$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e584fb4-55e6-349d-a4a2-854550eeff65.roa File: 9e584fb4-55e6-349d-a4a2-854550eeff65.roa (raw, json) Hash identifier: qdTLJ1BUsRS7eh/IHnaHjeyKWuYn9a5/fyRPIh0x0D8= Subject key identifier: 6C:05:96:9E:F6:27:21:AA:F4:CF:79:EE:D0:99:48:D0:E8:31:FF:58 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DCCC77E38DBDBBEC7100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e584fb4-55e6-349d-a4a2-854550eeff65.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 98.21.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:dc:cc:77:e3:8d:bd:bb:ec:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=4b706112-23a5-46b9-afa8-3aac8b4448db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f4:7e:68:53:4c:55:5b:97:6b:a5:72:8f:92: 4d:64:f1:7f:48:8d:e4:85:28:b9:6d:77:0f:d5:3e: 01:19:88:b5:45:c3:6b:33:cc:3b:13:c4:ad:17:e8: fe:7c:31:8c:b6:84:a1:e0:ef:05:58:b5:4c:c7:ae: c6:ea:8d:b9:bc:fb:f5:48:69:bb:6e:ac:c9:c2:7c: aa:d3:10:d8:df:ea:f5:71:0c:0b:19:56:b9:49:30: 74:e3:0b:34:86:31:71:3f:89:2f:e8:78:36:18:69: 4a:81:f6:67:b4:98:0d:95:5f:f1:96:5f:fd:8a:f8: 85:e4:7e:74:f8:ce:c8:24:aa:c7:8c:b4:04:73:58: 4a:50:52:fd:be:c6:ec:dc:be:84:70:6b:f4:8e:e5: dc:ab:12:1b:0c:29:25:e0:b1:cf:05:7a:60:d2:ea: 58:02:d8:0c:60:b0:03:3e:4f:a1:fd:e7:7b:30:54: 6f:a1:52:5d:7e:11:d0:8f:66:6d:d2:3d:83:8d:cd: 3c:89:f1:f9:cd:07:9c:13:b1:81:5b:56:fd:fa:fd: e7:36:7d:46:fb:b8:88:46:34:3e:43:37:ad:55:2d: e9:df:55:26:d5:3b:52:db:d8:26:d1:ac:34:78:e3: ad:9d:0e:2f:9d:5c:fe:f0:12:99:be:89:e5:1b:94: 6b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:05:96:9E:F6:27:21:AA:F4:CF:79:EE:D0:99:48:D0:E8:31:FF:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e584fb4-55e6-349d-a4a2-854550eeff65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:41:db:3c:36:aa:0d:f6:ce:2f:e2:03:cf:50:5b:b3:3c:24: d3:09:90:86:27:2b:44:86:e2:2f:2a:0d:24:78:0b:e8:6b:4b: c5:4a:ef:e6:37:13:b1:7a:62:03:c8:1e:06:ea:5a:c7:9d:cc: 33:e3:df:d1:b8:9f:58:0b:5d:40:fe:1d:2d:5e:56:44:a7:a6: 0a:3e:76:db:77:9f:43:93:71:a7:0b:a1:07:8d:36:d2:d4:95: d4:7d:26:aa:88:2d:bc:e5:29:1b:50:cc:35:a0:b8:aa:8d:db: ae:07:0e:b6:c5:8a:e2:bd:48:37:d6:e0:ce:ad:4a:c0:e8:4b: a8:5d:88:bb:65:4c:7b:5a:e6:ff:14:09:e8:4b:2d:53:53:50: 25:a3:10:65:e2:87:10:01:46:71:4e:6f:ff:55:2f:16:3b:32: 01:13:7f:9f:34:8d:98:2e:51:d2:93:79:59:b3:7c:d1:22:d1: 84:8f:1c:01:98:7b:98:02:63:c0:a9:d6:8f:91:bb:60:fa:24: f5:8f:c7:f9:82:d4:56:86:fc:a3:05:3e:28:f9:af:5a:e9:b4: e7:03:8b:b6:28:e8:95:a6:52:74:ad:de:b2:5e:00:fd:09:5f: ed:aa:c6:14:98:e7:5c:14:a7:cf:f7:2e:b9:b5:3c:e7:f5:ce: ed:3f:a5:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNzMd+ONvbvscQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NGI3MDYxMTItMjNhNS00NmI5LWFmYTgtM2FhYzhiNDQ0OGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfR+aFNMVVuXa6Vyj5JNZPF/SI3khSi5bXcP 1T4BGYi1RcNrM8w7E8StF+j+fDGMtoSh4O8FWLVMx67G6o25vPv1SGm7bqzJwnyq 0xDY3+r1cQwLGVa5STB04ws0hjFxP4kv6Hg2GGlKgfZntJgNlV/xll/9iviF5H50 +M7IJKrHjLQEc1hKUFL9vsbs3L6EcGv0juXcqxIbDCkl4LHPBXpg0upYAtgMYLAD Pk+h/ed7MFRvoVJdfhHQj2Zt0j2Djc08ifH5zQecE7GBW1b9+v3nNn1G+7iIRjQ+ QzetVS3p31Um1TtS29gm0aw0eOOtnQ4vnVz+8BKZvonlG5RrbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwFlp72JyGq9M957tCZSNDoMf9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWU1ODRmYjQtNTVlNi0z NDlkLWE0YTItODU0NTUwZWVmZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRB2zw2qg32zi/iA89QW7M8JNMJkIYnK0SG4i8qDSR4C+hrS8VK7+Y3 E7F6YgPIHgbqWsedzDPj39G4n1gLXUD+HS1eVkSnpgo+dtt3n0OTcacLoQeNNtLU ldR9JqqILbzlKRtQzDWguKqN264HDrbFiuK9SDfW4M6tSsDoS6hdiLtlTHta5v8U CehLLVNTUCWjEGXihxABRnFOb/9VLxY7MgETf580jZguUdKTeVmzfNEi0YSPHAGY e5gCY8Cp1o+Ru2D6JPWPx/mC1FaG/KMFPij5r1rptOcDi7Yo6JWmUnSt3rJeAP0J X+2qxhSY51wUp8/3Lrm1POf1zu0/pWM= -----END CERTIFICATE-----Generated at Wed Aug 6 10:18:02 2025 by rpki-client