$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa File: d4d720d3-846d-3239-b157-4b6a59742d0f.roa (raw, json) Hash identifier: RLpc6cJVJ2qHk77/KYIrGQSBWu9JCKbPbRqz98V9KqM= Subject key identifier: 1A:BE:04:2E:1B:44:8B:A2:CF:5C:1E:74:CC:07:EF:ED:38:F7:46:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A761B61E8C061075DF505BB90 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 98.22.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:61:e8:c0:61:07:5d:f5:05:bb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=6edbb6ea-7314-431c-b502-029efc06f42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:78:14:76:74:ac:43:d8:6a:0f:ca:23:42: 75:34:2f:2f:60:af:3e:8f:7d:bf:3d:d2:3d:02:72: 4e:26:11:40:cf:20:6f:b3:38:10:97:27:22:2b:79: f7:58:a6:c2:b8:70:11:e8:78:a8:65:67:d7:63:45: d8:fd:6a:89:84:df:b1:d9:9f:fc:d9:2c:6c:69:bf: e4:7a:64:82:e5:de:b6:3f:4f:6a:bf:36:31:59:5e: 5b:b4:37:2e:57:50:cd:50:c2:18:31:7d:87:75:b9: 48:af:be:5e:53:a9:f1:3b:b8:2e:1c:f4:1f:f6:a3: ef:22:1a:38:89:30:a3:a1:a7:be:e3:cd:27:47:ae: db:65:ad:de:75:6a:48:c5:33:9a:a7:8c:87:3f:0e: f6:ed:4b:f3:04:44:fc:58:98:5f:e1:8e:2b:0c:20: 30:92:01:f1:54:33:b9:f2:5f:f8:f1:b8:35:17:b8: e6:32:83:e5:d4:5a:fb:8f:ba:19:d7:2a:1a:6c:4c: 9d:87:f1:c6:2a:33:71:fb:d4:6e:6d:ed:48:f0:12: 10:be:60:4f:0a:5f:95:e5:e7:55:70:1d:92:be:6f: 02:fc:f7:61:d9:c9:59:f9:e7:2d:ef:6a:0e:b0:de: 65:f9:2c:98:a2:34:8c:cf:8b:6e:8f:65:94:27:37: 14:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BE:04:2E:1B:44:8B:A2:CF:5C:1E:74:CC:07:EF:ED:38:F7:46:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4d720d3-846d-3239-b157-4b6a59742d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:42:76:37:32:8a:d2:52:63:eb:05:16:fc:1f:f3:28:9d:72: c5:0e:00:32:8a:3b:97:ab:ff:60:ec:41:be:ba:34:4e:3c:24: 60:ff:2f:5f:ba:5c:01:92:94:85:49:ad:42:1c:fb:34:b4:61: 7a:fb:bf:1e:91:bc:fc:28:ef:f9:0a:30:f9:8a:29:62:5a:f3: 94:b2:c4:1c:2d:5a:f3:62:17:c5:6f:98:a7:aa:7f:60:38:a2: 87:c6:97:82:cb:f4:f6:aa:0f:24:89:60:c2:8e:45:b9:48:5f: 05:9c:2e:80:bb:08:30:57:9b:bd:da:5a:d7:6f:f8:ef:ad:ce: 46:31:1e:da:70:d9:14:f4:d0:92:49:84:06:0a:37:47:52:3f: f2:b0:48:d1:35:b2:17:e0:42:cc:cf:e7:5f:4f:cf:f6:b4:9e: 1c:61:f8:79:e4:1a:08:02:d5:64:be:5f:e7:2f:8b:32:d4:66: ed:5e:ad:32:a5:b1:3b:a1:a8:e1:c3:d8:7d:1a:09:64:5e:d3: a7:fb:38:f3:66:16:66:85:35:5a:6d:bc:6a:97:aa:f3:b4:e4: 07:3f:2c:a7:57:12:36:d3:3a:71:ae:b4:d6:b2:a8:5f:61:e8: 7b:48:53:d2:9a:b0:ba:9e:22:4f:46:b6:d6:cd:8e:7a:d7:df: 48:bd:15:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G2HowGEHXfUFu5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk NmVkYmI2ZWEtNzMxNC00MzFjLWI1MDItMDI5ZWZjMDZmNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVx4FHZ0rEPYag/KI0J1NC8vYK8+j32/PdI9 AnJOJhFAzyBvszgQlyciK3n3WKbCuHAR6HioZWfXY0XY/WqJhN+x2Z/82Sxsab/k emSC5d62P09qvzYxWV5btDcuV1DNUMIYMX2HdblIr75eU6nxO7guHPQf9qPvIho4 iTCjoae+480nR67bZa3edWpIxTOap4yHPw727UvzBET8WJhf4Y4rDCAwkgHxVDO5 8l/48bg1F7jmMoPl1Fr7j7oZ1yoabEydh/HGKjNx+9Rube1I8BIQvmBPCl+V5edV cB2Svm8C/Pdh2clZ+ect72oOsN5l+SyYojSMz4tuj2WUJzcUwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBq+BC4bRIuiz1wedMwH7+0490ZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRkNzIwZDMtODQ2ZC0z MjM5LWIxNTctNGI2YTU5NzQyZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9CdjcyitJSY+sFFvwf8yidcsUOADKKO5er/2DsQb66NE48JGD/L1+6 XAGSlIVJrUIc+zS0YXr7vx6RvPwo7/kKMPmKKWJa85SyxBwtWvNiF8VvmKeqf2A4 oofGl4LL9PaqDySJYMKORblIXwWcLoC7CDBXm73aWtdv+O+tzkYxHtpw2RT00JJJ hAYKN0dSP/KwSNE1shfgQszP519Pz/a0nhxh+HnkGggC1WS+X+cvizLUZu1erTKl sTuhqOHD2H0aCWRe06f7OPNmFmaFNVptvGqXqvO05Ac/LKdXEjbTOnGutNayqF9h 6HtIU9KasLqeIk9GttbNjnrX30i9FXw= -----END CERTIFICATE-----Generated at Wed Aug 6 05:58:41 2025 by rpki-client