A17Qc9rOa0xrl6k2JbLvM JSLLP1HfWX/8b4HFsIJSSqD9XkCeM95+IEVvcWdVK750YWZ2vcc0S6yTgTKuArS2 UajHGPbNQEC5Hjmq2mWO6VnNc+n6egrAcaufPehbM+OAinEG8wESv3x6nY0wRCUQ dPUARor+01A8QPnVcU7TWWw8nxYmyFg= -----END CERTIFICATE-----Generated at Tue Aug 5 17:24:03 2025 by rpki-client