$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa File: d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa (raw, json) Hash identifier: JGXe7pTw/HvnJ+w8sBd6pz2AL9XapY4B2WaYCZ6qTb0= Subject key identifier: AA:F2:95:88:28:31:DD:E7:BE:4A:8D:6D:A3:90:13:27:8F:E5:81:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FBD7C1F50227517CF440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.20.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fb:d7:c1:f5:02:27:51:7c:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=48ca2588-d73f-45c0-9d2f-69b0963bca24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:8f:2a:dd:ea:c3:af:b4:b7:24:f9:d1:6c: 0e:d8:d9:03:c5:e4:6c:9b:9f:e2:20:2b:c6:25:30: b6:4e:0f:c2:f7:86:5b:34:bd:8b:99:fb:2a:74:f0: 11:12:42:91:2a:31:45:ec:7a:9b:b2:76:3c:fe:d6: 84:4b:fd:d3:de:01:13:64:6e:db:24:0d:1d:9b:8a: 6b:f9:7b:6e:ed:cc:3c:1a:36:e0:62:05:31:79:66: 78:f9:c2:01:43:94:f2:02:e6:80:0a:ce:a7:50:5f: b5:35:83:94:e3:c7:52:22:56:bf:3a:df:9d:d4:73: ba:7a:64:53:2e:e5:f1:2f:f6:66:08:a5:05:ef:eb: fa:4d:39:0a:06:17:35:9f:ac:8c:ac:ae:af:fc:e9: a4:f4:42:a3:4f:e9:ae:80:88:dd:a5:30:9a:82:c7: ad:5c:1f:14:c3:6e:ba:a4:41:b5:da:d6:9a:f5:65: 26:1a:6f:ca:bc:70:6d:8b:27:3a:e1:49:fd:5c:e8: fc:24:54:07:2a:3c:20:a7:35:c8:47:33:8a:63:13: 6c:8b:cb:1c:72:91:a4:90:54:eb:ea:f1:7b:43:98: ea:18:6c:ca:3a:a8:c6:25:6d:00:1a:5d:de:bb:9c: 0c:5a:2d:03:70:d6:4b:d6:bc:33:66:20:e4:26:39: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F2:95:88:28:31:DD:E7:BE:4A:8D:6D:A3:90:13:27:8F:E5:81:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d609d7d1-81e8-3703-9a12-a6f97a1bd624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:52:f1:e3:8a:d9:ae:ed:70:59:6c:58:35:08:4d:93:a7:ed: d5:19:22:71:fa:f1:b4:aa:d9:f8:8a:2f:30:86:d0:b8:b4:45: 2c:3d:7b:e7:df:63:d7:d7:a3:75:a0:a8:0a:b9:9f:c2:e8:69: 33:f2:5a:ae:84:8d:80:07:ac:d7:95:6f:52:72:38:2d:de:0f: ab:63:b9:8e:78:6e:c1:6d:45:b6:9f:09:b1:ba:e7:92:28:0d: 62:73:af:ef:57:d4:e3:e7:42:f1:a9:8e:f7:c8:29:4c:9c:6d: 59:26:34:ef:66:3a:f7:32:49:49:09:45:bf:c0:b6:bd:4c:2b: 0f:58:fa:ec:c3:fc:03:c9:4e:53:02:6d:1e:99:b5:97:0d:a7: 46:22:2d:11:ab:a5:0f:a3:53:5b:2a:c3:e0:e4:8d:b9:05:e1: 3d:b8:26:b5:58:76:ac:18:ef:7f:d5:81:08:99:5e:52:2d:ea: e6:c9:35:a3:33:66:d8:1f:6f:d2:dc:ef:9d:85:cb:b2:77:f0: 95:7a:64:e7:6d:a9:15:8e:ea:29:f4:fc:ef:4f:8a:88:11:97: 54:59:14:1e:54:64:a4:9a:ca:fb:0a:54:eb:f6:0f:11:f9:8c: e9:14:1e:34:a6:28:25:2f:3c:e8:25:d3:34:57:ed:f1:ea:50: ea:1f:12:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPvXwfUCJ1F89EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NDhjYTI1ODgtZDczZi00NWMwLTlkMmYtNjliMDk2M2JjYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu2PKt3qw6+0tyT50WwO2NkDxeRsm5/iICvG JTC2Tg/C94ZbNL2LmfsqdPAREkKRKjFF7HqbsnY8/taES/3T3gETZG7bJA0dm4pr +Xtu7cw8GjbgYgUxeWZ4+cIBQ5TyAuaACs6nUF+1NYOU48dSIla/Ot+d1HO6emRT LuXxL/ZmCKUF7+v6TTkKBhc1n6yMrK6v/Omk9EKjT+mugIjdpTCagsetXB8Uw266 pEG12taa9WUmGm/KvHBtiyc64Un9XOj8JFQHKjwgpzXIRzOKYxNsi8sccpGkkFTr 6vF7Q5jqGGzKOqjGJW0AGl3eu5wMWi0DcNZL1rwzZiDkJjncHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrylYgoMd3nvkqNbaOQEyeP5YGRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDYwOWQ3ZDEtODFlOC0z NzAzLTlhMTItYTZmOTdhMWJkNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYhQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1S8eOK2a7tcFlsWDUITZOn7dUZInH68bSq2fiKLzCG0Li0RSw9e+ff Y9fXo3WgqAq5n8LoaTPyWq6EjYAHrNeVb1JyOC3eD6tjuY54bsFtRbafCbG655Io DWJzr+9X1OPnQvGpjvfIKUycbVkmNO9mOvcySUkJRb/Atr1MKw9Y+uzD/APJTlMC bR6ZtZcNp0YiLRGrpQ+jU1sqw+DkjbkF4T24JrVYdqwY73/VgQiZXlIt6ubJNaMz Ztgfb9Lc752Fy7J38JV6ZOdtqRWO6in0/O9PiogRl1RZFB5UZKSayvsKVOv2DxH5 jOkUHjSmKCUvPOgl0zRX7fHqUOofEhk= -----END CERTIFICATE-----Generated at Wed Aug 6 04:10:24 2025 by rpki-client