$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa File: 8935d049-ac61-3720-adee-5caafdfdacfa.roa (raw, json) Hash identifier: aD1Fa995FN0qgs2xjtf82ta6/J5kPVtBKZtpJFbXjNs= Subject key identifier: F1:D9:DE:C8:D4:01:D7:0E:F0:F9:14:EE:1D:8A:26:7A:9A:01:6C:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A7E7B7C88BDA1DC759BEB76E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 98.20.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:7c:88:bd:a1:dc:75:9b:eb:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=de9b3f12-9193-4da1-9ac8-6127473a51ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:55:b4:55:4d:b7:da:52:a5:62:00:10:1a:18: 75:6c:b2:c1:87:0f:30:e7:c1:2d:49:4a:ec:e1:db: 0e:d0:a5:7f:73:ff:58:ce:1e:0e:28:f5:ef:78:f4: 41:59:f7:9e:87:0b:9d:a9:15:d7:e8:91:3a:89:3b: ad:df:69:51:05:8a:d6:ab:4e:58:1a:d5:49:20:41: 7c:5c:fc:b9:c1:fe:cd:60:82:92:5c:c0:6e:6a:d5: 45:46:13:4a:7e:c1:54:65:0c:7e:7a:d9:5f:8d:0a: f0:83:6b:73:c5:df:2a:a4:59:a0:f4:15:ff:b5:d3: a0:fa:6e:8f:ee:4e:15:6c:c0:b9:3d:89:c4:76:d9: d8:b8:d4:98:32:ee:81:21:04:60:bb:e1:00:6b:24: 97:0a:3b:21:d5:7f:0e:73:d0:6c:45:db:d4:75:44: e9:33:05:5b:94:d6:ce:bc:b4:56:33:9d:49:d7:45: 25:86:7b:b1:16:f2:00:4c:da:1a:da:26:41:b3:b9: 7c:a8:d0:ba:3e:4d:a9:0f:aa:76:67:77:c7:6b:54: fa:f0:cf:9b:fd:5f:98:65:b1:1c:c1:f6:7c:71:63: 41:20:3e:2e:02:8b:ad:8c:77:72:3d:04:ad:d3:d3: 5b:65:dc:a4:63:69:7d:b3:c7:7c:8e:42:b4:cc:c0: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D9:DE:C8:D4:01:D7:0E:F0:F9:14:EE:1D:8A:26:7A:9A:01:6C:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8935d049-ac61-3720-adee-5caafdfdacfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d2:3c:89:45:09:f9:2f:af:3a:bb:ae:b7:47:e5:ce:7e:89: 94:01:af:0e:52:d0:3e:08:68:c9:2e:d1:2f:fd:2d:44:ce:ab: a1:b4:de:bd:e8:73:f3:7c:b8:84:a1:bd:6b:37:30:79:75:11: 9d:4a:f6:71:6f:d3:b3:ab:13:8d:39:b3:34:65:cf:a7:49:bf: bb:57:20:f1:ae:ec:fc:b3:13:40:2e:45:47:f8:db:75:d7:5b: 54:ef:2b:56:77:45:11:fd:8f:64:34:e2:be:f8:90:ce:9c:de: fb:07:5e:c4:af:30:04:1d:66:cd:57:c8:04:2e:d2:10:7e:ad: 1e:1e:3d:23:5f:e8:06:22:58:52:52:44:58:07:3d:1c:f1:bc: bc:f5:74:1b:b6:7c:49:2b:c1:3f:61:6b:10:96:aa:5b:be:20: 2e:a4:7c:66:f6:f9:c3:04:d0:cc:35:a0:a7:66:08:a6:6b:d2: 52:14:74:0a:4a:b7:65:92:fe:af:cd:3a:e3:33:52:ff:94:01: 4e:d2:2c:09:c0:55:76:9a:36:4a:80:78:63:8b:0e:8e:ee:1d: 32:a7:88:57:ff:22:44:96:8d:9a:03:40:5f:ea:ab:bb:8d:41: 76:e8:cb:9e:7b:86:7b:48:bf:bf:d5:3f:e8:30:ec:39:8f:d8: 3a:6c:64:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3yIvaHcdZvrduAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZGU5YjNmMTItOTE5My00ZGExLTlhYzgtNjEyNzQ3M2E1MWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFW0VU232lKlYgAQGhh1bLLBhw8w58EtSUrs 4dsO0KV/c/9Yzh4OKPXvePRBWfeehwudqRXX6JE6iTut32lRBYrWq05YGtVJIEF8 XPy5wf7NYIKSXMBuatVFRhNKfsFUZQx+etlfjQrwg2tzxd8qpFmg9BX/tdOg+m6P 7k4VbMC5PYnEdtnYuNSYMu6BIQRgu+EAaySXCjsh1X8Oc9BsRdvUdUTpMwVblNbO vLRWM51J10UlhnuxFvIATNoa2iZBs7l8qNC6Pk2pD6p2Z3fHa1T68M+b/V+YZbEc wfZ8cWNBID4uAoutjHdyPQSt09NbZdykY2l9s8d8jkK0zMC7CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHZ3sjUAdcO8PkU7h2KJnqaAWwhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODkzNWQwNDktYWM2MS0z NzIwLWFkZWUtNWNhYWZkZmRhY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvSPIlFCfkvrzq7rrdH5c5+iZQBrw5S0D4IaMku0S/9LUTOq6G03r3o c/N8uIShvWs3MHl1EZ1K9nFv07OrE405szRlz6dJv7tXIPGu7PyzE0AuRUf423XX W1TvK1Z3RRH9j2Q04r74kM6c3vsHXsSvMAQdZs1XyAQu0hB+rR4ePSNf6AYiWFJS RFgHPRzxvLz1dBu2fEkrwT9haxCWqlu+IC6kfGb2+cME0Mw1oKdmCKZr0lIUdApK t2WS/q/NOuMzUv+UAU7SLAnAVXaaNkqAeGOLDo7uHTKniFf/IkSWjZoDQF/qq7uN QXboy557hntIv7/VP+gw7DmP2DpsZKw= -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:17 2025 by rpki-client