$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b624cd06-3f80-33dc-9336-4ce73e3a13da.roa File: b624cd06-3f80-33dc-9336-4ce73e3a13da.roa (raw, json) Hash identifier: XTiBo+rJ56RfLTqMTV7eoqUWlaiOa2yGSGdQUD13Kkc= Subject key identifier: D3:B4:1F:CD:D1:C6:64:E8:F4:73:B5:0A:62:FF:72:4D:34:1B:78:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB3861E0606E9E0686741D900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b624cd06-3f80-33dc-9336-4ce73e3a13da.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 98.17.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:1e:06:06:e9:e0:68:67:41:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=a6fe1a2a-b0a3-4374-a32d-fdebf8c7f8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:16:24:2e:78:f7:a0:a0:6a:3f:65:0d:40:71: 28:04:0f:c2:a2:f2:e5:a5:34:4b:b1:44:eb:4e:ea: 3a:20:70:01:5b:b4:86:fb:c3:61:28:f5:e8:96:7e: 08:aa:ba:20:41:50:4f:13:02:de:3d:e8:8c:3b:7c: ed:fc:6f:b5:77:3d:7a:4a:9b:b6:e0:bc:8c:a7:0f: 5e:f9:41:0e:0a:06:21:26:0f:b7:cd:8b:54:e6:18: 5c:41:3d:86:94:6e:dc:a4:bc:e7:36:43:90:39:33: 67:1f:ef:1e:65:f0:9a:cf:f7:75:27:4f:db:3a:94: 56:a4:6b:c8:ba:c5:cc:cd:01:65:48:fe:6b:04:4a: 96:06:a9:46:6b:fc:39:23:4e:f9:b9:2c:11:d6:fb: ac:77:b0:e3:c4:0a:b8:8e:41:9f:85:9d:f6:37:7b: 3d:3d:e7:ea:5e:2c:b8:44:93:b6:95:92:e9:73:c8: 97:c9:ed:87:da:41:aa:63:ff:5b:35:f2:8b:ae:0a: cb:da:5e:fb:2e:c2:37:ae:a9:02:19:ea:3b:71:c7: ea:2d:93:10:2a:ca:44:6c:81:94:c8:02:11:99:5d: ee:08:e3:8b:a2:14:50:1a:ed:0a:a8:67:0c:ac:b6: 3e:32:21:98:f9:b2:93:71:73:d5:e2:d5:ca:1c:5c: 84:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B4:1F:CD:D1:C6:64:E8:F4:73:B5:0A:62:FF:72:4D:34:1B:78:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b624cd06-3f80-33dc-9336-4ce73e3a13da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b6:ba:78:47:75:d1:e7:4b:04:9c:8d:e2:69:49:a0:19:04: b0:c6:5a:a0:7c:37:ae:73:2a:c1:9c:2a:e1:e5:a7:a0:3f:88: 41:0d:09:67:c9:da:25:5b:f8:ec:fd:0c:e3:f6:01:1b:9e:d1: f5:be:5e:e5:0a:7e:57:14:06:3d:56:5b:6f:0a:36:a7:a5:2d: f2:3e:de:00:c9:50:d0:01:92:43:0d:ee:08:25:ec:43:20:16: 29:1c:46:be:3f:f4:74:a7:89:b4:e5:d3:a2:22:de:0d:18:54: 45:7c:57:1d:7c:a8:1c:26:6f:04:77:e2:f5:6b:d2:98:64:dd: 80:77:a6:0f:1b:f5:fb:62:51:17:11:aa:3b:cd:4e:62:ba:7f: 6b:c0:f5:a0:ac:51:98:3b:7c:1e:c0:ac:ef:c9:ab:cf:b0:27: 4d:7d:9b:64:b8:d5:76:07:f1:55:82:c8:5d:fc:aa:ae:4c:33: 91:7b:86:e1:53:f0:ed:4b:53:41:a6:c8:39:d9:0a:dc:ee:bb: 98:2f:91:08:86:e9:8b:54:08:fd:10:a9:70:1b:6d:8c:47:3c: 80:4a:77:02:be:d8:62:b7:ea:94:1a:ab:e9:96:85:55:8a:c0: 1c:4f:d5:f7:56:81:90:89:31:cf:5d:0f:18:67:bd:51:07:3b: 16:70:75:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhh4GBungaGdB2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk YTZmZTFhMmEtYjBhMy00Mzc0LWEzMmQtZmRlYmY4YzdmOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhYkLnj3oKBqP2UNQHEoBA/CovLlpTRLsUTr Tuo6IHABW7SG+8NhKPXoln4IqrogQVBPEwLePeiMO3zt/G+1dz16Spu24LyMpw9e +UEOCgYhJg+3zYtU5hhcQT2GlG7cpLznNkOQOTNnH+8eZfCaz/d1J0/bOpRWpGvI usXMzQFlSP5rBEqWBqlGa/w5I075uSwR1vusd7DjxAq4jkGfhZ32N3s9PefqXiy4 RJO2lZLpc8iXye2H2kGqY/9bNfKLrgrL2l77LsI3rqkCGeo7ccfqLZMQKspEbIGU yAIRmV3uCOOLohRQGu0KqGcMrLY+MiGY+bKTcXPV4tXKHFyE6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNO0H83RxmTo9HO1CmL/ck00G3hQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjYyNGNkMDYtM2Y4MC0z M2RjLTkzMzYtNGNlNzNlM2ExM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB22unhHddHnSwScjeJpSaAZBLDGWqB8N65zKsGcKuHlp6A/iEENCWfJ 2iVb+Oz9DOP2ARue0fW+XuUKflcUBj1WW28KNqelLfI+3gDJUNABkkMN7ggl7EMg FikcRr4/9HSnibTl06Ii3g0YVEV8Vx18qBwmbwR34vVr0phk3YB3pg8b9ftiURcR qjvNTmK6f2vA9aCsUZg7fB7ArO/Jq8+wJ019m2S41XYH8VWCyF38qq5MM5F7huFT 8O1LU0GmyDnZCtzuu5gvkQiG6YtUCP0QqXAbbYxHPIBKdwK+2GK36pQaq+mWhVWK wBxP1fdWgZCJMc9dDxhnvVEHOxZwdXE= -----END CERTIFICATE-----Generated at Wed Aug 6 16:24:47 2025 by rpki-client