$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfaab904-115f-365e-97be-f8c6cb0fec85.roa File: dfaab904-115f-365e-97be-f8c6cb0fec85.roa (raw, json) Hash identifier: r+xJtU1jLLmykVH2EdYqXItw803n+nSOzI8QzArgjhI= Subject key identifier: 47:3E:7D:00:4D:58:9F:E1:74:91:33:A2:37:C0:BD:B8:EB:33:B5:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B4C08B4927018C98F0F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfaab904-115f-365e-97be-f8c6cb0fec85.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 98.23.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:4c:08:b4:92:70:18:c9:8f:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=2b53035e-1f9d-4f40-94bb-2dee2f0eba4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:38:3c:bd:7a:0a:a3:c1:81:54:f6:c7:e1:b7: c9:4b:6e:39:71:a1:58:0f:cd:ee:bc:cc:b8:ba:d2: 12:3a:c0:51:d9:3c:9f:f8:30:8e:3a:08:c0:cb:4d: d8:b4:ef:a2:f0:fe:ee:65:aa:fc:c6:1c:99:f4:74: 8f:c1:33:65:0f:6d:e1:b6:9b:6c:55:1d:1b:6a:3c: 5c:a4:68:ed:9f:77:94:16:ea:d0:9e:b9:32:27:fe: cd:df:f3:5b:a9:eb:0c:85:ad:fd:79:2a:00:e0:bb: 69:a2:db:76:a2:e4:43:de:6d:10:bd:cf:d0:3a:e8: f7:0f:9f:d9:88:90:26:d3:55:c6:7c:d7:63:c3:63: d1:37:61:66:25:00:0e:3f:47:af:51:6e:43:9e:dc: ea:4e:7a:54:d7:3b:c3:0a:8a:e1:94:76:b3:21:45: ff:04:ac:b3:7b:eb:50:d9:d1:10:a3:ac:bb:e8:58: 16:45:d4:c1:30:5b:77:76:6a:e9:be:20:7a:ae:92: 7f:41:f7:ef:4a:62:be:49:d2:74:1c:b2:76:d7:c5: 2d:36:c8:43:4f:b6:4a:c9:e7:f9:eb:c6:bc:88:2f: 9b:c7:5c:e9:91:18:a0:97:27:77:c9:d2:00:88:e6: c3:74:19:07:08:91:d9:9d:08:6a:43:49:9a:c2:2b: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3E:7D:00:4D:58:9F:E1:74:91:33:A2:37:C0:BD:B8:EB:33:B5:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfaab904-115f-365e-97be-f8c6cb0fec85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:94:cc:1a:94:63:af:19:14:6f:3b:e2:08:91:18:7e:ed:3c: 0d:2a:20:00:65:96:dc:8c:cd:ea:41:fd:a8:46:28:ac:43:53: a2:7f:bb:34:f7:d4:ba:87:fa:d6:e4:1d:21:99:e8:a7:9e:d4: 4e:e5:e7:05:e1:ac:47:34:f6:80:b7:60:5b:27:fd:a4:cd:d1: b5:5b:f7:cf:55:79:f2:68:93:17:17:d1:54:d5:3c:2f:2a:e3: 92:c1:55:e3:96:2a:fd:2a:20:59:30:e4:10:bb:85:46:7a:a3: 7d:e1:5f:75:bb:6e:1c:ec:46:08:49:63:54:7d:5c:75:13:69: e9:da:be:1f:0d:72:5a:59:63:64:dd:50:ed:68:da:b6:e7:c4: 28:a7:71:d6:c0:28:7f:f1:2f:aa:e8:f5:16:c9:00:42:98:79: 81:cb:72:fb:0e:6f:11:40:ba:9a:ff:0e:32:d1:b7:e4:1c:33: 23:74:a4:67:18:f5:0d:f5:b4:85:a0:82:ed:c6:99:c4:75:53: e0:02:c8:75:65:09:45:b5:30:2b:74:58:4e:b4:29:b0:7f:5a: ec:b8:41:06:35:cd:31:63:04:a7:b1:ed:a5:b6:33:26:d0:6f: cf:61:f0:41:76:80:0f:94:e8:21:ce:69:02:84:d2:fe:a3:14: 9a:4c:49:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC0wItJJwGMmPD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MmI1MzAzNWUtMWY5ZC00ZjQwLTk0YmItMmRlZTJmMGViYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTg8vXoKo8GBVPbH4bfJS245caFYD83uvMy4 utISOsBR2Tyf+DCOOgjAy03YtO+i8P7uZar8xhyZ9HSPwTNlD23htptsVR0bajxc pGjtn3eUFurQnrkyJ/7N3/NbqesMha39eSoA4Ltpott2ouRD3m0Qvc/QOuj3D5/Z iJAm01XGfNdjw2PRN2FmJQAOP0evUW5DntzqTnpU1zvDCorhlHazIUX/BKyze+tQ 2dEQo6y76FgWRdTBMFt3dmrpviB6rpJ/QffvSmK+SdJ0HLJ218UtNshDT7ZKyef5 68a8iC+bx1zpkRiglyd3ydIAiObDdBkHCJHZnQhqQ0mawisRTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEc+fQBNWJ/hdJEzojfAvbjrM7VcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZhYWI5MDQtMTE1Zi0z NjVlLTk3YmUtZjhjNmNiMGZlYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYheQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOUzBqUY68ZFG874giRGH7tPA0qIABlltyMzepB/ahGKKxDU6J/uzT3 1LqH+tbkHSGZ6Kee1E7l5wXhrEc09oC3YFsn/aTN0bVb989VefJokxcX0VTVPC8q 45LBVeOWKv0qIFkw5BC7hUZ6o33hX3W7bhzsRghJY1R9XHUTaenavh8NclpZY2Td UO1o2rbnxCincdbAKH/xL6ro9RbJAEKYeYHLcvsObxFAupr/DjLRt+QcMyN0pGcY 9Q31tIWggu3GmcR1U+ACyHVlCUW1MCt0WE60KbB/Wuy4QQY1zTFjBKex7aW2MybQ b89h8EF2gA+U6CHOaQKE0v6jFJpMSbk= -----END CERTIFICATE-----Generated at Mon Aug 4 16:12:54 2025 by rpki-client