$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9432961b-b9f4-3427-913a-57bfde8f4d9f.roa File: 9432961b-b9f4-3427-913a-57bfde8f4d9f.roa (raw, json) Hash identifier: 6BeXTxZw23gWsNeCqapgppjVhrbWxoXbpUK6xTlTB8k= Subject key identifier: 78:1E:05:62:A8:C3:39:F1:FC:AB:CA:C6:3A:AC:4D:7F:43:BA:10:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CCA199A0A98959404C60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9432961b-b9f4-3427-913a-57bfde8f4d9f.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.17.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cc:a1:99:a0:a9:89:59:40:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=969f6db3-2656-4ee6-8055-be2b7b56195b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:34:65:64:34:9d:80:d6:bd:ce:80:55:a4: 1f:e3:9d:a3:3c:6b:eb:46:e8:23:b0:a4:33:79:18: 1c:64:1a:c2:5f:18:b5:76:7d:84:36:23:8d:3c:de: c6:58:cf:e3:69:d6:49:ad:59:8e:87:77:05:55:91: 53:e1:99:dc:cf:1b:d7:0d:63:91:d3:b0:af:8c:10: c0:7a:ce:32:c2:0f:7f:fb:50:93:a5:72:f8:03:68: e1:2d:14:99:91:ed:45:20:89:45:f2:c5:82:6d:63: ae:8e:d4:f8:b2:f6:1b:db:8b:94:8f:0b:1a:46:37: 6d:5a:9d:36:e8:ec:f4:e2:2a:79:5b:a1:7b:e3:33: 07:bb:80:0d:89:90:de:34:be:15:fa:ad:8d:de:f3: 3c:6d:55:15:c9:d4:57:1a:b0:d0:b2:2d:4c:6e:c1: 10:35:fb:8f:bf:fa:ee:c3:1a:08:fd:30:89:e9:b7: 4c:1d:10:c1:25:fc:fb:3f:f7:92:63:fd:6d:45:cc: 76:e9:9a:ad:8e:99:fe:6d:94:d1:ab:50:2c:b2:20: 6b:7c:53:84:61:7c:a7:7c:09:6c:43:76:fb:30:f0: 65:55:1b:1f:a1:4b:6c:f3:af:11:6d:f4:8e:a3:42: 55:50:54:7a:78:e5:a9:ce:5f:e5:86:df:0b:5a:f3: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1E:05:62:A8:C3:39:F1:FC:AB:CA:C6:3A:AC:4D:7F:43:BA:10:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9432961b-b9f4-3427-913a-57bfde8f4d9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f6:22:7a:a2:17:a0:c1:76:64:a8:58:a8:d2:59:77:25:52: b6:ed:20:43:ff:3f:97:4d:5a:f2:86:13:a4:78:9c:d2:05:51: 11:e5:be:a2:5d:f2:88:c5:7b:1e:53:f9:16:65:7a:c6:b1:52: 88:cf:2a:23:5d:85:c3:9e:d6:63:6e:85:81:3a:34:78:f7:91: f8:de:b9:c6:9f:27:6d:2b:5c:e6:d1:a0:37:7d:61:f9:70:d4: f3:f4:9a:e6:61:5d:c4:e5:b4:e5:0c:54:3d:77:dc:25:69:90: b0:9b:0c:3f:84:e0:87:5b:79:93:e6:02:65:ab:0f:f9:40:1f: a0:b1:e7:11:80:97:d0:44:92:4a:79:f5:b4:97:53:d3:88:95: b8:b6:d9:3f:d8:5f:9b:c1:a3:0f:82:98:c1:91:4d:e3:ea:13: 6f:ee:0c:72:05:ea:51:5e:26:ec:ce:4f:08:bf:77:f2:f9:fa: 2d:b5:63:1c:f9:0d:c5:1a:bc:00:d7:f8:9b:88:19:d0:3c:df: 3f:fb:d2:80:ac:5b:c3:43:af:b4:a0:7b:52:e9:ef:ee:11:bb: 34:09:35:04:7e:0e:b4:f0:5f:6c:30:62:01:62:e6:5b:d3:40: 04:58:dd:8c:4d:2a:64:ea:a2:65:77:2e:6c:31:c6:73:d0:dc: 81:03:5a:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMyhmaCpiVlATGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OTY5ZjZkYjMtMjY1Ni00ZWU2LTgwNTUtYmUyYjdiNTYxOTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K40ZWQ0nYDWvc6AVaQf452jPGvrRugjsKQz eRgcZBrCXxi1dn2ENiONPN7GWM/jadZJrVmOh3cFVZFT4ZnczxvXDWOR07CvjBDA es4ywg9/+1CTpXL4A2jhLRSZke1FIIlF8sWCbWOujtT4svYb24uUjwsaRjdtWp02 6Oz04ip5W6F74zMHu4ANiZDeNL4V+q2N3vM8bVUVydRXGrDQsi1MbsEQNfuPv/ru wxoI/TCJ6bdMHRDBJfz7P/eSY/1tRcx26Zqtjpn+bZTRq1AssiBrfFOEYXynfAls Q3b7MPBlVRsfoUts868RbfSOo0JVUFR6eOWpzl/lht8LWvNIsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgeBWKowznx/KvKxjqsTX9DuhDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQzMjk2MWItYjlmNC0z NDI3LTkxM2EtNTdiZmRlOGY0ZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz2InqiF6DBdmSoWKjSWXclUrbtIEP/P5dNWvKGE6R4nNIFURHlvqJd 8ojFex5T+RZlesaxUojPKiNdhcOe1mNuhYE6NHj3kfjeucafJ20rXObRoDd9Yflw 1PP0muZhXcTltOUMVD133CVpkLCbDD+E4IdbeZPmAmWrD/lAH6Cx5xGAl9BEkkp5 9bSXU9OIlbi22T/YX5vBow+CmMGRTePqE2/uDHIF6lFeJuzOTwi/d/L5+i21Yxz5 DcUavADX+JuIGdA83z/70oCsW8NDr7Sge1Lp7+4RuzQJNQR+DrTwX2wwYgFi5lvT QARY3YxNKmTqomV3LmwxxnPQ3IEDWj0= -----END CERTIFICATE-----Generated at Wed Aug 6 00:55:28 2025 by rpki-client