$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d118df3f-794e-3228-96d4-47a65b0baef0.roa File: d118df3f-794e-3228-96d4-47a65b0baef0.roa (raw, json) Hash identifier: O7m8SN4kWeH1rQK7Z5QYxEsd1L4wHiIfVg4fvJ9K5/M= Subject key identifier: 56:43:E1:E9:94:6C:F0:DE:CC:35:62:CB:9C:86:44:8E:B8:08:7C:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB2212660FE806A194DF13940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d118df3f-794e-3228-96d4-47a65b0baef0.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 98.16.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:26:60:fe:80:6a:19:4d:f1:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=8cd99402-ea71-418d-ba24-11661a1db64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:d9:f9:67:7e:a1:95:bd:e7:b2:00:63:7d: 15:0d:59:a8:72:50:8e:fd:d1:f8:6c:53:fe:06:a8: f6:c5:ff:ef:81:6c:e7:48:0f:5c:9e:49:00:a3:d1: 36:7c:c1:e2:c1:08:4c:5b:d2:5f:4f:f8:26:a4:79: d2:85:28:74:42:91:e8:6b:53:4a:cf:25:3c:50:68: de:3d:27:a9:da:41:e6:81:1a:7a:bc:b5:50:bc:3b: 9c:51:35:06:55:36:da:94:f5:dc:c6:b6:8f:b3:d8: df:dc:33:64:1a:7f:fe:3d:89:1d:58:00:12:6e:9a: af:e6:4c:10:57:1b:cf:17:d5:dd:f7:68:e2:6f:47: b2:fb:2c:67:ca:fc:2b:31:01:10:e4:b4:66:bc:20: 1f:73:b3:31:1a:0e:9f:86:84:a9:8f:77:d0:6f:16: db:fb:fe:17:4a:08:dc:88:b3:ee:f5:89:f1:5a:5e: 5c:f2:c0:60:2d:9d:54:1e:49:a6:f5:e3:4d:5a:cd: e7:03:5b:0e:e6:91:41:b3:5d:91:90:cb:98:26:6d: 26:7e:b6:8e:72:95:a2:5c:d0:85:25:bb:97:71:a4: 83:9f:6f:10:35:db:a3:69:1d:66:9e:6b:58:aa:57: 3d:93:1c:e1:02:39:18:54:55:52:07:80:70:7e:b5: e7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:43:E1:E9:94:6C:F0:DE:CC:35:62:CB:9C:86:44:8E:B8:08:7C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d118df3f-794e-3228-96d4-47a65b0baef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:25:87:5c:9e:03:67:da:27:2e:ac:f6:e7:c1:20:32:73:e5: 05:91:cb:85:db:46:8f:b3:5d:ed:bd:89:95:8c:3b:7f:0d:4c: 38:82:6d:be:36:bb:fc:2d:cd:33:29:26:2b:3d:48:07:af:87: 4f:72:7f:71:b2:a1:c0:20:33:29:6c:3a:6f:cb:b7:70:f2:c8: 87:9e:76:4f:e6:69:41:d8:6e:9f:e7:a9:92:f7:a0:e1:81:b7: bd:25:8d:9f:27:11:3b:dd:2e:9f:86:b2:4d:2b:95:77:05:63: e8:1e:70:06:8d:0b:9f:43:16:da:e6:26:2e:e8:95:b7:39:eb: fb:0a:e2:4d:00:49:29:ee:66:bc:76:2b:9d:d4:e0:da:41:a0: 97:68:36:18:b7:8c:f4:34:aa:46:d8:e6:7b:bd:49:36:f9:14: b1:eb:11:c0:d4:2e:b0:53:7f:d0:92:87:a5:f5:cd:7e:75:5a: 80:5f:ec:f2:05:42:f5:b3:2e:f1:33:6b:4e:48:a7:ec:f8:fd: 37:09:4b:88:9b:e6:c1:c5:10:70:b7:1e:ab:b0:24:ed:9f:6b: 5a:1a:46:fd:93:c7:e8:49:ed:3d:a8:d4:4d:b0:c1:80:ee:8e: f8:c0:18:cf:ce:df:ce:c4:04:46:76:55:fa:1f:d0:b0:45:b3: 9d:bc:9b:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISZg/oBqGU3xOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk OGNkOTk0MDItZWE3MS00MThkLWJhMjQtMTE2NjFhMWRiNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIrZ+Wd+oZW957IAY30VDVmoclCO/dH4bFP+ Bqj2xf/vgWznSA9cnkkAo9E2fMHiwQhMW9JfT/gmpHnShSh0QpHoa1NKzyU8UGje PSep2kHmgRp6vLVQvDucUTUGVTbalPXcxraPs9jf3DNkGn/+PYkdWAASbpqv5kwQ VxvPF9Xd92jib0ey+yxnyvwrMQEQ5LRmvCAfc7MxGg6fhoSpj3fQbxbb+/4XSgjc iLPu9YnxWl5c8sBgLZ1UHkmm9eNNWs3nA1sO5pFBs12RkMuYJm0mfraOcpWiXNCF JbuXcaSDn28QNdujaR1mnmtYqlc9kxzhAjkYVFVSB4BwfrXnaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZD4emUbPDezDViy5yGRI64CHxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDExOGRmM2YtNzk0ZS0z MjI4LTk2ZDQtNDdhNjViMGJhZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMlh1yeA2faJy6s9ufBIDJz5QWRy4XbRo+zXe29iZWMO38NTDiCbb42 u/wtzTMpJis9SAevh09yf3GyocAgMylsOm/Lt3DyyIeedk/maUHYbp/nqZL3oOGB t70ljZ8nETvdLp+Gsk0rlXcFY+gecAaNC59DFtrmJi7olbc56/sK4k0ASSnuZrx2 K53U4NpBoJdoNhi3jPQ0qkbY5nu9STb5FLHrEcDULrBTf9CSh6X1zX51WoBf7PIF QvWzLvEza05Ip+z4/TcJS4ib5sHFEHC3HquwJO2fa1oaRv2Tx+hJ7T2o1E2wwYDu jvjAGM/O387EBEZ2Vfof0LBFs528mzg= -----END CERTIFICATE-----Generated at Wed Aug 6 00:48:59 2025 by rpki-client