$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d6ae40e-495d-3a03-9fde-48b345b15de1.roa File: 8d6ae40e-495d-3a03-9fde-48b345b15de1.roa (raw, json) Hash identifier: KY7ORpnNG7SU1rEa9B6J+Q5KTFI7K7/AsLTqrnCyEE4= Subject key identifier: 06:91:94:35:24:46:9B:85:AA:BE:4F:74:9E:45:F9:47:A9:28:09:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38621C0A0D172B6720400C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d6ae40e-495d-3a03-9fde-48b345b15de1.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 98.21.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:21:c0:a0:d1:72:b6:72:04:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=672b92f1-8fd1-43d5-a181-5140147c9f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:61:ab:e1:a8:85:ac:02:5e:ad:9a:09:66:79: 64:c7:46:91:4b:ce:4e:f0:f6:74:7c:db:dd:82:0c: e6:29:78:c2:b0:f6:d1:5e:0a:c9:18:47:2f:2b:d7: a8:3f:70:c8:dc:22:d4:d0:51:36:4e:da:40:7b:99: e9:04:a4:db:9c:23:61:20:48:f0:43:34:be:b5:37: 13:7b:87:7c:ac:bd:d0:47:55:22:e2:03:68:f3:85: c4:3a:ff:e9:7e:05:55:57:5d:b1:b9:88:2b:16:6a: 82:1b:a0:72:a9:f5:25:5b:b6:d2:91:22:44:c3:78: 96:cd:cc:e4:04:f3:72:4c:2b:85:a8:f2:bc:87:58: ef:0f:0f:e7:7b:28:31:d8:49:6d:54:dd:50:40:77: e6:41:c3:98:22:a2:c0:ef:dd:cb:0f:5e:6d:8a:5c: 68:52:66:2b:42:98:1e:a8:7b:86:78:69:14:2e:ac: 75:ad:58:f6:29:1b:f0:d7:40:37:20:38:50:b5:bb: 41:4a:02:b8:0c:5f:10:6e:c9:3a:d1:e6:90:96:d5: 1a:7c:ec:15:aa:c7:96:a6:02:29:5c:79:d2:80:2f: f9:12:0c:0c:cd:01:f6:b1:39:04:67:22:8b:a3:ce: ee:74:7c:af:38:46:ac:c8:96:97:8e:53:31:09:47: 12:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:91:94:35:24:46:9B:85:AA:BE:4F:74:9E:45:F9:47:A9:28:09:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d6ae40e-495d-3a03-9fde-48b345b15de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:63:8b:00:26:98:bc:e7:33:99:ce:40:7e:f2:71:6d:2e:1b: 0d:6c:7c:34:1e:f4:b7:6b:78:3a:3f:b4:4c:cd:72:40:dc:82: b3:42:df:fb:76:80:4a:f5:b9:20:24:e2:18:12:b9:4a:e1:27: 57:bd:cd:00:54:1d:e6:c2:fe:7b:9e:e5:bb:91:38:74:32:48: 8f:9a:d0:22:83:c1:40:1c:65:39:51:9f:6a:80:fe:ac:60:b0: e2:fa:31:c5:dd:af:fe:ec:2a:f4:45:73:17:79:0f:af:93:b6: 1e:8c:32:7a:05:c8:ea:07:da:6b:c4:8c:e4:4a:bd:72:ef:82: 2d:2d:f0:79:c6:0d:11:e9:49:8d:be:c1:b2:c4:88:19:23:2b: 0b:d1:8f:cb:ef:86:05:5b:bf:0b:44:d1:77:a2:d4:b4:a8:df: dd:84:f3:ca:65:e5:e3:64:d4:05:ed:58:fc:6d:cd:d1:a3:98: 6d:4f:97:2e:33:15:23:e8:cd:81:03:d5:a8:7a:3d:29:00:08: 3f:2b:b3:3f:fc:0e:a6:5f:2b:63:4c:4e:39:c1:6d:8b:fa:00: 59:ba:95:70:45:6d:f9:15:6f:39:b5:ab:5e:5c:bd:de:40:bd: 3b:d0:a9:81:a5:34:54:8b:bf:b6:9a:08:fc:20:64:e7:1b:4e: 2f:76:07:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiHAoNFytnIEAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk NjcyYjkyZjEtOGZkMS00M2Q1LWExODEtNTE0MDE0N2M5ZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWGr4aiFrAJerZoJZnlkx0aRS85O8PZ0fNvd ggzmKXjCsPbRXgrJGEcvK9eoP3DI3CLU0FE2TtpAe5npBKTbnCNhIEjwQzS+tTcT e4d8rL3QR1Ui4gNo84XEOv/pfgVVV12xuYgrFmqCG6ByqfUlW7bSkSJEw3iWzczk BPNyTCuFqPK8h1jvDw/neygx2EltVN1QQHfmQcOYIqLA793LD15tilxoUmYrQpge qHuGeGkULqx1rVj2KRvw10A3IDhQtbtBSgK4DF8Qbsk60eaQltUafOwVqseWpgIp XHnSgC/5EgwMzQH2sTkEZyKLo87udHyvOEasyJaXjlMxCUcSQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaRlDUkRpuFqr5PdJ5F+UepKAnOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGQ2YWU0MGUtNDk1ZC0z YTAzLTlmZGUtNDhiMzQ1YjE1ZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhViMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpjiwAmmLznM5nOQH7ycW0uGw1sfDQe9LdreDo/tEzNckDcgrNC3/t2 gEr1uSAk4hgSuUrhJ1e9zQBUHebC/nue5buROHQySI+a0CKDwUAcZTlRn2qA/qxg sOL6McXdr/7sKvRFcxd5D6+Tth6MMnoFyOoH2mvEjORKvXLvgi0t8HnGDRHpSY2+ wbLEiBkjKwvRj8vvhgVbvwtE0Xei1LSo392E88pl5eNk1AXtWPxtzdGjmG1Ply4z FSPozYED1ah6PSkACD8rsz/8DqZfK2NMTjnBbYv6AFm6lXBFbfkVbzm1q15cvd5A vTvQqYGlNFSLv7aaCPwgZOcbTi92B2A= -----END CERTIFICATE-----Generated at Mon Aug 4 16:05:19 2025 by rpki-client