$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca8ad885-891a-3218-b71b-69d42f35fd5c.roa File: ca8ad885-891a-3218-b71b-69d42f35fd5c.roa (raw, json) Hash identifier: LqdPE1wbjok43KbxeRltKJgZRv3LjwmNtFgsyXBrYFM= Subject key identifier: 99:99:9B:3F:51:2C:CC:2E:39:25:ED:12:12:62:61:D5:DF:53:79:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22125120039C43A9A571800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca8ad885-891a-3218-b71b-69d42f35fd5c.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 98.18.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:25:12:00:39:c4:3a:9a:57:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=90e84b16-6ab7-41c4-9088-1bce033e0cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:8a:a4:f1:f0:43:78:ac:1f:0a:02:7f:a3: ec:00:cc:63:2e:26:be:fc:85:d7:dd:39:df:f8:ec: 9b:ca:cb:f6:8a:6c:ed:99:1f:35:40:65:13:11:05: 0f:fb:01:5a:c9:0a:29:d7:96:97:cc:e3:78:5a:b6: 56:4e:d0:d2:82:83:03:27:37:7d:69:ca:cc:8a:af: 0f:cd:6d:8a:81:fc:43:57:61:a1:d0:dd:75:8d:c8: de:22:37:d5:75:b8:b1:d6:41:d7:48:88:a5:c2:f1: 68:a1:78:66:65:c8:7b:b4:8a:2b:e8:6f:41:a3:8e: 89:c9:9c:15:0f:95:c4:c1:a8:0c:79:7b:4c:ed:26: 83:3e:27:b6:90:45:f6:8a:09:23:9d:96:00:67:43: f0:d3:84:98:38:3d:78:24:72:f1:50:f2:73:6b:70: 36:cb:4b:fc:ec:ff:59:40:26:2c:a4:43:2a:20:20: 58:c5:b5:5e:78:e8:d5:aa:ec:a0:3b:1e:e0:6a:0d: 06:97:d0:aa:c4:79:d8:d7:d5:29:9c:5e:1d:73:46: 96:36:8f:40:d6:4a:f7:db:f9:e4:a5:00:81:40:49: af:ad:1d:18:b1:8d:40:d0:6f:47:57:89:68:f5:ef: ea:db:f0:e2:43:f1:c0:44:4f:71:0b:74:75:b6:1e: a1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:99:9B:3F:51:2C:CC:2E:39:25:ED:12:12:62:61:D5:DF:53:79:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca8ad885-891a-3218-b71b-69d42f35fd5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a7:e1:3b:67:60:f0:d4:bc:f1:d5:79:3d:ac:33:99:5c:74: 7c:54:d6:15:9e:43:72:64:9b:23:4f:5b:fd:26:c1:b0:64:ef: ec:82:db:1a:e1:00:4f:07:bd:7c:06:91:9b:c1:7a:26:d3:59: b0:0c:67:17:ce:b4:47:92:f7:1f:fe:23:1b:30:d7:bc:10:10: fd:ed:58:67:1f:0d:6a:bc:76:23:01:e2:34:34:ab:3f:5e:ed: fb:ab:91:1d:7d:ba:53:76:f1:86:d4:1b:76:3d:95:35:fe:ad: 3d:af:7d:bd:79:41:27:24:9e:d7:3f:66:ab:43:f6:32:9b:87: 18:ab:fe:2d:63:eb:d6:93:2a:85:4d:63:d5:5d:50:d7:3a:21: 69:0e:14:7d:a0:42:58:ba:bd:b7:e6:4f:2d:37:cd:9e:e2:a4: be:38:53:9c:67:67:36:c6:bb:ad:ca:6a:2d:44:ec:1d:a9:f0: 5c:78:7b:a1:92:a5:49:4e:0e:e8:6b:43:f1:90:57:91:9b:8f: 48:93:a8:2e:9c:0c:3d:d2:a5:12:26:d9:e0:5d:0b:d9:09:d9: 37:58:99:ac:33:1e:f0:e5:6d:39:ae:7e:50:bd:cb:66:3e:21: 50:2f:a2:df:68:cf:d7:c7:6c:a9:1a:a7:53:d8:81:be:e5:89: 7c:9e:6c:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISUSADnEOppXGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTBlODRiMTYtNmFiNy00MWM0LTkwODgtMWJjZTAzM2UwY2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9yKpPHwQ3isHwoCf6PsAMxjLia+/IXX3Tnf +Oybysv2imztmR81QGUTEQUP+wFayQop15aXzON4WrZWTtDSgoMDJzd9acrMiq8P zW2KgfxDV2Gh0N11jcjeIjfVdbix1kHXSIilwvFooXhmZch7tIor6G9Bo46JyZwV D5XEwagMeXtM7SaDPie2kEX2igkjnZYAZ0Pw04SYOD14JHLxUPJza3A2y0v87P9Z QCYspEMqICBYxbVeeOjVquygOx7gag0Gl9CqxHnY19UpnF4dc0aWNo9A1kr32/nk pQCBQEmvrR0YsY1A0G9HV4lo9e/q2/DiQ/HARE9xC3R1th6hZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmZmz9RLMwuOSXtEhJiYdXfU3kcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E4YWQ4ODUtODkxYS0z MjE4LWI3MWItNjlkNDJmMzVmZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6n4TtnYPDUvPHVeT2sM5lcdHxU1hWeQ3JkmyNPW/0mwbBk7+yC2xrh AE8HvXwGkZvBeibTWbAMZxfOtEeS9x/+Ixsw17wQEP3tWGcfDWq8diMB4jQ0qz9e 7furkR19ulN28YbUG3Y9lTX+rT2vfb15QSckntc/ZqtD9jKbhxir/i1j69aTKoVN Y9VdUNc6IWkOFH2gQli6vbfmTy03zZ7ipL44U5xnZzbGu63Kai1E7B2p8Fx4e6GS pUlODuhrQ/GQV5Gbj0iTqC6cDD3SpRIm2eBdC9kJ2TdYmawzHvDlbTmuflC9y2Y+ IVAvot9oz9fHbKkap1PYgb7liXyebM8= -----END CERTIFICATE-----Generated at Wed Aug 6 11:06:35 2025 by rpki-client