$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de0d850c-b09a-3f82-9faf-277618cc2665.roa File: de0d850c-b09a-3f82-9faf-277618cc2665.roa (raw, json) Hash identifier: 69yeJD7XNaEPuk1AqZOixv7l/mEMTuWD6UY8yldpk0Y= Subject key identifier: 17:29:F2:2B:5D:12:38:55:D1:5C:96:2B:37:3D:89:53:14:C5:38:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8DD5F552B3B6BCD55C55FE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de0d850c-b09a-3f82-9faf-277618cc2665.roa Signing time: Fri 18 Jul 2025 01:00:48 +0000 ROA not before: Fri 18 Jul 2025 01:00:48 +0000 ROA not after: Thu 16 Oct 2025 01:00:48 +0000 asID: 7029 IP address blocks: 98.23.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8d:d5:f5:52:b3:b6:bc:d5:5c:55:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 18 01:00:48 2025 GMT Not After : Oct 16 01:00:48 2025 GMT Subject: CN=daf7d0e1-e9df-4ff1-bb20-cbf42170f2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:13:b9:d1:ae:fe:a2:64:c4:0d:f6:e8:fc: 95:0e:da:68:cf:13:da:91:15:e4:72:3d:e2:78:5e: bc:38:a6:7c:47:d8:c6:46:8b:48:ed:8f:fb:b6:96: e0:c4:2e:79:33:04:2b:91:c4:2a:c4:ce:86:6c:ac: 76:cc:e1:68:c1:1f:33:40:fe:09:d2:54:1f:3b:07: ce:6d:37:50:cd:5a:17:25:aa:ec:69:40:b0:2a:c7: 26:4e:ce:d6:1c:38:20:38:0f:64:4d:e2:ee:c8:ea: 78:bb:ba:2c:90:3c:37:9f:d8:47:2f:3d:2a:f7:5d: 7b:28:72:b4:b9:c5:80:b4:19:e8:ab:33:f6:eb:3c: 81:fb:df:da:a0:61:05:46:f9:d3:f2:40:9c:1f:86: 5a:c6:03:6f:bb:a1:76:ed:c0:74:cf:8a:19:61:bc: 63:9a:41:05:6b:dd:1e:0f:03:88:71:9c:03:d7:de: be:b6:31:ef:e6:41:f4:45:82:0e:b3:4d:b7:0d:f8: 73:f5:b5:25:0c:2b:3d:0d:1e:be:76:b5:33:d1:30: 77:66:3b:67:ff:73:ae:1e:e3:0e:89:11:e3:6c:27: cf:6d:46:98:90:1d:16:10:5f:12:dd:b0:15:c3:8c: 76:b2:c4:e5:57:a6:bb:78:91:35:c2:23:8c:6a:56: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:29:F2:2B:5D:12:38:55:D1:5C:96:2B:37:3D:89:53:14:C5:38:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de0d850c-b09a-3f82-9faf-277618cc2665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a7:f7:21:58:95:bd:28:42:9d:f2:e4:0f:a1:c5:55:24:4a: 06:f6:00:0e:72:5b:90:35:2d:45:ae:44:65:25:1f:d9:29:d7: 6f:f3:ec:d6:ec:e1:98:f8:f1:e4:3a:1f:f4:e3:56:c4:27:8a: 96:5a:6b:8c:1c:49:e5:4e:ab:6a:24:d2:f6:e5:38:9c:d0:9c: a8:cf:aa:32:ca:37:96:95:29:4a:9a:74:fa:84:f2:d3:21:29: 76:8d:dd:e1:b8:20:f4:70:57:4f:d7:09:cf:ab:55:b1:8a:02: ff:39:9a:30:e5:ec:88:ec:4d:14:f2:68:6f:01:1b:85:3e:be: dd:6a:13:ec:1f:83:4a:5b:87:e3:c2:1c:05:7e:24:47:d7:3c: 19:c3:7b:09:a2:19:af:12:23:63:5f:cb:6a:04:74:f4:4a:26: 53:64:be:91:c1:94:e9:8f:12:38:29:a9:83:80:5b:86:03:34: 68:36:ee:f3:c7:11:41:10:c4:b8:30:12:ce:b3:d8:4c:89:3d: 5a:71:4e:d2:56:37:b9:28:e5:bc:85:b4:38:3c:c3:a1:18:6f: 30:95:b6:b8:37:80:5b:1e:d5:56:82:b5:41:68:47:e9:b3:cb: 6d:78:f8:be:0d:54:ff:cb:6f:af:25:c7:0b:6d:45:48:5d:db: ee:dc:f4:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqN1fVSs7a81VxV/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk ZGFmN2QwZTEtZTlkZi00ZmYxLWJiMjAtY2JmNDIxNzBmMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRcTudGu/qJkxA326PyVDtpozxPakRXkcj3i eF68OKZ8R9jGRotI7Y/7tpbgxC55MwQrkcQqxM6GbKx2zOFowR8zQP4J0lQfOwfO bTdQzVoXJarsaUCwKscmTs7WHDggOA9kTeLuyOp4u7oskDw3n9hHLz0q9117KHK0 ucWAtBnoqzP26zyB+9/aoGEFRvnT8kCcH4ZaxgNvu6F27cB0z4oZYbxjmkEFa90e DwOIcZwD196+tjHv5kH0RYIOs023Dfhz9bUlDCs9DR6+drUz0TB3Zjtn/3OuHuMO iRHjbCfPbUaYkB0WEF8S3bAVw4x2ssTlV6a7eJE1wiOMalYS9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcp8itdEjhV0VyWKzc9iVMUxTjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGUwZDg1MGMtYjA5YS0z ZjgyLTlmYWYtMjc3NjE4Y2MyNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADun9yFYlb0oQp3y5A+hxVUkSgb2AA5yW5A1LUWuRGUlH9kp12/z7Nbs 4Zj48eQ6H/TjVsQnipZaa4wcSeVOq2ok0vblOJzQnKjPqjLKN5aVKUqadPqE8tMh KXaN3eG4IPRwV0/XCc+rVbGKAv85mjDl7IjsTRTyaG8BG4U+vt1qE+wfg0pbh+PC HAV+JEfXPBnDewmiGa8SI2Nfy2oEdPRKJlNkvpHBlOmPEjgpqYOAW4YDNGg27vPH EUEQxLgwEs6z2EyJPVpxTtJWN7ko5byFtDg8w6EYbzCVtrg3gFse1VaCtUFoR+mz y214+L4NVP/Lb68lxwttRUhd2+7c9Fs= -----END CERTIFICATE-----Generated at Wed Aug 6 13:09:51 2025 by rpki-client