$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa File: bf629dc2-f852-3d47-a607-0e222991c7a9.roa (raw, json) Hash identifier: jvcJk+MxXAUAT3lyBziWuHzTQJSFI4cdLE+p7CBXKOM= Subject key identifier: A3:46:8B:2A:5A:8F:47:0A:3D:AF:39:36:46:D8:59:AA:8B:7D:6A:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22172796A1A714B94CFA800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 98.17.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:72:79:6a:1a:71:4b:94:cf:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=b246dda9-2b2d-465c-abd3-72a14b2c9114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:d0:aa:79:74:24:fe:8a:f6:bb:7f:c2:a5: 4e:7c:8f:d8:6a:c4:59:32:c7:ef:22:d6:f7:13:02: c2:bc:18:ca:10:42:82:ad:18:59:ca:26:56:aa:9d: dd:cc:27:e3:fb:24:33:87:9e:61:fb:3a:1a:c6:27: 78:09:c7:c2:e9:b8:ce:a7:63:6d:bf:ea:fc:d3:26: 89:61:34:6c:80:2b:fa:76:93:b0:06:72:55:03:bb: 53:c1:c3:71:38:03:63:43:a4:8f:8e:a6:76:ab:6a: 16:07:f2:64:2d:bc:7e:31:e9:93:39:ac:e2:d8:fb: 8e:5b:b8:c4:bf:3a:96:9c:58:e6:9c:ae:bc:1a:cc: 5e:e2:0f:7a:d7:3b:df:7c:91:c2:75:ab:e1:47:d2: f6:d3:af:e6:ac:4c:77:c6:d2:c2:12:55:9f:7f:eb: 34:ea:27:1a:ca:54:ec:b8:d7:c7:4c:bd:82:a3:f3: 0b:74:5f:e6:6e:73:ec:87:2d:cf:aa:89:e2:2d:28: 79:a5:6c:ac:d2:f0:cc:2f:d8:2d:8c:53:9d:57:63: 15:3c:4f:93:59:8e:39:d3:88:f7:a0:58:0e:3e:99: 94:66:52:ed:18:19:25:0c:93:b3:b9:92:b7:9b:4f: 15:9e:4c:b2:ed:08:74:db:82:8d:f5:ec:c2:55:65: 63:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:8B:2A:5A:8F:47:0A:3D:AF:39:36:46:D8:59:AA:8B:7D:6A:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf629dc2-f852-3d47-a607-0e222991c7a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ae:f2:50:a9:02:85:9f:87:46:ae:b0:37:c9:08:5b:b1:6d: 83:34:40:9d:c8:bc:cd:e4:05:e2:51:f2:ac:cb:ec:1b:0d:a9: b0:99:24:ba:58:0d:4d:be:69:3c:8f:26:cb:54:4d:bc:4f:8b: 93:ed:ee:82:c7:fe:18:2d:02:df:11:a3:5c:f3:ec:aa:99:60: 0e:b7:f7:b3:a8:42:42:75:5b:0c:3d:08:4f:3d:37:d3:85:09: 01:bf:10:fb:37:f8:a9:90:43:42:fd:d2:b7:f5:ac:2a:73:73: cf:c9:52:bf:e0:cd:78:62:78:1c:21:3c:93:3e:67:bd:54:30: f1:92:74:23:7a:ae:7d:68:20:71:a4:a7:d7:7a:82:cc:35:70: 61:40:ee:03:7d:a9:b3:2b:4f:fc:92:2c:ac:64:70:fc:ad:70: f3:a7:d3:c8:0c:09:93:f2:c9:35:eb:2b:0a:f1:34:9a:4c:8b: cc:7b:0c:f9:de:b2:51:e3:3d:1b:56:a8:ff:2f:ec:eb:7d:29: 5a:cd:61:41:21:c3:f3:28:95:58:3b:46:33:47:94:95:31:2f: 54:1f:01:65:9d:6f:8e:cd:67:67:cb:03:8a:a7:cd:f6:79:75: 0a:26:24:a7:44:79:b6:5e:3e:a7:b7:55:d9:a7:d8:55:63:14: ec:1c:20:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXJ5ahpxS5TPqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjI0NmRkYTktMmIyZC00NjVjLWFiZDMtNzJhMTRiMmM5MTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqfQqnl0JP6K9rt/wqVOfI/YasRZMsfvItb3 EwLCvBjKEEKCrRhZyiZWqp3dzCfj+yQzh55h+zoaxid4CcfC6bjOp2Ntv+r80yaJ YTRsgCv6dpOwBnJVA7tTwcNxOANjQ6SPjqZ2q2oWB/JkLbx+MemTOazi2PuOW7jE vzqWnFjmnK68Gsxe4g961zvffJHCdavhR9L206/mrEx3xtLCElWff+s06icaylTs uNfHTL2Co/MLdF/mbnPshy3PqoniLSh5pWys0vDML9gtjFOdV2MVPE+TWY4504j3 oFgOPpmUZlLtGBklDJOzuZK3m08Vnkyy7Qh024KN9ezCVWVjAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNGiypaj0cKPa85NkbYWaqLfWqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmY2MjlkYzItZjg1Mi0z ZDQ3LWE2MDctMGUyMjI5OTFjN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+u8lCpAoWfh0ausDfJCFuxbYM0QJ3IvM3kBeJR8qzL7BsNqbCZJLpY DU2+aTyPJstUTbxPi5Pt7oLH/hgtAt8Ro1zz7KqZYA6397OoQkJ1Www9CE89N9OF CQG/EPs3+KmQQ0L90rf1rCpzc8/JUr/gzXhieBwhPJM+Z71UMPGSdCN6rn1oIHGk p9d6gsw1cGFA7gN9qbMrT/ySLKxkcPytcPOn08gMCZPyyTXrKwrxNJpMi8x7DPne slHjPRtWqP8v7Ot9KVrNYUEhw/MolVg7RjNHlJUxL1QfAWWdb47NZ2fLA4qnzfZ5 dQomJKdEebZePqe3Vdmn2FVjFOwcIGg= -----END CERTIFICATE-----Generated at Wed Aug 6 13:23:55 2025 by rpki-client