$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa File: b9c73bea-e693-3d79-b258-a76ffb3f2510.roa (raw, json) Hash identifier: NpF9yP1a6BFOzSSuh2KD1Ck6X183p7QlQRjQPzlZIJY= Subject key identifier: E8:5F:3A:1E:F8:DA:78:A0:73:E0:85:E4:55:E7:C2:2C:14:74:CA:05 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D4456C23C4EF91517038 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 98.16.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d4:45:6c:23:c4:ef:91:51:70:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=1bf6cee5-7fc1-447d-bd41-734583cd68cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3a:95:65:ee:03:09:55:73:d4:10:7f:11:45: fc:de:38:14:13:33:31:cc:fe:93:46:35:a7:24:f1: 97:e1:6a:d7:de:08:90:7b:76:57:eb:d3:00:82:9f: 4e:6e:25:fe:e7:96:51:87:c5:4a:bd:ff:05:9e:9b: f4:a1:6c:a6:34:7d:fc:36:b0:b2:f6:cc:6b:3c:41: c7:90:85:38:b4:16:ad:c2:c8:b8:3b:31:4f:2c:f4: 1d:78:85:bb:75:67:a4:8e:ae:25:3a:3f:6d:dc:48: a3:40:63:2a:ee:3a:31:6b:ce:47:af:44:5a:47:53: 7b:7d:52:8b:4f:bb:8b:0e:31:17:47:6c:cc:87:91: b0:fc:92:dc:91:2b:e0:7f:e6:c0:96:69:81:7c:d8: 79:fb:bf:c9:24:d1:cc:bd:74:bf:5f:76:ee:8f:7e: ef:3d:e2:b6:fd:7f:b4:9d:87:af:5b:0f:ab:18:b0: 09:9e:94:32:8c:b9:1e:e5:70:62:ab:a1:67:70:f5: 1d:bb:ab:e4:08:bb:8b:e4:7b:6d:ff:12:b3:ef:bd: 87:05:99:22:14:72:8a:11:f9:fb:ce:cc:a6:d9:43: 4d:32:68:7a:62:d0:de:2a:60:15:96:4e:ce:53:e7: 51:d9:e8:0a:18:70:3f:7b:d6:d1:38:18:9f:9f:3d: 31:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5F:3A:1E:F8:DA:78:A0:73:E0:85:E4:55:E7:C2:2C:14:74:CA:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b9c73bea-e693-3d79-b258-a76ffb3f2510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6e:34:3b:e5:13:98:19:53:fd:20:93:80:39:4d:85:a6:56: af:6d:69:97:04:5e:7a:11:07:58:7d:dc:16:15:a6:4f:92:4d: 4a:57:22:77:3e:8f:e8:8e:37:87:b4:20:8a:3c:7d:17:06:bf: a9:c9:69:8c:d2:cf:55:4f:4f:bb:58:53:df:ed:f3:f2:8a:36: d6:cb:34:62:24:a0:32:b4:8c:80:a5:98:16:a0:ed:de:38:a7: 60:8c:3e:75:96:86:62:09:94:47:2a:e8:b3:b5:a4:f4:25:29: 54:c0:ac:d8:da:e9:1c:fd:e6:e5:3e:ee:73:83:54:a1:92:e5: e7:b9:93:2a:2d:d4:64:dc:13:94:70:b2:b7:f9:6b:61:44:40: 4a:1b:aa:bb:c9:93:c7:c6:39:22:98:c9:4b:db:10:92:e8:8c: 94:b3:2b:e4:ce:7b:85:40:05:5c:d0:4c:99:fe:05:df:be:bf: 20:e1:7e:60:3e:08:a0:f1:d3:c1:29:70:e8:c0:75:35:98:6b: 55:3a:e6:a4:15:0f:b2:ea:14:63:0c:4f:07:00:41:93:ea:e2: 34:e3:bd:85:71:89:35:5c:0a:f2:62:4a:ed:fe:12:e8:11:66: 71:a9:19:f1:da:39:25:60:b1:64:a9:a3:7f:0d:bd:0d:a6:3b: f4:6c:f3:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNRFbCPE75FRcDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MWJmNmNlZTUtN2ZjMS00NDdkLWJkNDEtNzM0NTgzY2Q2OGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjqVZe4DCVVz1BB/EUX83jgUEzMxzP6TRjWn JPGX4WrX3giQe3ZX69MAgp9ObiX+55ZRh8VKvf8Fnpv0oWymNH38NrCy9sxrPEHH kIU4tBatwsi4OzFPLPQdeIW7dWekjq4lOj9t3EijQGMq7joxa85Hr0RaR1N7fVKL T7uLDjEXR2zMh5Gw/JLckSvgf+bAlmmBfNh5+7/JJNHMvXS/X3buj37vPeK2/X+0 nYevWw+rGLAJnpQyjLke5XBiq6FncPUdu6vkCLuL5Htt/xKz772HBZkiFHKKEfn7 zsym2UNNMmh6YtDeKmAVlk7OU+dR2egKGHA/e9bROBifnz0x5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhfOh742nigc+CF5FXnwiwUdMoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjljNzNiZWEtZTY5My0z ZDc5LWIyNTgtYTc2ZmZiM2YyNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGluNDvlE5gZU/0gk4A5TYWmVq9taZcEXnoRB1h93BYVpk+STUpXInc+ j+iON4e0IIo8fRcGv6nJaYzSz1VPT7tYU9/t8/KKNtbLNGIkoDK0jIClmBag7d44 p2CMPnWWhmIJlEcq6LO1pPQlKVTArNja6Rz95uU+7nODVKGS5ee5kyot1GTcE5Rw srf5a2FEQEobqrvJk8fGOSKYyUvbEJLojJSzK+TOe4VABVzQTJn+Bd++vyDhfmA+ CKDx08EpcOjAdTWYa1U65qQVD7LqFGMMTwcAQZPq4jTjvYVxiTVcCvJiSu3+EugR ZnGpGfHaOSVgsWSpo38NvQ2mO/Rs824= -----END CERTIFICATE-----Generated at Wed Aug 6 00:45:37 2025 by rpki-client